$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6e098b1-824a-349e-924b-b54332f52fea.roa File: f6e098b1-824a-349e-924b-b54332f52fea.roa (raw, json) Hash identifier: XSLX00QL/c9YiKkNp+s5uEwZ/ZI+EROQl3EmVZHk3Gc= Subject key identifier: 78:00:AB:2F:C9:EB:25:B9:8A:F3:21:B7:35:04:7B:25:24:E0:97:D3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB7C42BB08521B1303C880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6e098b1-824a-349e-924b-b54332f52fea.roa Signing time: Thu 24 Apr 2025 11:16:44 +0000 ROA not before: Thu 24 Apr 2025 11:16:44 +0000 ROA not after: Wed 23 Jul 2025 11:16:44 +0000 asID: 12041 IP address blocks: 161.232.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:7c:42:bb:08:52:1b:13:03:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:44 2025 GMT Not After : Jul 23 11:16:44 2025 GMT Subject: CN=1e706b11-9d9b-4de6-85f5-8b1834f312ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:6f:b9:0d:08:a0:4e:c2:8b:d7:ea:b4:2f: e9:6e:72:76:f9:62:96:08:f3:11:14:87:07:61:d7: 73:e2:92:98:be:43:54:83:51:66:05:76:5a:a9:e1: 8d:db:cd:02:df:96:36:63:7d:3b:e1:a9:51:eb:55: 70:e7:4b:2c:88:57:ce:7a:1e:aa:a7:1e:0a:df:9a: da:9d:c0:1d:d3:20:12:7a:c9:88:ba:c0:7b:5e:6c: f4:a4:c9:5f:d0:f0:42:1d:6e:60:55:0f:5e:36:ac: 72:a4:69:d2:e6:a9:fc:3d:a1:bc:e4:e0:c9:92:e4: 1b:3a:96:a3:1b:ce:dd:b3:0b:51:12:8b:04:87:45: c4:9b:5d:80:a2:5d:72:ea:e2:03:48:ad:7f:76:06: 48:01:4d:95:9f:37:d6:35:e8:ec:4d:62:c2:a4:03: 18:11:f0:db:e4:62:c3:83:85:67:0d:43:70:c9:ef: ab:cc:5f:ad:fe:f2:be:b7:5a:3c:83:4b:36:bb:d3: f7:1c:13:2d:bb:fd:f4:15:d7:13:3e:43:73:d9:d9: ad:69:71:b1:65:38:2d:5d:8f:aa:fc:a1:b3:7c:6d: c5:7e:bf:da:c6:89:3f:14:3a:e9:33:ad:d5:dc:1e: 0a:03:fe:1e:e8:9c:ec:2a:a7:74:9a:36:b4:da:1a: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:AB:2F:C9:EB:25:B9:8A:F3:21:B7:35:04:7B:25:24:E0:97:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f6e098b1-824a-349e-924b-b54332f52fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ab:3c:f0:77:31:c6:38:91:3b:38:54:3a:c6:9e:86:f4:97: 8d:a5:65:3b:03:44:87:40:94:d8:9b:e2:ec:d2:9b:3b:82:4f: 29:70:ef:ca:c9:b7:75:f6:84:00:6d:bc:84:b2:7a:b3:79:0a: 78:d8:fa:27:d8:b1:8c:3b:38:1e:eb:9a:1c:d9:5a:85:d9:db: 01:38:9e:71:df:b9:5c:d7:45:17:b7:a9:6e:0d:7b:33:8a:c4: f0:7c:63:16:98:e4:8d:90:74:cc:b8:87:70:29:1e:5a:6a:d9: 5a:eb:b7:be:c8:60:c0:aa:e6:8f:42:3f:99:78:39:2c:b0:29: 7f:94:1e:b3:af:fc:1c:0b:36:ba:8a:a2:a1:df:68:02:46:57: bf:61:66:96:40:9c:b7:02:35:bd:86:2b:62:02:d3:1e:c7:49: ae:33:13:18:6a:a8:0f:95:79:65:0a:ba:85:50:3f:d1:e9:83: 74:c7:99:69:57:0f:9f:aa:72:89:59:60:ad:86:31:34:44:68: 07:1c:a1:3f:7b:01:f7:88:ff:a8:8a:47:d0:96:b1:bc:73:af: 76:5c:a2:d2:c9:8a:38:a7:5a:53:75:75:e7:60:a5:fa:10:5c: f2:ac:2f:38:1a:24:3a:80:c2:6b:a1:7c:c0:b0:8a:19:86:ac: 37:c4:eb:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3xCuwhSGxMDyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0NFoXDTI1MDcyMzExMTY0NFowLzEtMCsGA1UEAxMk MWU3MDZiMTEtOWQ5Yi00ZGU2LTg1ZjUtOGIxODM0ZjMxMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpvuQ0IoE7Ci9fqtC/pbnJ2+WKWCPMRFIcH Yddz4pKYvkNUg1FmBXZaqeGN280C35Y2Y3074alR61Vw50ssiFfOeh6qpx4K35ra ncAd0yASesmIusB7Xmz0pMlf0PBCHW5gVQ9eNqxypGnS5qn8PaG85ODJkuQbOpaj G87dswtREosEh0XEm12Aol1y6uIDSK1/dgZIAU2VnzfWNejsTWLCpAMYEfDb5GLD g4VnDUNwye+rzF+t/vK+t1o8g0s2u9P3HBMtu/30FdcTPkNz2dmtaXGxZTgtXY+q /KGzfG3Ffr/axok/FDrpM63V3B4KA/4e6JzsKqd0mja02hoDmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgAqy/J6yW5ivMhtzUEeyUk4JfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjZlMDk4YjEtODI0YS0z NDllLTkyNGItYjU0MzMyZjUyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGrPPB3McY4kTs4VDrGnob0l42lZTsDRIdAlNib4uzSmzuCTylw78rJ t3X2hABtvISyerN5CnjY+ifYsYw7OB7rmhzZWoXZ2wE4nnHfuVzXRRe3qW4NezOK xPB8YxaY5I2QdMy4h3ApHlpq2Vrrt77IYMCq5o9CP5l4OSywKX+UHrOv/BwLNrqK oqHfaAJGV79hZpZAnLcCNb2GK2IC0x7HSa4zExhqqA+VeWUKuoVQP9Hpg3THmWlX D5+qcolZYK2GMTREaAccoT97AfeI/6iKR9CWsbxzr3ZcotLJijinWlN1dedgpfoQ XPKsLzgaJDqAwmuhfMCwihmGrDfE6zs= -----END CERTIFICATE-----Generated at Tue Apr 29 18:36:24 2025 by rpki-client