$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa File: eaf44f97-1815-370f-85ae-5c98c59072b6.roa (raw, json) Hash identifier: lS0ahOcprrJKMpGzAmDr+N1ol8rypUVQcGVZCSi06uk= Subject key identifier: C6:83:1B:3F:8B:32:53:7C:20:DA:AC:86:6C:77:70:40:E2:BF:02:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB85C324F22E0C01E77E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa Signing time: Thu 24 Apr 2025 11:16:48 +0000 ROA not before: Thu 24 Apr 2025 11:16:48 +0000 ROA not after: Wed 23 Jul 2025 11:16:48 +0000 asID: 12041 IP address blocks: 161.232.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:85:c3:24:f2:2e:0c:01:e7:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:48 2025 GMT Not After : Jul 23 11:16:48 2025 GMT Subject: CN=849fe3e0-a3a7-4385-a77d-aed15c6d1cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:98:7b:7c:ab:3a:22:81:95:4f:36:38:3d: 54:92:f9:3c:05:00:2d:84:df:26:b4:ae:c5:d8:1b: a3:b1:35:76:b4:97:9b:de:90:d0:96:ef:70:16:6c: 65:d7:5f:76:60:e4:69:b4:0c:b0:58:0a:5b:36:7a: 51:30:52:49:e7:de:80:ff:0c:1e:e4:7a:77:73:d4: 1b:00:55:82:f9:6e:a7:38:32:95:29:fa:9e:12:9f: be:b9:7c:89:38:66:71:fa:e5:e7:d0:03:72:32:86: 05:0b:01:38:a3:6b:dc:8f:62:68:46:04:a8:ef:e9: 22:c8:f5:50:11:e2:d9:23:14:5f:db:24:8a:48:40: 42:77:c8:79:4c:25:f0:11:ae:05:a7:d3:19:fe:b1: ce:1a:05:7c:f9:7e:74:7e:0e:3c:35:22:d2:0b:cc: f3:c5:a3:62:74:f6:51:db:d7:45:b5:b9:19:92:10: 36:cd:e2:3a:bd:19:a2:ef:db:e2:48:6b:cf:71:1d: 00:e3:dd:76:da:6b:c5:28:d5:63:1c:d9:94:90:7c: 9e:66:3d:be:74:b5:ff:b7:f5:2f:6e:d6:24:5c:b9: e7:c4:25:ef:54:2f:53:82:91:52:58:da:1d:ec:65: 97:17:66:30:64:d2:45:20:99:41:f1:bb:f9:29:f1: 9f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:83:1B:3F:8B:32:53:7C:20:DA:AC:86:6C:77:70:40:E2:BF:02:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e2:c3:98:05:65:7e:7c:cf:73:fd:d5:4c:ef:b5:08:79:b1: bc:70:3a:58:f7:5b:17:17:d4:7e:93:8d:27:11:1e:fc:43:00: 8e:17:8a:f6:e6:75:79:48:a8:52:39:e4:94:ce:5b:73:b6:e3: ed:e9:33:2a:ef:11:8d:f8:e3:ed:88:a3:f2:1a:86:7f:2b:55: 4f:67:bf:af:da:8a:b2:df:6a:b6:d4:e8:13:a0:7f:53:85:17: cc:0e:88:73:9b:5a:b9:4c:a6:ab:22:25:10:f0:03:97:e5:72: e8:61:c1:8d:c5:b4:0b:a6:e1:03:b5:3e:e5:3c:49:49:d8:8b: c2:9a:93:07:e7:72:2b:75:f0:7b:b0:3c:fc:83:13:ea:ca:a5: 95:86:30:02:ea:55:0f:e1:24:db:b7:c3:0e:ea:0c:e7:f6:ba: 26:02:ee:4d:49:4b:1b:b0:56:27:57:17:cd:4c:35:af:92:94: 98:44:d0:bf:24:37:6d:3f:f8:25:e8:42:0f:75:70:a1:4f:35: 9e:d3:bc:fc:b4:d7:97:2d:13:5a:03:c8:64:d1:3a:b2:cb:fe: 76:3e:f8:c3:89:1e:ca:e8:81:86:a9:57:3a:82:ef:22:a6:d1: b9:e5:24:00:03:eb:a3:78:96:53:63:bf:32:c7:f8:4e:4c:8a: ae:da:2c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu4XDJPIuDAHnfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0OFoXDTI1MDcyMzExMTY0OFowLzEtMCsGA1UEAxMk ODQ5ZmUzZTAtYTNhNy00Mzg1LWE3N2QtYWVkMTVjNmQxY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWYe3yrOiKBlU82OD1Ukvk8BQAthN8mtK7F 2BujsTV2tJeb3pDQlu9wFmxl1192YORptAywWApbNnpRMFJJ596A/wwe5Hp3c9Qb AFWC+W6nODKVKfqeEp++uXyJOGZx+uXn0ANyMoYFCwE4o2vcj2JoRgSo7+kiyPVQ EeLZIxRf2ySKSEBCd8h5TCXwEa4Fp9MZ/rHOGgV8+X50fg48NSLSC8zzxaNidPZR 29dFtbkZkhA2zeI6vRmi79viSGvPcR0A49122mvFKNVjHNmUkHyeZj2+dLX/t/Uv btYkXLnnxCXvVC9TgpFSWNod7GWXF2YwZNJFIJlB8bv5KfGfnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaDGz+LMlN8INqshmx3cEDivwLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWFmNDRmOTctMTgxNS0z NzBmLTg1YWUtNWM5OGM1OTA3MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7iw5gFZX58z3P91UzvtQh5sbxwOlj3WxcX1H6TjScRHvxDAI4Xivbm dXlIqFI55JTOW3O24+3pMyrvEY344+2Io/Iahn8rVU9nv6/airLfarbU6BOgf1OF F8wOiHObWrlMpqsiJRDwA5flcuhhwY3FtAum4QO1PuU8SUnYi8Kakwfncit18Huw PPyDE+rKpZWGMALqVQ/hJNu3ww7qDOf2uiYC7k1JSxuwVidXF81MNa+SlJhE0L8k N20/+CXoQg91cKFPNZ7TvPy015ctE1oDyGTROrLL/nY++MOJHsrogYapVzqC7yKm 0bnlJAAD66N4llNjvzLH+E5Miq7aLJ8= -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:10 2025 by rpki-client