$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa File: e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa (raw, json) Hash identifier: C9zTGLPw4vTSR6FUZdQD5Wrgt62+Z/aYE8gCdWq6JYc= Subject key identifier: 0B:57:48:2B:F6:06:55:4A:41:C9:47:29:65:B0:3A:16:5B:F6:59:C3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB873B53B89F9A2B7812E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa Signing time: Thu 24 Apr 2025 11:16:49 +0000 ROA not before: Thu 24 Apr 2025 11:16:49 +0000 ROA not after: Wed 23 Jul 2025 11:16:49 +0000 asID: 12041 IP address blocks: 161.232.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:87:3b:53:b8:9f:9a:2b:78:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:49 2025 GMT Not After : Jul 23 11:16:49 2025 GMT Subject: CN=25988b52-1aec-4534-a605-771b8c742eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:5e:79:08:f4:0e:8f:4b:bc:57:26:3c:c9: c1:e1:94:0e:e1:0a:ae:df:77:a1:28:e8:e5:6f:47: 24:82:8a:d9:01:96:cf:b2:f0:9e:63:e5:6d:78:62: 11:cc:83:c2:c1:e2:9e:f5:7d:1b:50:c3:7e:c0:06: 4f:81:2d:23:f7:cc:87:44:2f:b1:40:e5:8b:11:ac: f3:88:fe:a8:5a:e0:b7:61:22:22:b8:1e:f2:fd:86: fb:11:0f:af:61:29:32:1a:9f:ae:1f:b2:59:c5:04: 61:ed:10:f1:8e:ff:34:31:40:1b:5c:bc:ba:24:65: da:82:de:a4:9b:d1:a2:fb:8a:2b:a8:51:f4:9b:94: f9:d5:95:76:af:f4:44:1e:b0:0b:c6:4a:7d:4b:01: e9:12:83:33:35:a7:a0:8e:9d:26:98:42:3c:62:d5: 3d:db:df:3a:12:be:a0:89:81:37:7a:44:79:6a:2d: b4:7d:e2:f7:8f:31:a7:ce:79:d5:1b:e8:48:60:ce: 1d:d2:86:81:fe:37:b8:e7:e2:fb:e5:1d:1b:bd:ee: 0f:5f:40:6c:dd:cf:45:9d:73:9e:45:d3:0f:a0:04: f7:f2:08:c9:63:68:7d:25:71:a9:48:05:2d:17:20: 7d:f0:e7:54:97:0b:af:6e:ac:28:76:85:cb:23:d8: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:48:2B:F6:06:55:4A:41:C9:47:29:65:B0:3A:16:5B:F6:59:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:82:54:90:6b:e3:82:df:4a:74:89:1e:04:cd:e6:74:6c:fc: 7e:1c:ce:1a:24:70:44:e2:a8:94:19:ff:06:b1:2c:f4:c6:67: 62:c8:24:f7:5a:79:6a:d9:02:d7:ec:4d:d7:ba:1b:aa:92:61: 5b:61:8d:13:46:fe:20:5d:88:5e:ff:ab:6d:65:ce:d6:7d:1d: 70:32:09:4d:3d:ab:34:67:f2:f4:57:0f:6d:42:c8:f9:64:2a: 14:ba:75:0e:ef:b3:59:f0:db:86:cc:87:f5:40:3a:22:9c:5c: 0e:d0:b2:cb:14:e5:73:54:ed:a0:17:2d:6e:29:a2:7c:64:ba: 8a:2b:5e:ab:a3:a2:d5:f2:8c:84:9c:7d:ed:50:2b:be:d7:35: af:c2:f5:5e:aa:da:bf:a4:59:92:96:e8:92:76:2c:18:cc:32: e2:9a:cd:a0:91:94:55:d7:de:3c:aa:ef:09:5c:60:8c:6e:d4: 6f:54:63:e8:ea:8c:b1:43:4c:cc:e9:16:4e:6d:c8:69:6b:e0: 24:55:5b:02:55:95:b0:d7:81:66:11:90:df:61:83:bc:99:70: d7:5c:28:19:02:02:0a:33:18:ee:fb:ed:fe:45:9e:ae:a6:5b: 50:7a:2a:89:12:fc:9f:28:34:58:19:0f:81:9a:30:91:9f:60: 58:fa:e8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu4c7U7ifmit4EuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0OVoXDTI1MDcyMzExMTY0OVowLzEtMCsGA1UEAxMk MjU5ODhiNTItMWFlYy00NTM0LWE2MDUtNzcxYjhjNzQyZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFdeeQj0Do9LvFcmPMnB4ZQO4Qqu33ehKOjl b0ckgorZAZbPsvCeY+VteGIRzIPCweKe9X0bUMN+wAZPgS0j98yHRC+xQOWLEazz iP6oWuC3YSIiuB7y/Yb7EQ+vYSkyGp+uH7JZxQRh7RDxjv80MUAbXLy6JGXagt6k m9Gi+4orqFH0m5T51ZV2r/REHrALxkp9SwHpEoMzNaegjp0mmEI8YtU92986Er6g iYE3ekR5ai20feL3jzGnznnVG+hIYM4d0oaB/je45+L75R0bve4PX0Bs3c9FnXOe RdMPoAT38gjJY2h9JXGpSAUtFyB98OdUlwuvbqwodoXLI9gTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtXSCv2BlVKQclHKWWwOhZb9lnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVhZGFmN2QtZDc1MC0z NWE0LWJiY2QtZTlhNWYwODUzZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOCVJBr44LfSnSJHgTN5nRs/H4czhokcETiqJQZ/waxLPTGZ2LIJPda eWrZAtfsTde6G6qSYVthjRNG/iBdiF7/q21lztZ9HXAyCU09qzRn8vRXD21CyPlk KhS6dQ7vs1nw24bMh/VAOiKcXA7QsssU5XNU7aAXLW4ponxkuoorXqujotXyjISc fe1QK77XNa/C9V6q2r+kWZKW6JJ2LBjMMuKazaCRlFXX3jyq7wlcYIxu1G9UY+jq jLFDTMzpFk5tyGlr4CRVWwJVlbDXgWYRkN9hg7yZcNdcKBkCAgozGO777f5Fnq6m W1B6KokS/J8oNFgZD4GaMJGfYFj66LA= -----END CERTIFICATE-----Generated at Tue Apr 29 21:05:22 2025 by rpki-client