$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa File: e1972a51-3a87-356d-9a0a-7156bfd2d564.roa (raw, json) Hash identifier: lR4d18g4Vt8MkZgS/xcxASH2FOQBFB1rKVy837DZS18= Subject key identifier: 6F:F4:97:93:74:FF:50:3C:68:32:E8:7A:CB:23:B9:08:84:09:61:92 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21295F66AE62D4F7CB9F300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa Signing time: Thu 24 Apr 2025 14:12:14 +0000 ROA not before: Thu 24 Apr 2025 14:12:14 +0000 ROA not after: Wed 23 Jul 2025 14:12:14 +0000 asID: 207266 IP address blocks: 161.232.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:95:f6:6a:e6:2d:4f:7c:b9:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:14 2025 GMT Not After : Jul 23 14:12:14 2025 GMT Subject: CN=480ed18c-7291-4845-a66a-86da8aa90015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:a3:c0:d0:b4:58:85:95:75:36:c7:dc:33: 0f:92:8b:94:fc:f0:e7:64:83:3f:f4:87:06:8f:4c: 1d:d9:0c:1f:c1:66:dc:59:dc:69:3b:61:50:ca:59: 46:5f:f2:8d:e9:48:16:d5:48:98:94:54:ff:bf:5c: e2:09:7c:c0:1e:03:fa:97:6f:a8:b0:2b:23:c7:63: 6f:21:f8:24:66:08:18:17:8b:c1:fe:6e:e2:ce:a6: d8:76:6a:30:43:c6:b1:d9:c1:80:d2:ca:a6:a0:22: 95:9c:20:03:6c:4b:58:8b:4a:9a:6c:c7:ca:37:f4: 4b:7c:99:76:cd:0e:ff:a2:9f:9a:56:f0:8e:bb:e1: 2d:fb:dd:a0:3c:40:f9:b8:c0:9a:b7:66:7f:c4:ac: aa:a5:e2:4e:cf:39:ba:58:a9:90:bf:f6:f1:61:f3: f8:9f:a0:fa:97:4b:fe:01:27:d9:8b:3e:84:33:dd: 8d:5b:2e:cc:aa:00:65:bf:c9:28:99:75:f3:63:8b: 1d:65:96:c9:56:dc:ad:0a:02:5d:d0:3f:ab:0e:2f: ba:86:f1:c7:a8:48:47:07:84:83:3c:8b:19:6e:70: 76:95:b5:57:ba:ba:d5:22:e7:44:55:e6:4e:8d:cf: ef:9a:f5:b5:0e:80:f2:e0:c9:00:e2:a3:6b:7c:eb: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F4:97:93:74:FF:50:3C:68:32:E8:7A:CB:23:B9:08:84:09:61:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:16:af:95:4d:f5:c2:b4:07:73:db:3e:c8:47:7c:b2:3e:36: 8f:8d:b5:3f:92:3e:75:1b:32:86:0a:a4:9f:7b:ef:0d:35:d5: 6d:c0:41:74:1e:86:26:f6:3e:98:4e:c1:36:bd:c6:67:09:8f: b3:06:53:aa:66:22:cd:10:2d:0d:3b:24:2f:c3:3d:fe:19:7f: ea:67:4e:b6:6f:35:90:ca:01:a5:90:36:29:a9:b2:9d:0f:8a: 69:25:9c:f9:49:87:8b:87:94:2c:2d:9d:e5:35:55:fc:53:c0: 42:39:cd:64:c3:92:ff:dc:c4:18:37:b4:4d:72:72:20:0f:fc: 47:2f:af:b6:c1:20:da:09:0d:dd:c3:7c:1c:b8:7a:15:92:90: 1c:b8:c5:81:02:82:1d:9d:15:0a:da:52:d2:e8:43:1c:4e:7f: b7:0e:c1:69:c7:b5:50:30:4c:dc:92:b5:06:d0:65:7e:ff:df: 15:d7:f2:bd:9b:27:53:73:70:70:24:53:0c:42:6f:b7:21:bb: e1:b3:22:8d:13:b3:e2:2c:76:a1:46:b1:ae:e0:c7:93:95:68: 02:1d:0b:c6:83:66:06:65:72:88:ac:e8:8e:6c:d2:13:9c:b8: a4:05:d9:18:b7:a7:0a:a4:94:0c:18:64:ec:2b:ad:8d:2d:8e: 03:c2:fb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEpX2auYtT3y58wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTIxNFoXDTI1MDcyMzE0MTIxNFowLzEtMCsGA1UEAxMk NDgwZWQxOGMtNzI5MS00ODQ1LWE2NmEtODZkYThhYTkwMDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRmjwNC0WIWVdTbH3DMPkouU/PDnZIM/9IcG j0wd2QwfwWbcWdxpO2FQyllGX/KN6UgW1UiYlFT/v1ziCXzAHgP6l2+osCsjx2Nv IfgkZggYF4vB/m7izqbYdmowQ8ax2cGA0sqmoCKVnCADbEtYi0qabMfKN/RLfJl2 zQ7/op+aVvCOu+Et+92gPED5uMCat2Z/xKyqpeJOzzm6WKmQv/bxYfP4n6D6l0v+ ASfZiz6EM92NWy7MqgBlv8komXXzY4sdZZbJVtytCgJd0D+rDi+6hvHHqEhHB4SD PIsZbnB2lbVXurrVIudEVeZOjc/vmvW1DoDy4MkA4qNrfOvNeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/0l5N0/1A8aDLoessjuQiECWGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE5NzJhNTEtM2E4Ny0z NTZkLTlhMGEtNzE1NmJmZDJkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEWr5VN9cK0B3PbPshHfLI+No+NtT+SPnUbMoYKpJ977w011W3AQXQe hib2PphOwTa9xmcJj7MGU6pmIs0QLQ07JC/DPf4Zf+pnTrZvNZDKAaWQNimpsp0P imklnPlJh4uHlCwtneU1VfxTwEI5zWTDkv/cxBg3tE1yciAP/Ecvr7bBINoJDd3D fBy4ehWSkBy4xYECgh2dFQraUtLoQxxOf7cOwWnHtVAwTNyStQbQZX7/3xXX8r2b J1NzcHAkUwxCb7chu+GzIo0Ts+IsdqFGsa7gx5OVaAIdC8aDZgZlcois6I5s0hOc uKQF2Ri3pwqklAwYZOwrrY0tjgPC+3s= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:17 2025 by rpki-client