$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa File: ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa (raw, json) Hash identifier: Q49elNgE6vUYoH4i3flxVdHN4yO0DzAUq7y/pjVrXmw= Subject key identifier: 68:67:A4:22:B5:0F:DE:F1:AC:B2:75:46:14:75:24:B7:73:0E:17:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB530C5A3519111DB1E740 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa Signing time: Thu 24 Apr 2025 11:16:24 +0000 ROA not before: Thu 24 Apr 2025 11:16:24 +0000 ROA not after: Wed 23 Jul 2025 11:16:24 +0000 asID: 12041 IP address blocks: 161.232.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:53:0c:5a:35:19:11:1d:b1:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:24 2025 GMT Not After : Jul 23 11:16:24 2025 GMT Subject: CN=05245804-7a29-4789-850a-cb40a7d1cc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:01:bb:20:ca:e4:48:e8:b1:26:7a:7c:e7: e9:f8:da:2a:13:2c:05:a7:be:aa:8f:3d:b5:bf:12: f7:95:c2:cd:6f:e4:52:1e:c9:3d:7a:0d:01:52:cc: c3:90:47:3e:d9:ac:98:2e:a4:61:16:40:75:06:43: a1:2d:82:2f:a9:ea:27:d2:0c:e8:79:a9:96:76:8d: f0:c1:e3:9b:76:ed:2f:ac:68:4b:5b:c7:dc:30:4a: 25:49:89:51:58:37:c9:eb:dd:97:d0:65:a6:77:9d: 9f:4b:fc:30:37:c2:0a:b1:2b:b7:de:87:be:63:98: 50:46:61:41:1a:af:a1:f5:3b:c4:8c:c1:59:c4:37: 9d:17:98:ac:5e:dc:d7:4f:05:8d:b7:e4:12:8e:ff: 4e:07:05:66:02:58:1b:80:95:01:30:73:8f:e5:fa: bf:01:18:bd:8f:fd:4e:31:33:86:5a:63:3f:a9:15: 81:f7:09:90:a5:e4:cf:59:cd:fa:52:2b:35:00:55: 8d:cd:7b:23:70:58:66:23:89:44:23:07:36:fa:6c: da:13:63:85:64:95:25:65:54:c8:8a:9e:64:1e:18: bc:cc:b0:a9:49:8c:66:16:7f:59:41:b9:d3:e0:1b: a9:85:0c:c3:cf:a1:70:74:6b:f0:06:86:8b:78:d2: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:67:A4:22:B5:0F:DE:F1:AC:B2:75:46:14:75:24:B7:73:0E:17:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:1b:8c:12:d3:2d:72:cb:7f:69:da:14:24:f5:c1:83:43:f0: 9c:3b:40:08:2f:df:b0:b1:2d:13:ae:1d:a1:de:07:aa:b2:b9: ea:6f:79:dc:73:97:f1:20:dd:74:f2:f8:71:02:35:ff:78:f8: 20:7f:46:cd:d2:0c:1e:93:84:50:d1:26:9c:b0:eb:80:17:9b: 97:4b:8d:eb:29:5d:df:99:33:43:4b:ec:ac:cc:39:6d:0f:1a: 30:9b:db:dc:ce:e6:a3:e5:e1:d7:52:69:ad:02:72:f9:b8:73: fa:33:b9:29:2f:9b:fe:3c:7d:18:b6:b6:d5:2c:b6:16:d3:7f: 76:1e:e1:47:20:3e:0a:82:f1:71:2e:37:b2:bc:5e:73:3b:7c: 78:83:94:6d:a5:85:64:b4:b5:b8:8a:5c:79:a2:75:66:0d:95: 13:85:e1:8f:09:43:84:4b:64:94:84:e6:2e:63:16:13:8f:39: 14:e2:f7:21:12:b4:2d:17:f8:67:33:7d:3a:dc:7f:00:3c:c1: 9d:48:55:3c:57:68:8c:b4:f4:25:a8:59:3b:49:4f:7a:03:86: 81:d2:4e:18:df:71:14:ab:e9:7c:e6:d2:91:c6:bd:26:23:71: f5:58:49:52:d1:de:7f:c7:ba:cc:14:d0:1f:c0:13:2d:69:27: b2:8c:8d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu1MMWjUZER2x50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyNFoXDTI1MDcyMzExMTYyNFowLzEtMCsGA1UEAxMk MDUyNDU4MDQtN2EyOS00Nzg5LTg1MGEtY2I0MGE3ZDFjYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSYBuyDK5EjosSZ6fOfp+NoqEywFp76qjz21 vxL3lcLNb+RSHsk9eg0BUszDkEc+2ayYLqRhFkB1BkOhLYIvqeon0gzoeamWdo3w weObdu0vrGhLW8fcMEolSYlRWDfJ692X0GWmd52fS/wwN8IKsSu33oe+Y5hQRmFB Gq+h9TvEjMFZxDedF5isXtzXTwWNt+QSjv9OBwVmAlgbgJUBMHOP5fq/ARi9j/1O MTOGWmM/qRWB9wmQpeTPWc36Uis1AFWNzXsjcFhmI4lEIwc2+mzaE2OFZJUlZVTI ip5kHhi8zLCpSYxmFn9ZQbnT4BuphQzDz6FwdGvwBoaLeNJhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhnpCK1D97xrLJ1RhR1JLdzDhcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E3NmY1ZTEtZjU4OS0z YjkwLTgyMTMtYmE0NWYwNjdhM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgbjBLTLXLLf2naFCT1wYND8Jw7QAgv37CxLROuHaHeB6qyuepvedxz l/Eg3XTy+HECNf94+CB/Rs3SDB6ThFDRJpyw64AXm5dLjespXd+ZM0NL7KzMOW0P GjCb29zO5qPl4ddSaa0Ccvm4c/ozuSkvm/48fRi2ttUsthbTf3Ye4UcgPgqC8XEu N7K8XnM7fHiDlG2lhWS0tbiKXHmidWYNlROF4Y8JQ4RLZJSE5i5jFhOPORTi9yES tC0X+GczfTrcfwA8wZ1IVTxXaIy09CWoWTtJT3oDhoHSThjfcRSr6Xzm0pHGvSYj cfVYSVLR3n/HuswU0B/AEy1pJ7KMjVk= -----END CERTIFICATE-----Generated at Fri May 9 08:02:27 2025 by rpki-client