$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/712552cd-cea6-30bf-937f-c41752d6b93a.roa File: 712552cd-cea6-30bf-937f-c41752d6b93a.roa (raw, json) Hash identifier: r9aF/Vkxdxk2HMCq4cBr24ONWbaVM2HDbtNrLyaN5O0= Subject key identifier: 8E:15:7F:31:6D:28:BD:82:0D:D7:7B:7F:D6:DD:BE:A1:BB:DB:F5:55 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB5AD9718D9EB4CB659F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/712552cd-cea6-30bf-937f-c41752d6b93a.roa Signing time: Thu 24 Apr 2025 11:16:28 +0000 ROA not before: Thu 24 Apr 2025 11:16:28 +0000 ROA not after: Wed 23 Jul 2025 11:16:28 +0000 asID: 12041 IP address blocks: 161.232.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:5a:d9:71:8d:9e:b4:cb:65:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:28 2025 GMT Not After : Jul 23 11:16:28 2025 GMT Subject: CN=33da3d95-0358-48c8-8ab4-d36137a8ef64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:9e:c1:36:7d:ba:0b:c3:21:cd:c7:d1:c2: 26:d4:8f:53:a1:cf:8b:99:44:58:65:0f:74:94:ca: df:ce:dc:86:76:ac:d6:34:fe:b2:16:c7:87:f6:31: aa:79:7e:79:f9:f9:56:75:c3:22:7a:59:79:ae:91: 10:74:6b:f7:75:7a:13:39:62:97:f7:71:8b:1c:21: b7:3f:f3:fd:e5:db:37:be:2e:36:87:ab:89:dd:1a: 5e:ae:5c:fa:aa:55:5c:2e:6b:f7:71:f5:85:b1:06: de:33:b5:15:5a:d7:b4:39:32:ea:20:2c:bd:e8:a9: b7:b7:01:fb:80:eb:18:b0:82:cb:78:dd:c2:16:05: 18:4f:53:2e:c5:95:7f:23:4f:ed:58:a9:d8:cf:a3: 32:78:01:75:0c:b6:b4:ec:99:7a:94:29:2b:31:bf: ac:29:0f:4e:75:e8:1b:87:37:c1:50:7e:99:71:56: ac:d6:57:1e:d2:f2:49:20:49:ad:80:ba:33:42:73: de:d5:90:2c:c0:50:6b:2d:32:7c:0a:65:4d:c8:58: c8:2c:9b:8e:a7:9c:42:ad:87:dc:2f:37:98:ad:a2: fb:c4:6e:a6:90:69:3b:e1:57:87:72:30:60:3d:4f: 47:a9:a4:e2:69:ae:a8:9c:e2:1b:2f:da:20:de:5c: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:15:7F:31:6D:28:BD:82:0D:D7:7B:7F:D6:DD:BE:A1:BB:DB:F5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/712552cd-cea6-30bf-937f-c41752d6b93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:6d:d4:52:6d:da:f6:dd:fb:2d:cd:21:52:1b:f8:08:4a:5f: da:b5:82:5d:ca:e4:62:ee:53:c1:18:5b:15:52:b7:97:ad:17: 04:d8:9a:6c:e8:d8:f5:97:a3:12:1b:2d:6f:51:a8:7b:8c:ae: d1:03:fc:13:7b:65:ea:10:fa:76:97:76:64:3a:c2:2e:fc:81: c0:9e:74:12:af:35:7e:f4:8f:5e:fe:4f:bc:d6:5b:78:a9:c3: 4e:86:41:00:87:14:c0:11:65:31:58:1a:5f:5f:21:d2:3d:27: b5:01:0f:6c:95:c8:dd:1e:03:34:f7:f4:df:cf:31:52:fb:a5: 36:00:be:aa:ac:70:43:6d:ec:7d:5e:92:b2:45:3c:3c:27:6b: 35:24:04:eb:cf:00:88:7b:d6:62:c4:92:a7:59:f5:13:e2:1f: 17:ba:c3:3b:06:1b:c6:7c:6d:40:a8:ce:65:b3:e9:ba:a9:cb: 76:6f:49:ff:b9:4c:95:49:4b:38:0c:74:4b:5e:aa:27:42:27: 1b:8d:c9:fb:ed:26:89:4f:c9:dc:c2:ad:cf:b3:65:d8:8e:ff: 76:56:a6:85:5d:05:5a:13:87:ea:99:6f:69:6a:2a:38:78:66: f3:03:2b:9e:bc:26:be:01:ab:1b:2a:07:ad:db:4a:18:a0:36: 98:8e:6d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu1rZcY2etMtlnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyOFoXDTI1MDcyMzExMTYyOFowLzEtMCsGA1UEAxMk MzNkYTNkOTUtMDM1OC00OGM4LThhYjQtZDM2MTM3YThlZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliWewTZ9ugvDIc3H0cIm1I9Toc+LmURYZQ90 lMrfztyGdqzWNP6yFseH9jGqeX55+flWdcMiell5rpEQdGv3dXoTOWKX93GLHCG3 P/P95ds3vi42h6uJ3Rperlz6qlVcLmv3cfWFsQbeM7UVWte0OTLqICy96Km3twH7 gOsYsILLeN3CFgUYT1MuxZV/I0/tWKnYz6MyeAF1DLa07Jl6lCkrMb+sKQ9Odegb hzfBUH6ZcVas1lce0vJJIEmtgLozQnPe1ZAswFBrLTJ8CmVNyFjILJuOp5xCrYfc LzeYraL7xG6mkGk74VeHcjBgPU9HqaTiaa6onOIbL9og3lyDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4VfzFtKL2CDdd7f9bdvqG72/VVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzEyNTUyY2QtY2VhNi0z MGJmLTkzN2YtYzQxNzUyZDZiOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNt1FJt2vbd+y3NIVIb+AhKX9q1gl3K5GLuU8EYWxVSt5etFwTYmmzo 2PWXoxIbLW9RqHuMrtED/BN7ZeoQ+naXdmQ6wi78gcCedBKvNX70j17+T7zWW3ip w06GQQCHFMARZTFYGl9fIdI9J7UBD2yVyN0eAzT39N/PMVL7pTYAvqqscENt7H1e krJFPDwnazUkBOvPAIh71mLEkqdZ9RPiHxe6wzsGG8Z8bUCozmWz6bqpy3ZvSf+5 TJVJSzgMdEteqidCJxuNyfvtJolPydzCrc+zZdiO/3ZWpoVdBVoTh+qZb2lqKjh4 ZvMDK568Jr4BqxsqB63bShigNpiObZ4= -----END CERTIFICATE-----Generated at Fri May 9 18:48:27 2025 by rpki-client