$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa File: d4cd4395-df66-327b-a2b7-1802e16dab55.roa (raw, json) Hash identifier: lUV61pA2PyRNulg617W9LreWVuyaWEytoR+WZlBzSRY= Subject key identifier: 88:0D:C4:ED:0D:C1:83:02:8E:57:79:0F:71:49:D4:D8:32:03:A8:22 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB5628AFE29BC22FA276A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa Signing time: Thu 24 Apr 2025 11:16:26 +0000 ROA not before: Thu 24 Apr 2025 11:16:26 +0000 ROA not after: Wed 23 Jul 2025 11:16:26 +0000 asID: 12041 IP address blocks: 161.232.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:56:28:af:e2:9b:c2:2f:a2:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:26 2025 GMT Not After : Jul 23 11:16:26 2025 GMT Subject: CN=d6b4518d-27ac-47d9-ab17-303c58ac7535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:2d:f0:00:08:6a:a7:9d:63:30:f0:fb:74: 47:1d:f7:06:01:3c:9b:be:93:eb:cb:45:5d:40:a0: 1e:fe:e4:b4:25:fc:3e:9e:07:71:59:38:a8:6b:23: 88:b5:2e:4e:9c:80:4a:64:91:4a:81:90:bf:3f:50: 33:ce:fa:cb:3d:ef:6d:59:43:01:99:3e:4a:2d:56: 8f:78:9d:67:b1:3a:c3:c8:07:ce:07:40:7b:d3:73: 90:c3:7f:fe:1b:68:3f:76:fd:b2:ee:79:f9:08:f8: c9:b8:6b:c0:67:75:03:a9:cf:49:9d:49:e4:46:68: 27:94:02:fa:e2:25:4c:8e:65:7a:31:58:ae:0f:ff: 52:df:19:22:f6:0f:fb:bf:b2:3f:c2:06:e4:54:a3: 81:42:59:5e:ac:97:5e:64:ee:ea:0f:52:b4:83:90: 02:dc:1d:9f:56:76:41:54:93:b8:cf:93:b5:f4:a4: 48:d4:07:95:10:48:80:00:b0:5b:7e:01:47:8c:78: f4:ad:59:d9:0f:07:88:5c:61:d4:11:06:58:53:2f: de:94:32:ab:49:bd:97:e0:7d:2f:09:ff:c9:ce:8b: 2f:9f:d9:31:d1:6f:2d:fd:21:2a:65:84:47:71:26: f8:cb:48:61:a7:8f:2b:94:7c:c0:74:c6:5a:aa:7c: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:C4:ED:0D:C1:83:02:8E:57:79:0F:71:49:D4:D8:32:03:A8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:35:10:e4:e6:5b:06:04:d1:f5:99:3d:71:2a:ff:15:7e:1b: b4:a1:98:c0:61:b7:fc:c3:0d:bf:da:9a:96:e9:0d:13:b5:bc: e3:b9:6c:9a:bb:81:2f:11:bc:65:05:dd:8c:a4:50:85:d1:47: 64:de:7e:26:81:89:b6:25:b4:a2:dc:8b:68:38:b6:1c:20:f3: 6d:49:91:7c:ba:9f:3f:53:af:87:13:e4:c2:83:5e:73:32:a2: a9:45:82:1f:ca:d7:97:9a:5e:fc:96:0f:aa:51:14:c6:49:49: 28:50:c0:2f:2f:3f:60:fa:0c:b3:2b:01:02:80:d5:e1:22:6a: 69:3c:4a:c4:9b:6f:3a:fe:f6:07:aa:63:d6:97:64:01:f1:91: 68:cc:ec:fa:15:de:61:e3:b7:0e:b2:f5:9f:52:b3:00:64:3e: e6:8a:e9:07:76:96:9c:34:ba:2a:f0:60:b5:ce:52:e9:8a:f9: 2b:1b:10:8c:80:26:f9:d4:c1:8b:04:da:e6:cc:c3:96:a5:0c: 67:f6:c9:c0:09:5f:74:a7:fb:02:00:aa:f6:1f:ab:49:0f:6d: f6:5d:93:47:a8:1d:5b:b9:f2:9d:7b:4a:8a:12:84:f0:98:71: aa:fa:b6:90:e0:c3:d3:fc:3d:89:84:95:f2:fc:46:48:12:c2: 5c:10:e2:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu1Yor+Kbwi+idqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyNloXDTI1MDcyMzExMTYyNlowLzEtMCsGA1UEAxMk ZDZiNDUxOGQtMjdhYy00N2Q5LWFiMTctMzAzYzU4YWM3NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZst8AAIaqedYzDw+3RHHfcGATybvpPry0Vd QKAe/uS0Jfw+ngdxWTioayOItS5OnIBKZJFKgZC/P1AzzvrLPe9tWUMBmT5KLVaP eJ1nsTrDyAfOB0B703OQw3/+G2g/dv2y7nn5CPjJuGvAZ3UDqc9JnUnkRmgnlAL6 4iVMjmV6MViuD/9S3xki9g/7v7I/wgbkVKOBQllerJdeZO7qD1K0g5AC3B2fVnZB VJO4z5O19KRI1AeVEEiAALBbfgFHjHj0rVnZDweIXGHUEQZYUy/elDKrSb2X4H0v Cf/Jzosvn9kx0W8t/SEqZYRHcSb4y0hhp48rlHzAdMZaqnxXbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgNxO0NwYMCjld5D3FJ1NgyA6giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDRjZDQzOTUtZGY2Ni0z MjdiLWEyYjctMTgwMmUxNmRhYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw1EOTmWwYE0fWZPXEq/xV+G7ShmMBht/zDDb/ampbpDRO1vOO5bJq7 gS8RvGUF3YykUIXRR2TefiaBibYltKLci2g4thwg821JkXy6nz9Tr4cT5MKDXnMy oqlFgh/K15eaXvyWD6pRFMZJSShQwC8vP2D6DLMrAQKA1eEiamk8SsSbbzr+9geq Y9aXZAHxkWjM7PoV3mHjtw6y9Z9SswBkPuaK6Qd2lpw0uirwYLXOUumK+SsbEIyA JvnUwYsE2ubMw5alDGf2ycAJX3Sn+wIAqvYfq0kPbfZdk0eoHVu58p17SooShPCY car6tpDgw9P8PYmElfL8RkgSwlwQ4og= -----END CERTIFICATE-----Generated at Wed Apr 30 01:40:50 2025 by rpki-client