$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa File: fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa (raw, json) Hash identifier: fpS70dfs2mmBDjg7Yu9sWTURGbrFGdHurOi9f9xKMGw= Subject key identifier: 12:A0:A9:F6:FE:94:D5:D5:9C:13:A6:25:D5:C1:61:80:79:97:13:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461DD082E86C19A8308A60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:d0:82:e8:6c:19:a8:30:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=0a962482-c78d-45d7-ba25-131a62c5fa35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:29:29:30:50:d7:2c:6f:d8:6c:e4:78:05: f6:56:8e:0e:11:63:ee:98:eb:1a:ea:a1:12:f0:5e: c3:1f:2f:a4:7b:62:a1:3b:1e:fe:3a:b1:12:c8:ce: 11:08:99:f6:d2:b3:9b:89:22:7d:54:97:a7:0e:18: 6e:6a:19:1e:95:04:c1:dd:22:22:07:9c:3c:1b:f9: 3b:a8:32:6a:ee:36:d3:e7:c1:9c:4b:54:e4:b9:de: 78:74:a5:97:ee:42:9a:a1:58:c6:0d:eb:92:40:05: 24:5f:ed:44:d1:a5:05:73:e3:af:46:ec:b0:f3:f0: 37:be:af:69:b0:7c:3d:68:d3:b2:3f:9c:11:de:88: 2d:f2:de:22:f3:df:7c:c2:54:c4:c6:60:19:fd:bc: 0e:5a:71:34:4e:13:4a:96:2f:64:9b:15:98:f9:e7: fe:6a:d3:e8:57:c7:b0:d9:66:d2:19:27:a4:40:21: 44:44:a9:6b:4a:64:a3:c9:5b:d3:e3:7f:62:d1:58: 59:79:93:00:64:2e:16:7e:ef:93:27:57:ec:a7:d1: 59:b5:51:5e:0a:55:e6:6b:5a:f2:3f:a3:ba:a4:58: b6:92:15:ed:79:2d:a2:2b:e8:12:a6:b1:a9:32:02: b4:cc:e9:7f:d0:e9:dc:8a:ed:33:a8:ea:0b:03:68: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:A9:F6:FE:94:D5:D5:9C:13:A6:25:D5:C1:61:80:79:97:13:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:07:52:64:ff:a9:97:24:c5:22:c7:69:38:15:27:1c:89:e4: 87:49:f3:62:34:aa:95:6a:33:2e:05:af:bb:fe:5e:8d:3e:8a: 2b:07:83:a8:35:57:ce:1b:bd:e9:eb:0f:fe:a6:72:1f:f4:6e: 56:7c:aa:96:af:2a:bb:62:4e:4f:61:56:26:5f:66:a2:57:2c: 3f:03:a0:32:cf:cb:a6:ab:e1:9b:6b:f7:06:12:69:9c:30:33: 36:f8:37:21:c3:83:29:4c:7f:dc:19:e0:41:9e:a9:d3:36:b6: 1d:08:af:0b:d6:7f:6e:8e:4c:02:4d:e6:14:17:2f:32:57:16: 63:c7:18:d0:6a:39:4d:a3:30:a5:12:8b:e4:2e:e9:49:76:cf: 85:fa:8a:a1:3b:50:44:78:9c:03:29:50:90:41:10:e1:cc:61: 1d:4e:a9:a6:6f:6b:1d:62:f6:26:3c:f3:ce:90:2a:de:ff:d8: ca:04:23:08:50:50:67:fd:68:43:d7:57:af:a1:a8:e0:8c:3f: a8:41:4c:32:d9:09:40:92:62:99:76:97:2c:6c:15:f8:06:1b: 9d:2c:57:6a:31:75:1d:b8:c3:1a:37:24:fb:fa:64:1a:91:b6: 8e:40:33:9c:0b:6a:ab:ec:24:76:0f:4d:64:a7:6c:05:63:eb: 7f:ea:9e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh3QguhsGagwimAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MGE5NjI0ODItYzc4ZC00NWQ3LWJhMjUtMTMxYTYyYzVmYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy8pKTBQ1yxv2GzkeAX2Vo4OEWPumOsa6qES 8F7DHy+ke2KhOx7+OrESyM4RCJn20rObiSJ9VJenDhhuahkelQTB3SIiB5w8G/k7 qDJq7jbT58GcS1Tkud54dKWX7kKaoVjGDeuSQAUkX+1E0aUFc+OvRuyw8/A3vq9p sHw9aNOyP5wR3ogt8t4i8998wlTExmAZ/bwOWnE0ThNKli9kmxWY+ef+atPoV8ew 2WbSGSekQCFERKlrSmSjyVvT439i0VhZeZMAZC4Wfu+TJ1fsp9FZtVFeClXma1ry P6O6pFi2khXteS2iK+gSprGpMgK0zOl/0Onciu0zqOoLA2i8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKgqfb+lNXVnBOmJdXBYYB5lxM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ1NzljZDMtMzcxZi0z ZDVlLWI3YzctYzRjNjYxM2MyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgHUmT/qZckxSLHaTgVJxyJ5IdJ82I0qpVqMy4Fr7v+Xo0+iisHg6g1 V84bvenrD/6mch/0blZ8qpavKrtiTk9hViZfZqJXLD8DoDLPy6ar4Ztr9wYSaZww Mzb4NyHDgylMf9wZ4EGeqdM2th0IrwvWf26OTAJN5hQXLzJXFmPHGNBqOU2jMKUS i+Qu6Ul2z4X6iqE7UER4nAMpUJBBEOHMYR1OqaZvax1i9iY8886QKt7/2MoEIwhQ UGf9aEPXV6+hqOCMP6hBTDLZCUCSYpl2lyxsFfgGG50sV2oxdR24wxo3JPv6ZBqR to5AM5wLaqvsJHYPTWSnbAVj63/qng0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:07 2025 by rpki-client