$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa File: e2c1050a-8329-3314-821d-b44bd07c87ed.roa (raw, json) Hash identifier: XKpHLvFMktS5G0tN0nTDezPds9e3I8nKop1LNmsNbOU= Subject key identifier: 8D:9E:3D:20:DD:81:33:26:62:7B:B5:B3:81:78:3B:3E:5F:66:36:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB88C3D5218906872D5CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa Signing time: Thu 24 Apr 2025 11:16:50 +0000 ROA not before: Thu 24 Apr 2025 11:16:50 +0000 ROA not after: Wed 23 Jul 2025 11:16:50 +0000 asID: 12041 IP address blocks: 161.232.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:88:c3:d5:21:89:06:87:2d:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:50 2025 GMT Not After : Jul 23 11:16:50 2025 GMT Subject: CN=68460d3c-56e8-478e-84ac-31a228323c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:11:0e:b7:a4:1c:bf:8b:6f:63:a1:98:89: c9:9f:0a:77:a9:32:04:ae:67:75:0b:16:f4:59:a0: f2:a4:c1:74:6f:0b:49:5b:6c:f4:f9:5c:18:62:b1: f7:ba:76:70:0c:d9:86:da:d0:65:38:51:d2:33:99: 15:5f:13:c5:d7:b6:9c:a9:73:a8:39:39:1d:42:54: 60:3d:5e:d5:96:7d:2b:ca:24:54:51:14:1f:5a:91: 3e:dd:a7:84:a5:13:7f:ec:bd:65:de:63:84:83:7f: 6d:0c:af:1a:b9:d1:d8:5d:72:9a:58:11:d1:cc:f2: c1:df:bf:50:67:b2:36:72:eb:67:1d:ed:27:4c:1a: e4:2b:22:08:84:b3:49:8a:3a:a3:79:25:fa:48:3e: e7:91:b8:76:98:de:12:46:34:09:10:a7:12:30:2c: 09:49:13:35:77:bf:2a:a2:5c:ec:b8:12:d0:98:5f: 97:8a:46:13:d4:35:f8:8f:d3:b2:63:9a:54:df:49: 93:4c:d7:dd:44:9a:cf:7d:eb:5b:3b:47:62:0f:21: 0d:2a:1f:8e:1f:e7:d2:bf:bb:d9:da:82:25:e2:b3: 02:ca:82:60:90:96:83:60:91:58:48:3a:1d:7d:d1: 70:c8:46:e8:de:2a:93:34:43:2f:0f:02:45:80:7b: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9E:3D:20:DD:81:33:26:62:7B:B5:B3:81:78:3B:3E:5F:66:36:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2c1050a-8329-3314-821d-b44bd07c87ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ef:6c:0f:a9:54:06:67:ff:3a:8c:e7:9d:ae:db:1a:32:64: 68:f6:2a:af:cf:46:e5:c0:fa:81:42:c4:f2:86:12:35:83:84: cf:d2:bb:2d:09:4c:4c:9e:ca:6f:51:89:35:68:2e:d0:83:aa: ab:61:dd:20:c8:47:c9:2f:03:28:f6:1e:92:aa:44:a9:e2:79: db:13:b8:c4:c5:0f:92:41:35:4b:5d:54:21:44:9b:75:34:e8: 3b:e1:13:7d:d9:e7:a0:e5:e3:c1:5c:f2:1b:9e:bf:f2:85:10: c2:27:6f:67:2d:ff:de:c1:3d:bd:80:58:da:c6:a0:50:75:b8: ef:7c:af:52:af:44:fc:c7:14:9a:c1:d7:03:5a:30:a8:46:3d: 08:35:8f:ea:78:26:69:db:f6:91:60:d2:05:07:68:94:04:0c: c1:9e:25:87:63:bf:5f:4b:56:0b:4b:44:eb:44:a3:5e:7c:b3: 44:aa:49:38:34:e0:04:9d:f4:4c:28:09:ee:b3:cb:74:20:04: bc:03:13:87:91:31:b3:5a:df:4b:71:56:6c:39:20:fc:0d:31: 81:01:7b:82:ec:33:de:54:42:e4:98:b6:eb:57:f9:b8:ac:14: 35:d9:25:fb:b4:dd:0e:d7:4a:67:ad:ba:4b:bb:8b:50:db:ca: 11:8f:68:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu4jD1SGJBoctXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1MFoXDTI1MDcyMzExMTY1MFowLzEtMCsGA1UEAxMk Njg0NjBkM2MtNTZlOC00NzhlLTg0YWMtMzFhMjI4MzIzYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFIRDrekHL+Lb2OhmInJnwp3qTIErmd1Cxb0 WaDypMF0bwtJW2z0+VwYYrH3unZwDNmG2tBlOFHSM5kVXxPF17acqXOoOTkdQlRg PV7Vln0ryiRUURQfWpE+3aeEpRN/7L1l3mOEg39tDK8audHYXXKaWBHRzPLB379Q Z7I2cutnHe0nTBrkKyIIhLNJijqjeSX6SD7nkbh2mN4SRjQJEKcSMCwJSRM1d78q olzsuBLQmF+XikYT1DX4j9OyY5pU30mTTNfdRJrPfetbO0diDyENKh+OH+fSv7vZ 2oIl4rMCyoJgkJaDYJFYSDodfdFwyEbo3iqTNEMvDwJFgHssawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ePSDdgTMmYnu1s4F4Oz5fZjYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTJjMTA1MGEtODMyOS0z MzE0LTgyMWQtYjQ0YmQwN2M4N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPvbA+pVAZn/zqM552u2xoyZGj2Kq/PRuXA+oFCxPKGEjWDhM/Suy0J TEyeym9RiTVoLtCDqqth3SDIR8kvAyj2HpKqRKniedsTuMTFD5JBNUtdVCFEm3U0 6DvhE33Z56Dl48Fc8huev/KFEMInb2ct/97BPb2AWNrGoFB1uO98r1KvRPzHFJrB 1wNaMKhGPQg1j+p4Jmnb9pFg0gUHaJQEDMGeJYdjv19LVgtLROtEo158s0SqSTg0 4ASd9EwoCe6zy3QgBLwDE4eRMbNa30txVmw5IPwNMYEBe4LsM95UQuSYtutX+bis FDXZJfu03Q7XSmetuku7i1DbyhGPaEo= -----END CERTIFICATE-----Generated at Sun May 11 01:16:23 2025 by rpki-client