$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa File: 1909c963-0da6-3f09-8485-a5f139e7bf16.roa (raw, json) Hash identifier: BMGMAjBgFxJOYoaNq/tYPJrUitKA5/G3QTzmQODw6aw= Subject key identifier: 41:58:C6:C4:09:FA:A9:2B:20:60:4E:2B:37:EC:0C:0C:EE:E1:D7:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62020321CE594A043C728310 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:03:21:ce:59:4a:04:3c:72:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f2e9c622-e578-4e2e-bc03-f97c900156f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:39:04:c6:fe:3c:d6:7e:39:ba:09:b2:3e: 0f:4c:48:a3:aa:1e:44:39:3a:01:1f:90:e6:c9:6d: d1:c7:06:74:85:b1:ec:f6:6d:a3:13:8f:c0:d3:1e: f5:6b:a9:c0:46:a1:6e:20:af:36:3c:ac:c1:be:55: 33:b4:4a:76:33:d0:3e:cb:06:32:df:a4:e8:01:bc: 87:6b:c2:50:21:1b:04:76:75:81:00:e3:13:02:4b: d1:06:97:e8:1a:0b:12:af:46:95:33:75:26:f2:31: 52:a8:5e:93:8d:f0:85:54:80:8a:30:9c:a8:ec:f6: 89:12:a3:cf:d8:34:22:df:36:fe:f0:f4:df:72:2e: a3:5e:87:8f:90:59:57:6a:6c:d2:db:a3:19:a1:fb: 3d:1a:d3:0b:94:c2:58:97:fe:c4:0c:01:25:f2:33: 48:d1:2d:fb:a5:96:ad:88:8e:6f:10:7d:17:03:93: ee:b6:83:1e:88:96:6f:78:42:03:83:89:2e:53:b1: 52:7f:56:ae:17:55:ce:0d:51:c1:c1:14:74:97:a7: 57:cd:0f:2e:ca:b9:ba:75:3d:28:9e:7a:72:ec:48: 6d:f2:a5:4e:75:cf:29:37:ee:f1:f5:1c:c0:83:4e: 45:02:5a:4a:55:c7:5c:a7:7d:96:f0:4b:de:24:df: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:C6:C4:09:FA:A9:2B:20:60:4E:2B:37:EC:0C:0C:EE:E1:D7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:eb:9c:95:40:b9:e0:59:a6:de:1a:14:8c:11:4c:26:61:5c: b1:b6:06:38:fc:1f:56:1f:21:41:9a:04:5f:c3:ea:d9:64:3c: 3b:63:76:af:f3:53:c9:26:06:c4:16:98:49:b4:82:93:34:8e: 05:97:60:b3:50:0d:4a:33:cb:b7:63:d3:7a:07:c6:8f:65:7d: e1:e6:9a:2f:78:28:5f:9e:29:0a:e1:8e:3a:56:e3:93:f5:27: e2:a9:fa:3c:a3:3b:11:3f:f1:28:31:f1:b1:8b:46:2a:df:54: 74:39:d6:a6:8e:18:76:31:a0:1e:24:94:bf:4c:72:88:29:8e: 9d:7f:c9:70:08:3c:b4:e7:13:83:fe:3b:88:2d:eb:ab:b0:ba: 17:d9:25:68:f8:f8:94:29:09:fc:6d:1a:8a:47:df:8a:30:92: ff:14:d5:84:68:07:3e:ef:4e:36:36:67:6d:9b:74:b2:74:4d: b5:29:1d:b9:04:0b:48:13:1a:8a:49:47:85:83:ee:f7:96:10: ef:3d:d1:16:8d:0d:4b:0f:8e:87:a2:4f:a1:58:c2:c7:7b:a5: 1b:65:f2:f5:26:21:96:4e:4d:10:61:61:1f:a6:81:87:a8:d8: f3:b0:c5:00:f1:1c:5a:ff:4f:dc:1d:13:98:9f:6c:a8:11:f7: 56:3a:c0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgMhzllKBDxygxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjJlOWM2MjItZTU3OC00ZTJlLWJjMDMtZjk3YzkwMDE1NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQY5BMb+PNZ+OboJsj4PTEijqh5EOToBH5Dm yW3RxwZ0hbHs9m2jE4/A0x71a6nARqFuIK82PKzBvlUztEp2M9A+ywYy36ToAbyH a8JQIRsEdnWBAOMTAkvRBpfoGgsSr0aVM3Um8jFSqF6TjfCFVICKMJyo7PaJEqPP 2DQi3zb+8PTfci6jXoePkFlXamzS26MZofs9GtMLlMJYl/7EDAEl8jNI0S37pZat iI5vEH0XA5PutoMeiJZveEIDg4kuU7FSf1auF1XODVHBwRR0l6dXzQ8uyrm6dT0o nnpy7Eht8qVOdc8pN+7x9RzAg05FAlpKVcdcp32W8EveJN/jYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFYxsQJ+qkrIGBOKzfsDAzu4ddzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTkwOWM5NjMtMGRhNi0z ZjA5LTg0ODUtYTVmMTM5ZTdiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfrnJVAueBZpt4aFIwRTCZhXLG2Bjj8H1YfIUGaBF/D6tlkPDtjdq/z U8kmBsQWmEm0gpM0jgWXYLNQDUozy7dj03oHxo9lfeHmmi94KF+eKQrhjjpW45P1 J+Kp+jyjOxE/8Sgx8bGLRirfVHQ51qaOGHYxoB4klL9Mcogpjp1/yXAIPLTnE4P+ O4gt66uwuhfZJWj4+JQpCfxtGopH34owkv8U1YRoBz7vTjY2Z22bdLJ0TbUpHbkE C0gTGopJR4WD7veWEO890RaNDUsPjoeiT6FYwsd7pRtl8vUmIZZOTRBhYR+mgYeo 2POwxQDxHFr/T9wdE5ifbKgR91Y6wPo= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:05 2025 by rpki-client