$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa File: faae56c8-7856-3d07-9163-8b7f3a9069cc.roa (raw, json) Hash identifier: ERsXgouWbGpI56vKzqlEksHqFnem72+XOjMDDAxUt6U= Subject key identifier: 4C:53:34:1A:05:5B:CC:DB:35:75:45:E6:25:35:89:FA:65:F9:45:1E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461CD72F2B0A487E204F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1c:d7:2f:2b:0a:48:7e:20:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=0f95c70f-36a6-4fcc-b887-dfa82e2b5643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:38:0f:4c:2d:e6:80:9e:37:c5:e8:e7:82: 60:b8:ae:d6:31:8c:52:ef:44:23:45:34:f0:df:38: dc:ef:df:99:a8:b1:0b:52:3a:b6:cf:14:1d:7b:80: 4b:c2:fd:9b:93:77:35:a1:8c:a3:ed:7f:f8:2b:58: 31:22:0d:45:5e:81:22:fa:6e:ea:08:6d:94:1a:92: 49:12:ae:11:e0:98:88:45:96:55:c8:be:69:48:5c: 08:07:b2:2d:d5:e1:8a:91:88:e9:01:06:80:ec:2f: db:5e:0c:07:45:33:a9:8c:45:ee:6d:b0:fa:b2:cd: 5b:29:76:b2:d4:5a:55:4e:48:18:18:2b:79:c9:57: f0:a3:b3:bb:c7:79:6e:33:ff:d9:62:75:d6:ae:80: da:dc:70:81:d0:fb:34:82:f2:70:c9:79:18:0e:d0: 6e:52:f5:c5:5b:01:b4:6a:b3:d8:8e:76:6a:0a:d3: 4f:d1:35:8d:8d:92:d4:5d:37:12:6f:1f:8a:e2:69: 25:61:74:b0:0e:80:d1:a2:b3:68:61:6e:35:83:20: 0a:e2:75:7c:e3:f9:5b:3b:03:7d:48:d8:95:aa:8d: 2b:e9:f9:70:af:dd:c9:ed:d2:d0:b8:e5:83:92:79: 97:4f:3f:e3:a2:ba:f7:bf:74:99:dc:f2:d6:48:b8: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:34:1A:05:5B:CC:DB:35:75:45:E6:25:35:89:FA:65:F9:45:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fd:3b:b6:5c:52:8c:72:a5:00:55:87:46:ad:9f:ae:f3:c5: 4a:a0:06:57:67:0f:4e:1d:df:ba:0f:b1:53:3a:35:bb:b4:4f: 23:ca:52:c2:ce:72:7a:83:21:1e:00:df:56:df:66:54:ca:b8: b2:25:46:7a:09:fd:a7:65:ac:06:5a:29:64:0d:ba:33:0e:44: c8:da:e1:41:8f:0d:9f:e2:c9:d1:76:a5:97:eb:b5:55:c0:2b: 41:48:5e:1d:8d:23:0e:16:c2:7e:b1:fb:0d:e8:cb:c7:bf:32: 51:ef:4d:81:6c:5c:57:2c:4d:f4:4e:b3:5c:fb:ba:74:7a:d8: 48:d6:2b:ee:25:27:e2:b6:73:a2:55:b7:6d:4e:3d:68:b8:24: 28:e9:eb:cf:35:55:76:84:38:62:38:e3:aa:1b:4f:3f:0f:d4: 15:b8:8f:f7:e8:a3:cf:b0:90:3b:a5:89:f8:81:4c:1e:7f:f6: 5b:bb:2e:f0:d4:3a:97:d7:05:0e:35:cb:2f:c9:25:c3:cb:47: 3a:ce:c4:24:09:f0:35:04:ac:da:c4:5b:00:6a:cd:3f:14:97: 03:b1:d0:3c:f9:8c:a8:4a:5e:3e:f1:25:86:ef:92:35:c1:f5: 1f:fb:e5:56:d9:5c:f8:3d:7e:03:ab:43:34:09:6e:ea:d2:da: 96:14:b8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhzXLysKSH4gT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MGY5NWM3MGYtMzZhNi00ZmNjLWI4ODctZGZhODJlMmI1NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23c4D0wt5oCeN8Xo54JguK7WMYxS70QjRTTw 3zjc79+ZqLELUjq2zxQde4BLwv2bk3c1oYyj7X/4K1gxIg1FXoEi+m7qCG2UGpJJ Eq4R4JiIRZZVyL5pSFwIB7It1eGKkYjpAQaA7C/bXgwHRTOpjEXubbD6ss1bKXay 1FpVTkgYGCt5yVfwo7O7x3luM//ZYnXWroDa3HCB0Ps0gvJwyXkYDtBuUvXFWwG0 arPYjnZqCtNP0TWNjZLUXTcSbx+K4mklYXSwDoDRorNoYW41gyAK4nV84/lbOwN9 SNiVqo0r6flwr93J7dLQuOWDknmXTz/jorr3v3SZ3PLWSLgmpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExTNBoFW8zbNXVF5iU1ifpl+UUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFhZTU2YzgtNzg1Ni0z ZDA3LTkxNjMtOGI3ZjNhOTA2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj9O7ZcUoxypQBVh0atn67zxUqgBldnD04d37oPsVM6Nbu0TyPKUsLO cnqDIR4A31bfZlTKuLIlRnoJ/adlrAZaKWQNujMORMja4UGPDZ/iydF2pZfrtVXA K0FIXh2NIw4Wwn6x+w3oy8e/MlHvTYFsXFcsTfROs1z7unR62EjWK+4lJ+K2c6JV t21OPWi4JCjp6881VXaEOGI446obTz8P1BW4j/foo8+wkDulifiBTB5/9lu7LvDU OpfXBQ41yy/JJcPLRzrOxCQJ8DUErNrEWwBqzT8UlwOx0Dz5jKhKXj7xJYbvkjXB 9R/75VbZXPg9fgOrQzQJburS2pYUuEM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:11 2025 by rpki-client