$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa File: 8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa (raw, json) Hash identifier: fpaUKh38yYH27ZIdXLDs9o1ifJeNjMFmt88SVi8pT9g= Subject key identifier: 5F:25:DC:36:CF:F2:70:5C:C4:0C:29:EA:29:7C:20:09:B9:35:58:CF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212AABE0A861AF30561B600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa Signing time: Thu 24 Apr 2025 14:12:23 +0000 ROA not before: Thu 24 Apr 2025 14:12:23 +0000 ROA not after: Wed 23 Jul 2025 14:12:23 +0000 asID: 207266 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:aa:be:0a:86:1a:f3:05:61:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:23 2025 GMT Not After : Jul 23 14:12:23 2025 GMT Subject: CN=4e0b8744-0c87-4b6c-9a98-e662c696d86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:90:df:ab:4f:c1:7f:29:53:d5:0c:42:13: 05:1e:f9:da:ee:fa:7b:b5:71:0d:0e:be:30:f5:0d: 49:55:b1:77:05:61:2d:a3:cb:ee:94:11:36:17:01: f7:87:fd:8c:8d:6e:52:1b:ab:1e:9b:46:0f:36:3e: 7e:3b:c9:38:a9:33:72:c7:76:53:f3:e5:28:cc:3b: 81:7a:2d:ac:54:f4:2c:a3:4d:f4:77:01:bf:f5:07: a2:65:d9:ff:47:37:3e:30:04:5c:32:e4:21:4b:d6: 5e:29:50:50:08:1d:54:aa:66:4e:01:4c:c5:9e:7b: 9c:ef:44:b9:de:d7:e6:d8:6f:77:bd:0a:81:50:fd: 66:fa:1d:4f:ec:18:9f:83:7b:e9:9d:f2:9c:59:d3: 01:2b:56:9c:51:9f:0d:49:e5:44:1e:87:ef:c3:eb: 1f:cb:7e:7d:de:bf:72:b8:fc:e5:3c:90:1f:c6:d5: ac:19:74:f7:bf:c0:8d:1d:1d:dc:d1:e0:84:14:67: cb:c7:e5:4d:c4:e7:81:5c:08:e2:61:57:fb:c6:92: 28:e6:2f:bb:04:be:28:4c:ac:8d:49:77:bd:6b:30: 41:40:d3:a4:f2:ef:85:c1:f5:5a:c0:c5:e0:8f:87: d7:85:50:42:9f:74:d5:1e:06:0a:b1:44:c1:ac:81: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:25:DC:36:CF:F2:70:5C:C4:0C:29:EA:29:7C:20:09:B9:35:58:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fd:7b:3b:00:23:dc:11:4e:69:7a:7d:da:d2:67:73:ff:c4: 60:fd:cf:13:4b:21:8f:70:84:49:dc:a8:ce:b9:ac:1d:44:63: f1:d1:95:20:ab:75:e4:15:63:5d:d4:0e:81:54:be:ee:b0:cc: 30:c6:e8:27:1c:6e:d2:a1:0a:df:74:9a:c1:82:f3:29:22:6e: 7d:77:6a:ae:d8:87:a4:82:c5:cb:cf:ca:02:1f:22:d9:a7:89: 09:6e:52:33:ee:52:90:bb:fa:85:7d:db:08:79:62:34:f8:fc: ba:5b:9d:9e:ce:63:ab:e1:43:3e:8e:cd:d3:a1:8e:88:53:12: e8:cd:be:a2:e3:53:dc:d7:82:5c:c7:fe:7c:fb:08:11:86:d1: 4f:c8:88:e3:a2:77:90:43:75:11:b7:78:34:8e:7d:c7:2a:cb: 3d:96:50:62:71:b8:97:d1:bb:c9:ac:d9:3a:97:60:35:02:ea: 92:c3:ef:c2:a9:01:29:8d:c6:86:4d:cb:bb:49:d9:54:ee:13: 5e:b5:48:f5:6d:23:7b:25:bc:6c:91:8a:a2:27:ac:5c:e2:1a: fe:9a:95:3b:b7:ac:b1:59:e3:06:11:7b:0a:d8:0f:9f:5f:d5: 17:8a:b4:47:7c:1d:97:c0:44:cc:58:73:44:ff:8a:48:86:69: 7b:a4:cc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEqq+CoYa8wVhtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTIyM1oXDTI1MDcyMzE0MTIyM1owLzEtMCsGA1UEAxMk NGUwYjg3NDQtMGM4Ny00YjZjLTlhOTgtZTY2MmM2OTZkODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujSQ36tPwX8pU9UMQhMFHvna7vp7tXENDr4w 9Q1JVbF3BWEto8vulBE2FwH3h/2MjW5SG6sem0YPNj5+O8k4qTNyx3ZT8+UozDuB ei2sVPQso030dwG/9QeiZdn/Rzc+MARcMuQhS9ZeKVBQCB1UqmZOAUzFnnuc70S5 3tfm2G93vQqBUP1m+h1P7Bifg3vpnfKcWdMBK1acUZ8NSeVEHofvw+sfy3593r9y uPzlPJAfxtWsGXT3v8CNHR3c0eCEFGfLx+VNxOeBXAjiYVf7xpIo5i+7BL4oTKyN SXe9azBBQNOk8u+FwfVawMXgj4fXhVBCn3TVHgYKsUTBrIEwLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8l3DbP8nBcxAwp6il8IAm5NVjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGNjNDQ5NDctOGNmZi0z NGRjLThmYTktM2U3MDdhMDZkOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT9ezsAI9wRTml6fdrSZ3P/xGD9zxNLIY9whEncqM65rB1EY/HRlSCr deQVY13UDoFUvu6wzDDG6CccbtKhCt90msGC8ykibn13aq7Yh6SCxcvPygIfItmn iQluUjPuUpC7+oV92wh5YjT4/LpbnZ7OY6vhQz6OzdOhjohTEujNvqLjU9zXglzH /nz7CBGG0U/IiOOid5BDdRG3eDSOfccqyz2WUGJxuJfRu8ms2TqXYDUC6pLD78Kp ASmNxoZNy7tJ2VTuE161SPVtI3slvGyRiqInrFziGv6alTu3rLFZ4wYRewrYD59f 1ReKtEd8HZfARMxYc0T/ikiGaXukzLI= -----END CERTIFICATE-----Generated at Fri May 9 20:55:34 2025 by rpki-client