$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa File: 1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa (raw, json) Hash identifier: 9MSe32A/VMNgHhLCn+H/jmhhjh+FdSAFMOuwnqcHSn0= Subject key identifier: 7B:71:18:EF:EB:E3:E1:11:9F:73:AC:B4:E3:C7:F4:56:20:25:7E:41 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB7633C958803C7463AE00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa Signing time: Thu 24 Apr 2025 11:16:41 +0000 ROA not before: Thu 24 Apr 2025 11:16:41 +0000 ROA not after: Wed 23 Jul 2025 11:16:41 +0000 asID: 12041 IP address blocks: 161.232.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:76:33:c9:58:80:3c:74:63:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:41 2025 GMT Not After : Jul 23 11:16:41 2025 GMT Subject: CN=a5240f1f-a1ea-4cea-aca1-1e32e03e9ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:c9:e6:e6:3a:1f:55:53:f4:c9:c1:18:32: a0:ff:cf:dd:58:76:b8:77:c3:07:34:d6:3c:aa:ce: 3b:d6:cb:32:e2:9f:ba:df:c1:87:2b:8d:9b:bb:77: ca:54:e2:fa:32:7a:80:01:fc:7b:87:12:b0:3a:8c: 3e:ab:47:92:0c:f3:3d:07:ea:bc:5f:e5:72:f0:51: 22:62:4d:de:30:6e:3f:00:38:7b:25:38:ac:09:7f: b9:b9:fb:f3:ec:46:32:d4:e0:ba:5e:82:33:49:ed: d4:1d:3b:51:2e:75:e4:a1:98:64:fc:e4:03:bc:ad: 6f:ad:4b:d4:61:89:f2:ca:97:aa:2e:a7:92:35:db: ae:c1:0b:9f:34:ac:f5:d3:2c:85:ec:bb:c9:b9:fe: 7d:42:fb:b0:5d:15:35:2d:b9:25:e2:e8:b6:b2:2a: 69:22:59:0e:82:2c:d6:08:7e:0e:ef:0f:f6:73:ab: a8:75:fa:17:89:f0:fb:77:bc:e7:87:a7:48:f8:3b: 1b:72:ae:65:9b:4f:43:4d:cb:34:a2:8e:50:ac:ac: 63:96:65:96:2e:a1:45:73:82:65:4e:31:f0:67:17: d5:60:34:87:ed:0c:09:fd:ea:b8:47:f3:02:71:01: b6:b8:05:09:bc:a3:aa:34:08:95:aa:5f:52:24:25: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:18:EF:EB:E3:E1:11:9F:73:AC:B4:E3:C7:F4:56:20:25:7E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:77:8b:12:8b:90:03:23:f8:df:a1:bd:3a:1f:6c:dd:0d:f1: fb:79:02:c5:a0:0e:d9:a9:2a:39:7d:7a:16:bf:8b:52:85:59: 63:82:19:fe:e1:18:2b:da:1e:9a:85:b1:d1:0e:2b:f7:63:5b: 00:6e:5f:62:e5:4b:e3:18:8a:41:b2:d9:c5:96:95:38:9f:bc: cb:ef:3a:52:db:f8:4a:73:37:73:6b:ba:96:96:60:c4:cb:e4: 41:56:01:44:c7:c3:42:93:a0:1f:84:28:df:d7:6a:df:d3:22: 8d:09:9b:8d:ee:80:cc:49:7f:97:b3:57:94:77:6f:f3:b0:a5: 89:23:94:cd:fa:a1:49:c1:6e:02:90:4c:fa:a2:19:4f:5b:b9: 20:54:34:78:d9:8d:7e:39:97:6e:80:81:a5:6c:f8:23:2f:cf: 1a:11:c0:18:36:8c:98:1f:da:b0:cf:56:89:50:f5:0f:00:24: 7e:84:40:8b:30:53:33:db:66:55:3c:9b:3d:df:e8:8a:2c:e6: be:af:6d:a3:e2:be:6d:3b:03:73:56:68:e9:ab:09:17:8e:b3: e4:5e:fd:11:db:34:40:ef:77:ed:89:32:f1:08:aa:86:e6:b3: c1:c0:7d:4f:8f:cf:ec:28:fa:11:04:f4:c1:03:8b:a8:b6:64: 28:7f:b9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3YzyViAPHRjrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0MVoXDTI1MDcyMzExMTY0MVowLzEtMCsGA1UEAxMk YTUyNDBmMWYtYTFlYS00Y2VhLWFjYTEtMWUzMmUwM2U5YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLDJ5uY6H1VT9MnBGDKg/8/dWHa4d8MHNNY8 qs471ssy4p+638GHK42bu3fKVOL6MnqAAfx7hxKwOow+q0eSDPM9B+q8X+Vy8FEi Yk3eMG4/ADh7JTisCX+5ufvz7EYy1OC6XoIzSe3UHTtRLnXkoZhk/OQDvK1vrUvU YYnyypeqLqeSNduuwQufNKz10yyF7LvJuf59QvuwXRU1Lbkl4ui2sippIlkOgizW CH4O7w/2c6uodfoXifD7d7znh6dI+Dsbcq5lm09DTcs0oo5QrKxjlmWWLqFFc4Jl TjHwZxfVYDSH7QwJ/eq4R/MCcQG2uAUJvKOqNAiVql9SJCVLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtxGO/r4+ERn3OstOPH9FYgJX5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWZhMzlmMmItODBiZi0z ZTNkLThhYTMtNjMwZjE4MjBjODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp3ixKLkAMj+N+hvTofbN0N8ft5AsWgDtmpKjl9eha/i1KFWWOCGf7h GCvaHpqFsdEOK/djWwBuX2LlS+MYikGy2cWWlTifvMvvOlLb+EpzN3NrupaWYMTL 5EFWAUTHw0KToB+EKN/Xat/TIo0Jm43ugMxJf5ezV5R3b/OwpYkjlM36oUnBbgKQ TPqiGU9buSBUNHjZjX45l26AgaVs+CMvzxoRwBg2jJgf2rDPVolQ9Q8AJH6EQIsw UzPbZlU8mz3f6Ios5r6vbaPivm07A3NWaOmrCReOs+Re/RHbNEDvd+2JMvEIqobm s8HAfU+Pz+wo+hEE9MEDi6i2ZCh/uUs= -----END CERTIFICATE-----Generated at Sat May 10 06:59:31 2025 by rpki-client