$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa File: faae56c8-7856-3d07-9163-8b7f3a9069cc.roa (raw, json) Hash identifier: yR3MJXuHp+T7O3DADuHVtcmhJ93B4m7kJkb67+GeDrA= Subject key identifier: 34:F6:72:CF:11:ED:64:2A:C6:E1:EE:BC:8E:14:51:0B:0E:92:CC:76 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB501CFF83079EA62D87C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa Signing time: Thu 24 Apr 2025 11:16:23 +0000 ROA not before: Thu 24 Apr 2025 11:16:23 +0000 ROA not after: Wed 23 Jul 2025 11:16:23 +0000 asID: 12041 IP address blocks: 161.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:50:1c:ff:83:07:9e:a6:2d:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:23 2025 GMT Not After : Jul 23 11:16:23 2025 GMT Subject: CN=c133ada9-b643-47d7-b0e2-8b57be800513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:14:fe:3a:56:89:0b:0c:f3:02:6b:b5:94: 8a:a7:5f:53:03:83:d6:e0:ea:3d:3b:31:29:0a:2b: 35:34:69:25:62:c1:02:5f:8f:b4:0a:42:e3:a8:6f: 1c:4a:6f:42:9d:db:7c:d9:42:11:a7:ab:18:e4:a0: 04:6b:f0:0b:b2:1e:fb:e1:cd:e7:2c:c4:f7:25:0e: 10:18:1e:d6:4f:be:cf:0e:e6:6b:35:1b:bc:41:77: 39:12:91:4f:ec:e3:69:1d:ff:08:13:0f:ea:41:d2: 5d:87:64:05:42:86:5e:0e:f5:40:73:37:d5:3d:30: 74:f7:07:82:2d:8b:85:15:c4:63:ef:33:69:34:53: 5a:78:75:ca:2f:2f:b8:2b:ec:a8:30:c2:86:f0:a8: 46:10:53:13:70:cf:43:cc:dd:3d:57:94:c6:36:14: a6:a1:d1:42:6b:0e:6a:0f:29:82:8d:e1:69:19:23: 2b:fc:26:3b:1e:0e:2a:fc:f4:06:88:76:25:3f:9e: c3:b8:9f:c7:c5:d3:c6:70:42:33:ee:6d:b1:3b:58: ad:39:cc:26:1a:ac:ff:c9:4e:8d:bd:f1:d7:1d:9f: 34:eb:c1:8a:92:b2:02:e2:00:da:41:0c:71:00:66: ec:fa:bf:52:5e:25:e8:57:f8:7e:c7:72:03:dc:31: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:72:CF:11:ED:64:2A:C6:E1:EE:BC:8E:14:51:0B:0E:92:CC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:06:ef:d7:f9:4d:f1:61:37:77:83:30:b2:d7:53:93:eb:e1: e0:c7:50:d7:3d:54:31:58:7c:1b:e6:10:38:15:a9:c4:64:48: 4c:d1:6d:24:52:67:f3:51:b0:52:56:09:82:a0:d5:16:b2:91: 56:eb:04:29:ce:ec:0a:49:c1:be:e2:f1:2c:76:99:5e:29:40: 61:8d:14:cd:6d:2d:52:04:27:26:47:54:92:d2:24:73:2d:38: ff:3b:85:5f:4f:02:0e:66:c7:36:bd:c6:cf:e9:56:29:df:58: 66:ca:5b:11:f8:ad:9c:74:cc:91:36:2f:57:2b:dc:00:8f:b6: b4:02:58:3d:d6:d9:d0:88:d7:ae:06:4b:7c:c4:72:5c:fa:f9: 4f:61:48:8d:17:49:6c:72:e2:02:99:23:99:69:6a:c8:5d:42: f0:2c:c4:88:1e:e5:ef:02:8f:d2:b3:d4:8d:4f:35:1d:12:d6: 42:df:5b:5b:67:dd:52:c7:39:61:12:c8:fb:e6:0b:c8:61:9b: 0c:22:65:2c:56:94:0a:0e:13:e8:4b:f5:26:23:b6:d8:e4:79: 8a:6f:c4:e2:de:6f:48:cc:57:95:52:af:96:4e:ab:9a:34:73: 79:9f:58:4b:58:5d:37:98:a0:50:89:b6:a9:df:16:3b:07:f4: fd:66:c5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu1Ac/4MHnqYth8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyM1oXDTI1MDcyMzExMTYyM1owLzEtMCsGA1UEAxMk YzEzM2FkYTktYjY0My00N2Q3LWIwZTItOGI1N2JlODAwNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoQU/jpWiQsM8wJrtZSKp19TA4PW4Oo9OzEp Cis1NGklYsECX4+0CkLjqG8cSm9Cndt82UIRp6sY5KAEa/ALsh774c3nLMT3JQ4Q GB7WT77PDuZrNRu8QXc5EpFP7ONpHf8IEw/qQdJdh2QFQoZeDvVAczfVPTB09weC LYuFFcRj7zNpNFNaeHXKLy+4K+yoMMKG8KhGEFMTcM9DzN09V5TGNhSmodFCaw5q DymCjeFpGSMr/CY7Hg4q/PQGiHYlP57DuJ/HxdPGcEIz7m2xO1itOcwmGqz/yU6N vfHXHZ8068GKkrIC4gDaQQxxAGbs+r9SXiXoV/h+x3ID3DHP1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT2cs8R7WQqxuHuvI4UUQsOksx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFhZTU2YzgtNzg1Ni0z ZDA3LTkxNjMtOGI3ZjNhOTA2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAG79f5TfFhN3eDMLLXU5Pr4eDHUNc9VDFYfBvmEDgVqcRkSEzRbSRS Z/NRsFJWCYKg1RaykVbrBCnO7ApJwb7i8Sx2mV4pQGGNFM1tLVIEJyZHVJLSJHMt OP87hV9PAg5mxza9xs/pVinfWGbKWxH4rZx0zJE2L1cr3ACPtrQCWD3W2dCI164G S3zEclz6+U9hSI0XSWxy4gKZI5lpashdQvAsxIge5e8Cj9Kz1I1PNR0S1kLfW1tn 3VLHOWESyPvmC8hhmwwiZSxWlAoOE+hL9SYjttjkeYpvxOLeb0jMV5VSr5ZOq5o0 c3mfWEtYXTeYoFCJtqnfFjsH9P1mxcg= -----END CERTIFICATE-----Generated at Tue Apr 29 21:05:20 2025 by rpki-client