$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa File: 1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa (raw, json) Hash identifier: lEKJs+YVwZa+myPVI52STGpw4XaVD9/g/DlTdYsdXWw= Subject key identifier: 22:93:BF:97:E0:6D:FA:00:DD:29:B5:A1:53:86:BF:6A:C4:95:62:49 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D89F2C14644D40013680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d8:9f:2c:14:64:4d:40:01:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=42e70e55-ba85-4252-870e-227bc818aeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:1a:7e:b6:b8:1b:e7:85:ef:55:f6:e3:a4: e2:3c:e2:98:88:24:4a:07:7b:33:0b:ef:21:09:ec: 28:c8:c1:9e:1a:3b:c3:d2:38:02:d6:3a:75:3a:4d: b9:40:97:1f:00:de:bf:84:20:35:6a:7a:94:82:42: 5e:c2:02:8d:66:85:e3:ff:92:d2:a5:63:86:ec:16: 17:e2:fd:10:d2:da:de:9a:c1:4f:8f:75:eb:47:ff: 4f:97:0d:d6:b8:29:69:3d:ed:a0:bf:6f:de:d4:c9: fc:a2:b6:ac:4e:5a:ca:1c:5f:47:46:c4:2d:0b:00: 8e:2a:d0:9c:e3:95:fe:3b:77:eb:86:6f:d6:f1:73: 7c:61:7a:af:fa:1c:d7:9e:1d:4c:83:5c:2d:0a:5f: 9b:00:6e:b3:f1:ee:d6:fa:23:5d:1e:16:32:76:c4: 50:ee:34:06:b9:f5:34:65:32:5d:44:4b:09:73:eb: 7f:bd:23:14:6f:e0:53:db:e9:af:64:3c:bd:93:57: b7:35:78:bc:78:7f:8d:50:b8:b8:d1:8d:6f:eb:fa: 4c:9d:0e:6f:a4:0f:8e:0c:b7:c1:98:83:84:13:70: 2b:b8:51:85:1d:77:53:fe:23:c1:16:c2:28:8d:16: 05:0c:04:34:71:2c:5a:bc:3c:4b:c9:63:f3:ab:92: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:BF:97:E0:6D:FA:00:DD:29:B5:A1:53:86:BF:6A:C4:95:62:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ad:2b:2b:c0:ef:db:e3:4c:5e:7c:ff:0f:3f:13:f6:08:ca: 01:ef:98:01:18:b2:67:d5:32:88:9e:c3:c9:4c:5e:dc:d1:fe: ba:ab:45:06:f3:82:e1:17:52:b3:41:12:4c:fb:ab:dd:bd:0d: bd:40:b8:9e:3f:98:0b:73:de:f5:ed:8a:37:10:0b:50:23:8a: 1b:ad:21:d8:84:ba:0a:97:87:fc:9f:b2:f3:02:34:2e:2d:c6: 41:64:82:cf:53:ad:83:f5:48:ec:24:22:2c:8b:f0:bd:70:29: 6b:e2:1a:3b:4f:e0:ab:c2:81:87:9d:71:99:77:31:8d:d5:8b: d4:4d:b8:e0:12:4a:f7:28:67:cf:a9:4b:ad:db:0a:77:d0:3a: ea:da:47:d1:5e:0d:1b:a2:08:b5:b9:dc:93:26:30:ce:4a:7c: 27:03:81:8c:7d:9d:f0:5f:b4:ff:c8:e8:59:e1:90:d4:2d:a1: 44:ca:84:fe:e6:3c:0a:42:6e:3b:da:42:1d:20:a5:67:91:1c: bb:86:01:64:fc:89:94:3c:36:3b:b7:81:21:00:a9:17:9a:e9: b3:41:b3:04:0e:80:f1:b8:0a:80:03:b3:45:94:19:06:a4:0c: c7:9b:db:b3:40:6e:68:d2:26:8b:69:84:e0:1e:0a:00:db:c0: 89:69:8f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdifLBRkTUABNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDJlNzBlNTUtYmE4NS00MjUyLTg3MGUtMjI3YmM4MThhZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGoafra4G+eF71X246TiPOKYiCRKB3szC+8h CewoyMGeGjvD0jgC1jp1Ok25QJcfAN6/hCA1anqUgkJewgKNZoXj/5LSpWOG7BYX 4v0Q0tremsFPj3XrR/9Plw3WuClpPe2gv2/e1Mn8orasTlrKHF9HRsQtCwCOKtCc 45X+O3frhm/W8XN8YXqv+hzXnh1Mg1wtCl+bAG6z8e7W+iNdHhYydsRQ7jQGufU0 ZTJdREsJc+t/vSMUb+BT2+mvZDy9k1e3NXi8eH+NULi40Y1v6/pMnQ5vpA+ODLfB mIOEE3AruFGFHXdT/iPBFsIojRYFDAQ0cSxavDxLyWPzq5Kp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKTv5fgbfoA3Sm1oVOGv2rElWJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM0ZWQ4YjYtNDU0NC0z NTA1LThjZjYtMjdhNDdjOTc5MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqtKyvA79vjTF58/w8/E/YIygHvmAEYsmfVMoiew8lMXtzR/rqrRQbz guEXUrNBEkz7q929Db1AuJ4/mAtz3vXtijcQC1AjihutIdiEugqXh/yfsvMCNC4t xkFkgs9TrYP1SOwkIiyL8L1wKWviGjtP4KvCgYedcZl3MY3Vi9RNuOASSvcoZ8+p S63bCnfQOuraR9FeDRuiCLW53JMmMM5KfCcDgYx9nfBftP/I6FnhkNQtoUTKhP7m PApCbjvaQh0gpWeRHLuGAWT8iZQ8Nju3gSEAqRea6bNBswQOgPG4CoADs0WUGQak DMeb27NAbmjSJotphOAeCgDbwIlpjzY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:16 2025 by rpki-client