$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/653cbb0f-0f2d-354c-9c64-e7621a0a0934.roa File: 653cbb0f-0f2d-354c-9c64-e7621a0a0934.roa (raw, json) Hash identifier: pXWL68ki0dOUTlLwuZDgftdIf8avFDQtQY5bokooxkw= Subject key identifier: 8F:41:20:AE:CC:1B:AF:59:9B:6E:8B:20:AB:5D:E1:98:C0:A9:CB:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D2156A464F8CB1AC30300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/653cbb0f-0f2d-354c-9c64-e7621a0a0934.roa Signing time: Thu 06 Mar 2025 13:19:58 +0000 ROA not before: Thu 06 Mar 2025 13:19:58 +0000 ROA not after: Wed 04 Jun 2025 12:19:58 +0000 asID: 207266 IP address blocks: 161.232.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:21:56:a4:64:f8:cb:1a:c3:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:58 2025 GMT Not After : Jun 4 12:19:58 2025 GMT Subject: CN=cb3df21a-c6c0-4736-b299-62e9fa6dcbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:8a:be:1d:41:a6:b3:0f:ec:81:1b:78:33: 56:b1:0a:04:0c:8d:0a:c0:92:f5:0e:63:15:e6:b9: d0:b0:f7:f3:d8:52:29:09:e6:fd:08:50:82:40:18: fa:66:92:da:59:ca:fb:e1:97:65:04:6e:b4:01:b8: dc:92:8d:ed:26:f9:b7:fa:4c:80:01:32:a5:d6:d8: c3:3d:ea:80:b2:90:73:bc:70:9d:1d:03:44:fc:0a: fc:1e:c1:6b:b2:0b:62:42:ae:48:90:78:fc:0f:c7: f7:03:7a:f9:77:88:33:b6:e4:f1:f5:78:10:79:a6: 08:4d:88:ba:78:05:06:ea:6e:d0:e1:e2:b0:d7:fc: c2:b1:0e:e2:81:e8:25:d5:f7:00:fe:5a:cd:7f:09: 38:c0:c6:af:61:b8:cb:95:0b:10:d2:fc:3e:47:47: 1b:27:b0:4c:c6:ab:b5:95:a1:49:e9:d3:9d:28:35: 4c:74:c0:69:67:10:a1:47:cb:81:02:80:4f:45:38: 07:c0:d8:fe:10:3b:5b:9d:8d:ee:54:d2:17:42:ed: 5a:f6:72:fb:c7:6e:f2:28:f9:b1:b4:f3:28:08:bb: 28:e8:ad:83:98:b5:aa:9a:16:84:09:71:69:57:df: 74:a9:97:80:cc:a7:c4:a1:d4:5c:83:3e:11:40:38: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:20:AE:CC:1B:AF:59:9B:6E:8B:20:AB:5D:E1:98:C0:A9:CB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/653cbb0f-0f2d-354c-9c64-e7621a0a0934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e8:66:1c:ef:48:00:6f:59:97:57:57:b4:c5:eb:a9:79:ff: 28:23:77:02:9e:0a:0e:92:b4:1e:f9:cf:9d:c5:26:e2:16:2e: 37:e7:9a:a7:76:5f:5e:8c:6b:80:20:36:43:94:a5:2d:c8:ac: 3a:9b:8f:ee:4f:7a:b8:dc:c5:71:21:7a:6a:5a:7e:fd:cd:e5: 59:e1:60:67:45:3a:fe:34:82:f4:0a:87:a0:41:8f:bf:05:99: 55:4d:fe:39:1a:73:5b:27:5d:5b:e9:2a:4f:76:d3:ef:05:c1: 90:63:d5:c3:c7:93:1f:0f:ae:40:7a:99:c0:07:08:ee:88:91: 7b:4a:af:16:4f:eb:5d:a6:07:9e:f2:f7:4c:03:3e:7c:ca:a0: ca:14:44:57:93:b2:a4:0a:dc:34:0d:21:dd:24:09:11:60:d0: 0a:c8:44:f8:60:68:2d:6a:2b:bb:af:90:97:16:97:20:72:78: 0f:31:54:74:5e:ba:cc:80:6e:01:dd:33:07:a7:16:d8:d6:7a: e8:04:de:7d:ca:55:86:e6:1e:f6:e4:92:4c:6f:e4:b3:6c:a0: ca:33:cd:cd:1b:6c:4e:73:c6:b9:2c:f9:d2:ad:07:58:66:d5: 88:e1:c8:21:05:c8:cf:2d:15:74:ea:c8:c9:38:bd:29:e4:02: 02:b8:ca:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSFWpGT4yxrDAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1OFoXDTI1MDYwNDEyMTk1OFowLzEtMCsGA1UEAxMk Y2IzZGYyMWEtYzZjMC00NzM2LWIyOTktNjJlOWZhNmRjYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUeKvh1BprMP7IEbeDNWsQoEDI0KwJL1DmMV 5rnQsPfz2FIpCeb9CFCCQBj6ZpLaWcr74ZdlBG60Abjcko3tJvm3+kyAATKl1tjD PeqAspBzvHCdHQNE/Ar8HsFrsgtiQq5IkHj8D8f3A3r5d4gztuTx9XgQeaYITYi6 eAUG6m7Q4eKw1/zCsQ7igegl1fcA/lrNfwk4wMavYbjLlQsQ0vw+R0cbJ7BMxqu1 laFJ6dOdKDVMdMBpZxChR8uBAoBPRTgHwNj+EDtbnY3uVNIXQu1a9nL7x27yKPmx tPMoCLso6K2DmLWqmhaECXFpV990qZeAzKfEodRcgz4RQDgaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9BIK7MG69Zm26LIKtd4ZjAqcs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjUzY2JiMGYtMGYyZC0z NTRjLTljNjQtZTc2MjFhMGEwOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvoZhzvSABvWZdXV7TF66l5/ygjdwKeCg6StB75z53FJuIWLjfnmqd2 X16Ma4AgNkOUpS3IrDqbj+5PerjcxXEhempafv3N5VnhYGdFOv40gvQKh6BBj78F mVVN/jkac1snXVvpKk920+8FwZBj1cPHkx8PrkB6mcAHCO6IkXtKrxZP612mB57y 90wDPnzKoMoURFeTsqQK3DQNId0kCRFg0ArIRPhgaC1qK7uvkJcWlyByeA8xVHRe usyAbgHdMwenFtjWeugE3n3KVYbmHvbkkkxv5LNsoMozzc0bbE5zxrks+dKtB1hm 1YjhyCEFyM8tFXTqyMk4vSnkAgK4yj0= -----END CERTIFICATE-----Generated at Sat Mar 15 06:13:44 2025 by rpki-client