$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa File: efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa (raw, json) Hash identifier: OkqfVVP84lZkDs7CyvgHb5RE3AOnB5lG4ywR26isu8o= Subject key identifier: 5A:9F:B9:BE:AB:5C:CD:8C:E7:38:FA:AD:D1:89:51:A8:EA:8F:74:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461F02CF542CC0D1FFFBC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1f:02:cf:54:2c:c0:d1:ff:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f9585a7b-fbde-4db8-a33c-6cc84ed7d802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c0:10:48:ee:85:38:f2:1c:bc:e9:32:0e:29: af:59:4c:e0:42:77:6b:8e:e4:44:14:36:e3:35:70: cc:65:d2:10:11:85:d4:de:12:d7:53:7b:d0:2a:fc: 4e:31:25:ea:9f:96:f4:67:46:e4:db:20:58:ae:37: 11:19:04:eb:07:7d:fd:6b:ff:42:b0:63:ed:33:af: c4:20:98:7f:9a:6c:64:59:05:11:57:f8:6f:50:d7: ab:d2:86:23:9c:15:d8:be:ce:c6:e1:9b:b4:ac:eb: 0d:55:ce:37:47:6d:61:90:0a:bb:0f:be:c8:b5:b2: ea:b2:21:98:99:ee:5b:44:dd:37:60:44:0d:28:60: b3:dd:50:b2:49:83:91:1a:3c:7e:94:f7:13:1e:50: 6d:12:b4:b3:a6:bc:36:cd:86:eb:5f:5c:da:58:b4: 5a:98:b0:a1:b0:d3:c5:b0:96:66:6d:2d:14:d5:f4: 8e:d4:04:6f:13:59:b2:b9:f6:9b:27:0f:e6:0a:bd: dc:47:f7:6b:b7:8e:90:b7:38:d6:ad:c6:b3:31:d5: a0:14:bf:6d:12:5d:b4:f5:12:72:89:e4:82:c6:e3: 6b:96:94:e7:95:8b:b9:d8:70:09:09:ef:6d:46:1f: 56:53:9b:ae:e6:10:48:a8:c4:81:1c:ab:90:c3:12: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:B9:BE:AB:5C:CD:8C:E7:38:FA:AD:D1:89:51:A8:EA:8F:74:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:07:2b:73:39:68:1e:b3:d5:8d:11:de:84:d4:72:0a:4e:79: af:12:cd:51:9e:bb:42:54:c2:75:dd:f7:85:c8:18:1d:4c:b1: 08:85:62:e1:78:53:87:ce:b5:8c:30:c9:ae:85:ad:59:44:8a: df:7d:fe:f6:b2:38:1d:16:5a:c3:48:60:a5:b6:35:73:03:11: 7d:55:65:c5:34:d4:e4:28:20:29:c6:d5:23:71:cb:f9:b4:e3: 4c:21:bd:73:cb:19:c8:4b:7e:d2:d4:72:bb:08:a2:b2:e8:b4: c2:b9:3b:95:1c:ba:c0:44:70:45:38:e5:e4:f8:18:10:3e:ce: 9a:45:52:25:2a:7c:e5:52:15:0f:53:ed:ff:87:8a:39:3c:f3: 95:8c:f0:42:a6:6f:71:99:76:a0:db:d8:85:98:c1:60:e7:59: 88:a2:de:62:0e:4e:7c:8f:f6:9a:8c:be:f5:3d:34:05:a3:fe: 8a:bc:58:43:c4:8b:ea:b6:5c:27:65:19:57:81:aa:9d:70:dd: dc:9b:40:28:c0:a2:b4:85:68:5b:bd:fa:87:0e:aa:9c:e6:81: 51:93:f3:3e:3d:e4:97:5a:6c:f5:01:66:39:30:fc:f8:20:cf: 03:b4:02:7a:a3:3e:09:b9:fb:d6:62:d0:6f:f7:8c:a1:d3:dd: 29:56:1e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh8Cz1QswNH/+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Zjk1ODVhN2ItZmJkZS00ZGI4LWEzM2MtNmNjODRlZDdkODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMAQSO6FOPIcvOkyDimvWUzgQndrjuREFDbj NXDMZdIQEYXU3hLXU3vQKvxOMSXqn5b0Z0bk2yBYrjcRGQTrB339a/9CsGPtM6/E IJh/mmxkWQURV/hvUNer0oYjnBXYvs7G4Zu0rOsNVc43R21hkAq7D77ItbLqsiGY me5bRN03YEQNKGCz3VCySYORGjx+lPcTHlBtErSzprw2zYbrX1zaWLRamLChsNPF sJZmbS0U1fSO1ARvE1myufabJw/mCr3cR/drt46QtzjWrcazMdWgFL9tEl209RJy ieSCxuNrlpTnlYu52HAJCe9tRh9WU5uu5hBIqMSBHKuQwxL3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqfub6rXM2M5zj6rdGJUajqj3TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkZWRlZjAtMWNhNC0z YTcxLTkzNDgtNmQ5Y2QwYmIyYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAHK3M5aB6z1Y0R3oTUcgpOea8SzVGeu0JUwnXd94XIGB1MsQiFYuF4 U4fOtYwwya6FrVlEit99/vayOB0WWsNIYKW2NXMDEX1VZcU01OQoICnG1SNxy/m0 40whvXPLGchLftLUcrsIorLotMK5O5UcusBEcEU45eT4GBA+zppFUiUqfOVSFQ9T 7f+Hijk885WM8EKmb3GZdqDb2IWYwWDnWYii3mIOTnyP9pqMvvU9NAWj/oq8WEPE i+q2XCdlGVeBqp1w3dybQCjAorSFaFu9+ocOqpzmgVGT8z495JdabPUBZjkw/Pgg zwO0AnqjPgm5+9Zi0G/3jKHT3SlWHgY= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:08 2025 by rpki-client