$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa File: fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa (raw, json) Hash identifier: rz8E0inqDRAdkcJ+gbVtrLDM2soijx0thOc2944oG00= Subject key identifier: F7:8C:EF:B9:59:79:4F:D9:70:A4:29:C3:B3:63:F0:E1:7D:B4:83:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB688C5367220384BF4A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa Signing time: Thu 24 Apr 2025 11:16:34 +0000 ROA not before: Thu 24 Apr 2025 11:16:34 +0000 ROA not after: Wed 23 Jul 2025 11:16:34 +0000 asID: 12041 IP address blocks: 161.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:68:8c:53:67:22:03:84:bf:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:34 2025 GMT Not After : Jul 23 11:16:34 2025 GMT Subject: CN=4556bbb3-d889-41c7-b87c-d940e3c9f137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:af:fe:f9:c6:ea:17:9f:e6:17:eb:55:31: 98:fa:1c:5d:23:1f:fb:87:c0:2e:b5:c3:83:fd:a8: ea:7a:fc:95:00:9e:14:5c:b8:9b:52:45:4b:99:04: 6d:a2:e3:af:f9:2d:33:e6:04:5b:8c:c0:10:51:05: 82:ea:6a:fb:92:45:5f:40:8b:0b:89:71:95:c5:10: 0d:d3:ca:82:a1:89:e2:ab:03:5e:a5:00:00:5e:b9: ee:a4:fb:6c:1e:bb:bd:eb:48:37:40:06:7c:4e:78: 6b:17:c9:5d:a2:f8:bd:4d:d6:e4:d9:65:04:dc:e5: 5e:3f:ec:bc:27:e6:d1:3f:2b:fb:7f:5a:c4:3b:1d: dc:ea:03:c8:81:c7:76:97:dd:e7:77:da:07:e6:d9: 55:2b:0a:bb:c1:35:c1:51:96:31:b2:b1:40:f4:9d: 0c:4d:1e:86:80:67:71:09:e4:e5:43:7a:1b:c3:8d: 84:4b:f8:f0:16:da:b0:bb:e2:0a:7f:a5:86:d2:73: cd:30:d8:53:99:1a:cb:67:0c:b4:25:23:b8:56:12: d5:22:9a:a8:17:4b:ef:1b:11:f2:35:f1:ea:b4:70: ee:1b:d7:f2:6a:a1:e5:0f:81:e1:be:44:dd:66:1d: b7:2b:a8:0c:13:52:1c:04:49:1e:a2:e5:9f:c6:93: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8C:EF:B9:59:79:4F:D9:70:A4:29:C3:B3:63:F0:E1:7D:B4:83:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1f:e0:12:06:55:19:6e:86:19:9e:b4:e1:27:5a:10:16:4d: d8:9e:19:01:d5:97:19:74:24:ad:8b:9a:c5:c0:67:d1:61:e1: 95:11:9e:35:d2:db:5c:33:30:28:4b:06:1f:d6:25:cc:75:24: f8:d5:98:ef:c6:7a:b6:41:f4:be:aa:81:37:7b:f6:c8:f3:d6: 1d:c0:14:48:ac:17:fb:bc:a0:c0:ac:b6:ee:c4:bc:8e:64:20: 6a:70:fd:98:9a:b5:24:7e:cd:74:b1:40:cd:d5:a2:c9:9f:b1: ec:c5:cd:a9:92:7b:b3:9f:3e:ac:52:84:26:7f:7f:78:92:a9: a6:c7:b1:5c:4b:52:67:f4:2a:10:ce:17:a3:3d:02:2c:10:d4: f7:98:33:80:ac:51:e0:cd:8b:c7:71:de:cc:7c:91:40:8a:ea: e9:67:1c:48:e5:7c:09:3d:20:59:95:ee:20:c9:b2:8b:2c:1e: d0:9c:69:80:c4:db:85:d3:04:4c:a9:90:cb:67:68:65:fc:2c: 90:80:08:68:95:e7:0a:5b:bd:b8:ad:1c:9c:09:a3:e1:71:52: ec:84:40:c6:2a:65:1c:33:e8:73:b8:4f:73:a6:5b:13:c7:66: 21:16:7a:a7:0e:35:f2:31:38:0f:6e:df:a6:29:04:4f:bf:7e: 44:54:cb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu2iMU2ciA4S/SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzNFoXDTI1MDcyMzExMTYzNFowLzEtMCsGA1UEAxMk NDU1NmJiYjMtZDg4OS00MWM3LWI4N2MtZDk0MGUzYzlmMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Ov/vnG6hef5hfrVTGY+hxdIx/7h8AutcOD /ajqevyVAJ4UXLibUkVLmQRtouOv+S0z5gRbjMAQUQWC6mr7kkVfQIsLiXGVxRAN 08qCoYniqwNepQAAXrnupPtsHru960g3QAZ8TnhrF8ldovi9Tdbk2WUE3OVeP+y8 J+bRPyv7f1rEOx3c6gPIgcd2l93nd9oH5tlVKwq7wTXBUZYxsrFA9J0MTR6GgGdx CeTlQ3obw42ES/jwFtqwu+IKf6WG0nPNMNhTmRrLZwy0JSO4VhLVIpqoF0vvGxHy NfHqtHDuG9fyaqHlD4HhvkTdZh23K6gME1IcBEkeouWfxpOfKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeM77lZeU/ZcKQpw7Nj8OF9tIMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ1NzljZDMtMzcxZi0z ZDVlLWI3YzctYzRjNjYxM2MyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcf4BIGVRluhhmetOEnWhAWTdieGQHVlxl0JK2LmsXAZ9Fh4ZURnjXS 21wzMChLBh/WJcx1JPjVmO/GerZB9L6qgTd79sjz1h3AFEisF/u8oMCstu7EvI5k IGpw/ZiatSR+zXSxQM3VosmfsezFzamSe7OfPqxShCZ/f3iSqabHsVxLUmf0KhDO F6M9AiwQ1PeYM4CsUeDNi8dx3sx8kUCK6ulnHEjlfAk9IFmV7iDJsossHtCcaYDE 24XTBEypkMtnaGX8LJCACGiV5wpbvbitHJwJo+FxUuyEQMYqZRwz6HO4T3OmWxPH ZiEWeqcONfIxOA9u36YpBE+/fkRUy5g= -----END CERTIFICATE-----Generated at Tue Apr 29 22:18:03 2025 by rpki-client