$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa File: 60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa (raw, json) Hash identifier: sSPUURXyAtci7zA9ok9EniUI3iHvPvwX9ZRx5UMgSw8= Subject key identifier: 02:13:E5:37:03:D6:38:50:70:E6:46:F1:19:88:2C:4D:1D:C1:EC:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB40C57FB20D122DE1A200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa Signing time: Thu 24 Apr 2025 11:16:16 +0000 ROA not before: Thu 24 Apr 2025 11:16:16 +0000 ROA not after: Wed 23 Jul 2025 11:16:16 +0000 asID: 12041 IP address blocks: 161.232.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:40:c5:7f:b2:0d:12:2d:e1:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:16 2025 GMT Not After : Jul 23 11:16:16 2025 GMT Subject: CN=666b790c-ad7c-4d98-96c5-2be77c7f32e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:e7:ec:2b:fc:37:df:4e:94:dd:16:bd:f0: c6:6b:4c:44:76:18:0e:39:23:f4:48:fe:4d:fa:75: b9:4e:2c:40:65:95:96:9a:52:b0:2d:d2:87:fe:e7: 63:13:2b:db:4e:d8:55:df:ca:3c:59:e8:c2:9e:70: d5:da:85:30:96:d9:3d:6c:40:3f:b9:b5:62:a0:5d: 01:85:34:43:49:18:be:c0:4e:4c:d3:ef:c7:7e:25: f4:7b:4a:db:b9:23:db:52:46:eb:99:17:ba:a0:f5: ac:17:b1:dd:1d:58:e8:3f:d8:e4:60:eb:f5:6d:fd: e5:36:21:d2:f1:fe:84:a2:24:b0:af:46:7f:a7:1a: 48:bf:07:9c:a1:11:c8:f8:80:df:c4:68:9b:31:49: da:dc:20:99:db:bc:85:7e:5f:08:0d:4b:71:17:01: ae:f6:51:5b:48:20:43:77:73:cf:80:04:91:28:d0: d8:80:bd:ab:09:f3:0b:e4:3e:fd:58:6b:c9:84:0a: d0:cb:58:4b:d1:76:62:f1:6e:3f:cc:71:20:e4:67: a0:88:f5:62:78:b5:60:91:c9:71:c0:2f:07:f4:cb: 71:56:a3:bc:df:63:9b:e0:74:f6:57:8b:f8:eb:1a: fc:53:5b:25:b6:26:b2:6e:2a:66:f7:85:ca:a7:cb: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:13:E5:37:03:D6:38:50:70:E6:46:F1:19:88:2C:4D:1D:C1:EC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:cb:41:b7:e0:09:07:eb:69:f7:9b:62:a1:5a:dc:6c:e8: f8:33:c3:c1:35:3f:96:02:38:bc:34:ef:8b:6a:18:08:32:82: 50:4c:5c:40:71:7f:37:7c:59:15:f8:be:32:d4:8e:1f:7e:8d: b6:98:4f:33:b5:e6:e3:e8:9e:3e:e5:bd:7a:ec:a8:60:1c:8f: f9:4b:e4:f6:05:b9:58:fe:c3:35:35:84:ac:8b:9b:12:10:63: 7d:7a:4d:d6:da:a4:60:81:af:ce:ad:7c:9e:49:53:4c:8e:28: f1:33:bf:9e:bb:eb:98:f1:7c:54:b6:b8:97:23:8c:96:56:46: 6c:8f:00:5b:36:19:21:80:35:1d:3a:fe:c8:fe:bc:47:57:67: 8d:71:ed:3d:af:b3:0c:e1:7d:c6:ac:de:76:78:12:30:52:2c: 10:c4:51:e0:22:a0:ca:45:3e:09:54:34:3e:42:23:c0:07:5e: 65:b2:28:8b:3b:55:5d:22:e9:df:e9:b7:b3:59:0f:b0:e9:a5: ca:a0:4f:cc:a1:bb:16:30:37:35:e8:bd:f7:41:93:b5:85:11: 67:0a:7d:dc:0f:b3:4d:e5:79:6e:d6:08:d9:1b:65:d7:22:77: 7c:7e:03:d5:0a:3f:84:f7:6f:98:e8:ce:de:04:b9:5d:5d:44: f1:95:52:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu0DFf7INEi3hogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYxNloXDTI1MDcyMzExMTYxNlowLzEtMCsGA1UEAxMk NjY2Yjc5MGMtYWQ3Yy00ZDk4LTk2YzUtMmJlNzdjN2YzMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnPn7Cv8N99OlN0WvfDGa0xEdhgOOSP0SP5N +nW5TixAZZWWmlKwLdKH/udjEyvbTthV38o8WejCnnDV2oUwltk9bEA/ubVioF0B hTRDSRi+wE5M0+/HfiX0e0rbuSPbUkbrmRe6oPWsF7HdHVjoP9jkYOv1bf3lNiHS 8f6EoiSwr0Z/pxpIvwecoRHI+IDfxGibMUna3CCZ27yFfl8IDUtxFwGu9lFbSCBD d3PPgASRKNDYgL2rCfML5D79WGvJhArQy1hL0XZi8W4/zHEg5GegiPVieLVgkclx wC8H9MtxVqO832Ob4HT2V4v46xr8U1sltiaybipm94XKp8uchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIT5TcD1jhQcOZG8RmILE0dwewBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBmZDg1YzItZDJkZC0z YjUyLThkNzMtNzU2NmYzMzJiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Qy0G34AkH62n3m2KhWtxs6Pgzw8E1P5YCOLw074tqGAgyglBMXEBx fzd8WRX4vjLUjh9+jbaYTzO15uPonj7lvXrsqGAcj/lL5PYFuVj+wzU1hKyLmxIQ Y316TdbapGCBr86tfJ5JU0yOKPEzv56765jxfFS2uJcjjJZWRmyPAFs2GSGANR06 /sj+vEdXZ41x7T2vswzhfcas3nZ4EjBSLBDEUeAioMpFPglUND5CI8AHXmWyKIs7 VV0i6d/pt7NZD7DppcqgT8yhuxYwNzXovfdBk7WFEWcKfdwPs03leW7WCNkbZdci d3x+A9UKP4T3b5jozt4EuV1dRPGVUnU= -----END CERTIFICATE-----Generated at Fri May 9 02:46:21 2025 by rpki-client