$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa File: e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa (raw, json) Hash identifier: prUcw09v4UMiU7xRHLEkVDpkdVpPYARSRJpbzySsE4A= Subject key identifier: 81:9F:7A:6A:8B:40:62:56:30:15:97:E6:52:72:C2:B3:5C:40:6D:68 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB44180814C43E6231E800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa Signing time: Thu 24 Apr 2025 11:16:17 +0000 ROA not before: Thu 24 Apr 2025 11:16:17 +0000 ROA not after: Wed 23 Jul 2025 11:16:17 +0000 asID: 12041 IP address blocks: 161.232.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:44:18:08:14:c4:3e:62:31:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:17 2025 GMT Not After : Jul 23 11:16:17 2025 GMT Subject: CN=5c052af4-9e5c-49ba-aa36-a5f02386daba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:de:ab:20:c0:25:30:fe:69:03:11:72:c2: 73:b6:a5:e6:31:e3:6d:26:e1:fc:66:78:06:c1:c3: a6:dd:6e:9e:35:b4:7f:03:a6:e0:31:ed:84:87:ae: 82:b1:c0:cd:40:0a:b8:59:c3:d7:ea:4b:0f:14:90: 9f:ec:f3:71:d6:97:63:12:1f:cc:a1:01:17:fe:c2: 4f:a0:94:2e:f5:81:16:ed:5a:98:7a:3e:95:35:40: bd:e2:c9:c0:b2:2a:7a:d0:88:31:51:d0:29:50:9e: 41:76:bc:1b:6d:d3:7b:0a:9f:5d:12:fe:ba:28:75: ab:3c:43:1a:c2:e7:cf:56:08:60:21:6a:cf:07:bc: 87:49:84:21:4f:a7:ba:d8:7e:05:52:5f:66:b3:15: 7a:ed:a2:b7:b0:38:b8:97:17:95:f5:2f:ee:99:ff: a4:f3:be:37:ad:a0:8b:3c:6a:22:1a:b8:c6:d8:c8: 5d:ff:1c:1a:b2:de:1a:fe:41:fb:22:6b:9b:8b:bf: 10:e7:6e:a1:d0:40:ad:df:5d:a9:c2:88:d9:c1:4a: cb:2c:6e:85:06:49:a1:cc:a8:35:b5:8b:16:7b:2d: 3d:8d:d2:74:57:a8:56:7c:a1:f2:c2:96:e8:96:e9: 9d:20:90:c4:96:f0:77:2b:93:e3:9d:c8:24:51:f8: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9F:7A:6A:8B:40:62:56:30:15:97:E6:52:72:C2:B3:5C:40:6D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:61:7f:ec:cc:82:89:ca:8c:90:cd:d0:58:c7:ec:35:8b:bf: ca:6f:be:71:bc:7e:b4:b9:aa:5a:e8:20:c5:71:b7:df:96:22: 1c:71:2e:22:9a:1a:77:72:d9:48:db:4d:41:fa:08:60:10:c7: 82:35:b5:f7:48:4c:ad:85:ff:a7:99:d7:f5:99:99:3e:eb:57: 6f:b2:35:75:84:23:77:be:ad:ae:e9:1a:47:ea:2a:c4:f0:50: 04:22:4e:d2:64:63:b0:eb:4f:f9:14:25:8f:3d:e3:d8:eb:82: 0a:ab:e8:40:34:26:45:b3:12:57:d8:6e:bb:ed:af:c2:ce:65: b5:15:27:26:24:4f:87:8d:09:4a:56:01:b2:e0:6e:ab:b4:4c: df:e5:d2:f9:22:12:41:23:2a:d7:f7:42:9d:70:fd:8b:c1:bb: fd:17:31:62:b6:1c:1d:83:d4:22:89:44:92:f8:e0:41:34:47: 9d:91:ad:9e:31:c5:94:6c:2b:ba:f9:c3:55:3f:16:1e:eb:16: 13:be:e0:aa:2a:a4:a4:ff:73:16:56:60:eb:16:26:df:b8:46: 25:3b:61:46:83:1a:e3:cc:66:db:04:03:89:44:9e:8d:64:62: 00:88:dd:12:19:2e:3d:dd:0e:79:62:a3:9d:96:10:cc:18:05: b6:b2:12:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu0QYCBTEPmIx6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYxN1oXDTI1MDcyMzExMTYxN1owLzEtMCsGA1UEAxMk NWMwNTJhZjQtOWU1Yy00OWJhLWFhMzYtYTVmMDIzODZkYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCveqyDAJTD+aQMRcsJztqXmMeNtJuH8ZngG wcOm3W6eNbR/A6bgMe2Eh66CscDNQAq4WcPX6ksPFJCf7PNx1pdjEh/MoQEX/sJP oJQu9YEW7VqYej6VNUC94snAsip60IgxUdApUJ5BdrwbbdN7Cp9dEv66KHWrPEMa wufPVghgIWrPB7yHSYQhT6e62H4FUl9msxV67aK3sDi4lxeV9S/umf+k8743raCL PGoiGrjG2Mhd/xwast4a/kH7Imubi78Q526h0ECt312pwojZwUrLLG6FBkmhzKg1 tYsWey09jdJ0V6hWfKHywpbolumdIJDElvB3K5PjncgkUfj0ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGfemqLQGJWMBWX5lJywrNcQG1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVlNDllOWQtOWZlNS0z MzMzLWIwNmQtYTQ1ZGVmNTAwYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxhf+zMgonKjJDN0FjH7DWLv8pvvnG8frS5qlroIMVxt9+WIhxxLiKa Gndy2UjbTUH6CGAQx4I1tfdITK2F/6eZ1/WZmT7rV2+yNXWEI3e+ra7pGkfqKsTw UAQiTtJkY7DrT/kUJY8949jrggqr6EA0JkWzElfYbrvtr8LOZbUVJyYkT4eNCUpW AbLgbqu0TN/l0vkiEkEjKtf3Qp1w/YvBu/0XMWK2HB2D1CKJRJL44EE0R52RrZ4x xZRsK7r5w1U/Fh7rFhO+4KoqpKT/cxZWYOsWJt+4RiU7YUaDGuPMZtsEA4lEno1k YgCI3RIZLj3dDnlio52WEMwYBbayEow= -----END CERTIFICATE-----Generated at Wed Apr 30 05:38:57 2025 by rpki-client