$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa File: 2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa (raw, json) Hash identifier: itPjWcGtrHvJwF5TfossZIcq3OcZ0QBOQEZPTNHc7AU= Subject key identifier: F4:21:CC:71:20:3F:7B:83:C2:D9:4A:35:F7:0F:C0:4E:6F:16:48:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB8B848C28B5D2D22840A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa Signing time: Thu 24 Apr 2025 11:16:51 +0000 ROA not before: Thu 24 Apr 2025 11:16:51 +0000 ROA not after: Wed 23 Jul 2025 11:16:51 +0000 asID: 12041 IP address blocks: 161.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:8b:84:8c:28:b5:d2:d2:28:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:51 2025 GMT Not After : Jul 23 11:16:51 2025 GMT Subject: CN=6fef2335-04cf-4e5f-848c-d3d03daf8dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:c6:93:c9:b6:bf:44:a5:f4:e9:03:c6:99: 32:7e:e9:e5:4c:06:ed:e8:e0:4b:04:19:fc:a5:b3: 87:a7:7a:0d:9c:80:f8:8b:30:7c:9f:e5:5f:6e:fd: a1:3b:7d:65:2e:28:e4:c9:3a:ff:09:f6:9a:af:45: 99:93:a1:72:cc:d3:53:56:cd:20:47:ed:8f:55:5d: 96:c2:e7:b7:6f:d8:8b:a0:17:aa:fb:89:46:f4:b0: 88:41:af:75:2d:62:ac:94:2e:00:41:d6:8c:73:57: 48:4b:60:16:2c:9c:cf:b8:26:14:f6:f2:fd:4d:5d: 37:6f:c4:f8:37:f2:1a:5b:19:79:4f:ad:89:94:fb: ac:69:27:b6:ff:3b:76:34:95:a0:44:30:03:70:8d: 47:5d:a3:44:6d:1a:06:ca:b3:4b:a1:18:b0:c2:a7: c8:6d:97:59:83:8e:a8:32:6e:e0:b8:d9:e7:70:76: f8:f8:e5:33:22:8b:34:6c:6f:84:90:6d:9c:90:82: 82:db:15:53:f9:1d:ff:18:be:c9:c7:8a:cb:bb:81: 8a:19:ad:38:e8:fe:24:4b:69:26:d2:73:74:b4:83: 13:f5:77:f0:b1:ab:7b:90:1b:8c:19:a2:77:55:9f: 1b:24:57:9e:bd:10:e0:2c:3c:27:83:31:1d:6d:fa: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:21:CC:71:20:3F:7B:83:C2:D9:4A:35:F7:0F:C0:4E:6F:16:48:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:33:ef:b3:0c:a6:0e:2e:da:75:61:1e:23:64:ae:a0:e0:09: ae:ee:ac:3f:f5:26:22:ee:2d:18:e1:99:f1:f8:ab:d5:d9:58: 78:b4:50:3d:d7:76:a6:9e:ae:4d:6f:d8:13:9e:bf:3a:3f:67: 25:3e:f2:94:4e:e2:52:db:01:87:d0:74:0b:24:41:8e:7c:a1: aa:6b:2a:a5:25:a9:89:f3:95:41:01:31:4a:9e:06:e1:fb:3a: 98:d6:f7:3b:8d:d7:48:e7:e6:e6:31:29:f0:a9:29:81:ac:39: c3:4f:e3:76:27:42:31:a8:00:10:f0:99:dc:6e:7b:4d:7a:e1: 34:3f:24:d4:90:1f:e7:f4:4a:c1:3f:08:1e:11:cb:79:31:30: 8a:65:f4:a6:a8:40:6a:c3:91:8e:13:4c:48:31:62:33:ee:9f: 3e:69:cb:7c:db:af:48:c7:4b:24:87:31:da:32:da:88:06:40: d1:bf:b0:b7:0c:f1:0e:f6:07:48:0f:ee:9a:25:aa:8e:b8:4c: 32:50:7d:9c:fe:e5:80:d7:43:9c:a2:d0:e2:17:3a:64:df:eb: e5:c8:20:59:89:f2:14:5b:25:ed:dd:a9:2c:49:20:1d:57:23: d2:35:ef:48:7d:fd:1a:72:c6:51:2d:be:4b:6b:ee:ec:95:37: 10:f1:e3:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu4uEjCi10tIoQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1MVoXDTI1MDcyMzExMTY1MVowLzEtMCsGA1UEAxMk NmZlZjIzMzUtMDRjZi00ZTVmLTg0OGMtZDNkMDNkYWY4ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlTGk8m2v0Sl9OkDxpkyfunlTAbt6OBLBBn8 pbOHp3oNnID4izB8n+Vfbv2hO31lLijkyTr/Cfaar0WZk6FyzNNTVs0gR+2PVV2W wue3b9iLoBeq+4lG9LCIQa91LWKslC4AQdaMc1dIS2AWLJzPuCYU9vL9TV03b8T4 N/IaWxl5T62JlPusaSe2/zt2NJWgRDADcI1HXaNEbRoGyrNLoRiwwqfIbZdZg46o Mm7guNnncHb4+OUzIos0bG+EkG2ckIKC2xVT+R3/GL7Jx4rLu4GKGa046P4kS2km 0nN0tIMT9Xfwsat7kBuMGaJ3VZ8bJFeevRDgLDwngzEdbfo+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQhzHEgP3uDwtlKNfcPwE5vFkhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmYwMGE0YTUtNDFjMS0z Yzg4LTk3YWQtOGI4ZTZkZjY2NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEz77MMpg4u2nVhHiNkrqDgCa7urD/1JiLuLRjhmfH4q9XZWHi0UD3X dqaerk1v2BOevzo/ZyU+8pRO4lLbAYfQdAskQY58oaprKqUlqYnzlUEBMUqeBuH7 OpjW9zuN10jn5uYxKfCpKYGsOcNP43YnQjGoABDwmdxue0164TQ/JNSQH+f0SsE/ CB4Ry3kxMIpl9KaoQGrDkY4TTEgxYjPunz5py3zbr0jHSySHMdoy2ogGQNG/sLcM 8Q72B0gP7polqo64TDJQfZz+5YDXQ5yi0OIXOmTf6+XIIFmJ8hRbJe3dqSxJIB1X I9I170h9/RpyxlEtvktr7uyVNxDx4x8= -----END CERTIFICATE-----Generated at Fri May 9 20:46:14 2025 by rpki-client