$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa File: 8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa (raw, json) Hash identifier: Jm0iJubaAFCtqdDI/dnP+gtWx2RqOtHzh9evDevZ26E= Subject key identifier: 14:51:E0:D9:2D:8C:20:B0:20:24:CE:43:71:5E:B8:C9:EE:09:81:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D203E6779AD467EFFD600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa Signing time: Thu 06 Mar 2025 13:19:57 +0000 ROA not before: Thu 06 Mar 2025 13:19:57 +0000 ROA not after: Wed 04 Jun 2025 12:19:57 +0000 asID: 207266 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:20:3e:67:79:ad:46:7e:ff:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:57 2025 GMT Not After : Jun 4 12:19:57 2025 GMT Subject: CN=2e31f1d3-697b-4184-b67e-cab4567a7f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:a4:15:cd:25:36:ee:a8:17:a1:df:ef:72: 3e:20:9e:63:d6:0f:ef:da:87:a8:a2:65:08:ea:76: 04:fa:a4:4e:6d:5d:39:48:59:a5:a7:26:49:ae:26: e1:d6:d4:a4:56:a6:0c:62:bf:3b:79:78:93:dc:c0: bb:2e:25:e9:a6:dc:c6:c6:1b:bc:21:dd:2f:42:d9: 23:0d:b0:bf:42:b5:e3:5e:a8:ac:40:08:95:c5:df: 33:4d:65:30:bb:3a:68:66:5e:3b:e4:ca:e8:43:9b: cd:a7:0f:34:d0:44:86:9c:51:50:c3:84:43:f2:5e: 53:56:cf:45:83:df:f6:0c:91:84:68:b0:47:21:d9: f3:87:fb:a2:c1:14:24:b2:72:fa:d5:c1:78:ef:32: 32:b3:58:2c:bc:a0:65:de:bf:f7:e1:7b:6d:1d:90: e3:e4:65:e3:0c:4a:bc:f1:99:90:53:95:93:45:d4: 31:a9:57:28:3c:d7:83:95:c7:0d:2d:7d:a7:33:fc: b8:77:40:dc:86:68:24:9e:dd:d7:a0:09:96:33:a3: ba:a6:02:70:be:92:2a:98:f9:93:e4:15:e4:e0:e8: a4:0e:90:2c:81:89:88:5d:ec:8a:0c:bc:e0:5f:fb: 33:63:2a:c1:2d:d3:0f:b1:c2:b5:4e:3a:23:24:cc: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:51:E0:D9:2D:8C:20:B0:20:24:CE:43:71:5E:B8:C9:EE:09:81:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2f:7e:e2:91:47:50:3a:3b:b7:5e:78:2e:99:9a:bf:a0:90: 92:40:f5:85:53:bd:32:d4:79:f5:63:19:99:99:de:82:32:77: f1:84:83:5d:09:c8:fb:28:65:4c:8f:dd:0b:75:1b:15:c4:29: fb:89:b0:44:cc:cf:c9:4f:9c:47:15:97:ef:05:b7:a8:3e:db: 66:e7:67:29:35:65:de:ba:2d:b7:a5:6a:df:f1:97:ee:fa:5f: d0:3f:d9:3b:de:8f:29:1a:d2:62:8d:70:de:76:89:81:1c:ff: 28:69:5f:ca:0f:7b:d7:84:32:dd:90:2b:66:d1:e1:49:c7:68: 30:e3:8b:ee:a9:69:42:42:38:8b:96:fc:31:4d:30:c2:4b:a8: f4:46:15:d8:d3:66:40:54:cb:58:3e:63:6e:33:db:41:9f:e3: 72:e1:9f:dc:d1:45:a8:0f:6e:56:8d:93:9b:34:e2:1f:eb:1e: 7b:a4:27:f8:b5:3a:ea:f3:b5:b7:8f:4e:6b:05:1d:bc:7a:2d: 6f:aa:0f:c0:62:10:31:73:da:77:2b:8b:e3:86:a4:b1:80:7d: b5:7d:dc:4b:45:a8:71:48:7c:44:c4:2b:9a:fe:db:9d:1f:dc: ac:1c:54:8e:71:ee:bd:c1:ea:8e:17:df:38:52:2e:68:47:fc: e3:d9:3e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSA+Z3mtRn7/1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1N1oXDTI1MDYwNDEyMTk1N1owLzEtMCsGA1UEAxMk MmUzMWYxZDMtNjk3Yi00MTg0LWI2N2UtY2FiNDU2N2E3ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQSkFc0lNu6oF6Hf73I+IJ5j1g/v2oeoomUI 6nYE+qRObV05SFmlpyZJribh1tSkVqYMYr87eXiT3MC7LiXpptzGxhu8Id0vQtkj DbC/QrXjXqisQAiVxd8zTWUwuzpoZl475MroQ5vNpw800ESGnFFQw4RD8l5TVs9F g9/2DJGEaLBHIdnzh/uiwRQksnL61cF47zIys1gsvKBl3r/34XttHZDj5GXjDEq8 8ZmQU5WTRdQxqVcoPNeDlccNLX2nM/y4d0Dchmgknt3XoAmWM6O6pgJwvpIqmPmT 5BXk4OikDpAsgYmIXeyKDLzgX/szYyrBLdMPscK1TjojJMxvCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRR4NktjCCwICTOQ3FeuMnuCYHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGMyZDRkNjktY2QxMS0z NGIyLWFhN2UtZGY5M2QyNDQ5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQvfuKRR1A6O7deeC6Zmr+gkJJA9YVTvTLUefVjGZmZ3oIyd/GEg10J yPsoZUyP3Qt1GxXEKfuJsETMz8lPnEcVl+8Ft6g+22bnZyk1Zd66Lbelat/xl+76 X9A/2Tvejyka0mKNcN52iYEc/yhpX8oPe9eEMt2QK2bR4UnHaDDji+6paUJCOIuW /DFNMMJLqPRGFdjTZkBUy1g+Y24z20Gf43Lhn9zRRagPblaNk5s04h/rHnukJ/i1 OurztbePTmsFHbx6LW+qD8BiEDFz2ncri+OGpLGAfbV93EtFqHFIfETEK5r+250f 3KwcVI5x7r3B6o4X3zhSLmhH/OPZPks= -----END CERTIFICATE-----Generated at Sat Mar 15 06:08:50 2025 by rpki-client