$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa File: 1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa (raw, json) Hash identifier: c/d6Zvkcu1z7RPZIUQzVqMPL5FlH+MZ/HTez9mvGTzE= Subject key identifier: 77:21:33:0C:74:D1:E0:4A:4C:94:45:37:FF:6A:C9:D5:63:00:6B:E8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62023446E9B758294DCC8900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:34:46:e9:b7:58:29:4d:cc:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=388d13fb-e0b2-43c3-8473-3969dbdc3511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:29:a1:6f:17:48:ef:b5:23:d3:5d:04:a0: 37:74:cb:82:c4:a0:0c:cf:b7:fd:8c:53:ac:93:d8: 00:33:9b:2b:a7:6f:65:8a:2e:61:7f:ea:24:2b:89: 3c:fb:c5:21:fa:b9:3e:ff:60:25:82:52:db:16:55: 97:88:05:6f:99:1b:f9:5c:f6:c4:b3:de:f5:89:61: 8b:ea:29:dc:57:8f:1a:0a:be:e5:da:12:dd:93:cf: 1e:4d:98:df:f4:2a:ba:62:b0:e4:e2:35:5f:35:40: f7:3c:ca:f6:13:60:bb:31:b6:f1:3e:1e:61:1f:af: 80:ec:0c:d7:fe:e6:49:48:9e:8a:73:b8:c1:89:52: e0:1f:f6:16:c4:9b:60:62:68:2a:d7:16:3b:c3:21: e0:d8:59:c0:89:f8:44:47:80:29:b9:b1:51:7a:68: b0:1d:83:a3:5c:0b:6e:13:be:9b:68:96:84:80:33: 6d:be:d0:54:aa:46:99:a6:b2:93:4f:20:01:84:5d: c2:69:06:49:ae:8b:75:d5:00:52:19:c5:87:ee:17: a3:1c:f4:ce:02:c0:76:bd:b4:26:86:e5:43:4f:94: 36:20:d8:4a:9c:f6:10:ca:bc:e4:01:03:c5:35:1b: 7a:54:81:f0:10:5e:7f:76:eb:27:ce:5b:fa:34:f5: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:33:0C:74:D1:E0:4A:4C:94:45:37:FF:6A:C9:D5:63:00:6B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ae:8b:1b:b9:f2:88:58:d4:7c:a9:ee:c9:dd:e2:04:06:48: a3:80:fd:98:fa:cf:d6:a8:6d:58:c6:01:7e:02:2a:ba:4a:ae: 63:ea:3d:22:88:9d:76:8e:21:52:86:df:df:6c:da:fe:03:f1: d2:71:be:bc:aa:85:31:a6:43:45:2a:db:c5:2f:49:5b:88:bb: fe:fc:2c:4e:c2:3a:18:98:e7:3e:b0:82:c7:1a:0c:30:4b:ad: d4:a6:b6:8c:47:a1:91:70:e2:20:51:0f:26:f6:18:6b:b2:d0: 14:4e:3d:52:a9:92:ab:c5:9c:d1:43:bb:cc:54:67:d8:40:48: dc:15:39:67:76:da:a6:ed:83:eb:f9:78:db:98:3c:ee:1b:4a: ec:3b:56:25:e0:c5:3a:ec:5f:88:bd:fb:e0:b9:25:be:48:aa: d8:11:75:e2:31:8c:28:39:64:96:d9:02:9f:72:5c:a2:54:c8: 93:a9:ac:f2:4c:b5:be:62:c0:f8:a0:ef:e2:56:f0:e4:d3:de: ac:97:00:cb:4f:19:7f:bb:03:59:9e:14:8a:70:bf:58:ea:16: d3:83:39:3b:30:85:68:d5:21:ad:fc:87:a9:a7:64:22:57:b5: e8:b2:64:5f:91:a2:6e:38:48:bc:44:c8:02:f7:46:88:06:9b: c3:f3:56:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjRG6bdYKU3MiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Mzg4ZDEzZmItZTBiMi00M2MzLTg0NzMtMzk2OWRiZGMzNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6UpoW8XSO+1I9NdBKA3dMuCxKAMz7f9jFOs k9gAM5srp29lii5hf+okK4k8+8Uh+rk+/2AlglLbFlWXiAVvmRv5XPbEs971iWGL 6incV48aCr7l2hLdk88eTZjf9Cq6YrDk4jVfNUD3PMr2E2C7MbbxPh5hH6+A7AzX /uZJSJ6Kc7jBiVLgH/YWxJtgYmgq1xY7wyHg2FnAifhER4ApubFRemiwHYOjXAtu E76baJaEgDNtvtBUqkaZprKTTyABhF3CaQZJrot11QBSGcWH7hejHPTOAsB2vbQm huVDT5Q2INhKnPYQyrzkAQPFNRt6VIHwEF5/dusnzlv6NPU06wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHchMwx00eBKTJRFN/9qydVjAGvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWZhMzlmMmItODBiZi0z ZTNkLThhYTMtNjMwZjE4MjBjODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWuixu58ohY1Hyp7snd4gQGSKOA/Zj6z9aobVjGAX4CKrpKrmPqPSKI nXaOIVKG399s2v4D8dJxvryqhTGmQ0Uq28UvSVuIu/78LE7COhiY5z6wgscaDDBL rdSmtoxHoZFw4iBRDyb2GGuy0BROPVKpkqvFnNFDu8xUZ9hASNwVOWd22qbtg+v5 eNuYPO4bSuw7ViXgxTrsX4i9++C5Jb5IqtgRdeIxjCg5ZJbZAp9yXKJUyJOprPJM tb5iwPig7+JW8OTT3qyXAMtPGX+7A1meFIpwv1jqFtODOTswhWjVIa38h6mnZCJX teiyZF+Rom44SLxEyAL3RogGm8PzVuA= -----END CERTIFICATE-----Generated at Fri Oct 10 23:59:45 2025 by rpki-client