$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json) Hash identifier: xM6MaPIPhLcdQ6LQlqWEoxBue/8389k8+K7V2SytbWo= Subject key identifier: 5E:0B:5C:36:AA:24:9D:7C:54:61:82:C4:19:8C:2D:3B:89:F0:B9:76 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202172E7700839290C88700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:17:2e:77:00:83:92:90:c8:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=aca6f923-23d5-4035-b464-fcfa86748862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:37:56:47:fb:a8:23:a6:6c:ba:f6:b4:1c: ae:83:c1:c9:7e:1c:99:01:7b:5a:0a:d6:f9:f1:ef: 48:23:ce:f6:93:06:12:f2:1e:2e:95:ab:cd:38:a6: ca:df:ff:ea:61:95:0f:99:dd:48:0b:8e:b0:5c:91: d4:62:98:36:4d:9b:95:6b:21:2b:4e:72:07:29:e9: aa:22:b0:a4:65:f2:2d:23:fb:34:9b:bf:23:97:aa: a7:5e:37:b7:da:21:45:9e:9d:79:82:ea:85:57:f3: cc:ac:28:f6:da:45:5d:81:3e:2d:31:7c:8a:95:85: 8b:75:ce:57:b0:73:cb:16:29:03:67:fa:2b:11:8e: de:69:22:c8:20:12:63:88:a2:c1:2f:2e:a0:d9:21: 57:31:6f:00:32:0e:f4:3d:c2:31:2e:8b:8e:4d:3a: b9:6e:11:06:16:87:5c:41:4a:c6:77:0b:6e:03:8f: 6c:d6:74:45:3f:4f:1d:fa:fa:c2:07:2b:f4:be:67: dd:97:a5:dc:17:1b:d6:ca:58:61:70:4b:5d:84:88: 5e:d9:c0:2e:08:a8:1f:72:1b:e6:1d:f7:64:37:b2: 66:09:d7:e6:44:2c:66:51:33:ce:05:b0:a5:bd:5c: de:5f:be:62:f7:3b:10:ec:5a:82:1d:ac:10:dd:c6: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0B:5C:36:AA:24:9D:7C:54:61:82:C4:19:8C:2D:3B:89:F0:B9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:c2:5c:e9:6b:49:33:86:b6:10:da:9d:70:9b:bd:ea:ab:3d: fa:64:52:01:8f:6e:b2:38:89:4c:76:c8:ea:b9:29:ec:c9:67: 83:b6:92:ba:be:fc:9d:0f:46:70:9a:6a:bc:aa:e9:8c:87:f1: 01:9e:8e:15:5b:5a:43:0b:bf:b3:e5:13:eb:d5:84:0c:f9:58: 8e:6d:4c:ac:50:eb:4c:ae:7d:40:26:0e:ea:b9:cc:7e:6a:1c: 7a:48:67:d8:a0:81:2b:c2:53:c3:cc:ee:04:8a:ae:b7:ad:42: fa:7a:f2:46:fd:37:37:c8:80:5c:08:00:15:01:48:96:10:01: 5b:e3:cb:92:b8:9b:19:4f:95:0e:6d:a7:0c:42:26:f6:bb:f0: 63:16:97:10:94:76:dd:9e:44:11:b2:dd:58:c6:e6:a4:bc:d5: b9:a0:c3:55:c0:28:6f:6a:fe:ff:05:27:0c:3c:ac:9a:21:ab: 95:bc:a9:6f:65:3a:b1:7f:d2:ee:df:d0:d3:59:c3:f4:b2:7c: 51:cb:b8:0f:f8:be:0f:94:f1:52:9d:64:01:ad:8f:87:c8:27: d2:90:2c:d8:1f:ac:93:6d:c7:f4:bb:ad:1c:2c:9b:b9:17:ab: 94:c1:60:c6:a5:d2:2b:d0:27:a8:7a:99:34:07:5f:38:a0:7c: d0:ec:9e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhcudwCDkpDIhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWNhNmY5MjMtMjNkNS00MDM1LWI0NjQtZmNmYTg2NzQ4ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX83Vkf7qCOmbLr2tByug8HJfhyZAXtaCtb5 8e9II872kwYS8h4ulavNOKbK3//qYZUPmd1IC46wXJHUYpg2TZuVayErTnIHKemq IrCkZfItI/s0m78jl6qnXje32iFFnp15guqFV/PMrCj22kVdgT4tMXyKlYWLdc5X sHPLFikDZ/orEY7eaSLIIBJjiKLBLy6g2SFXMW8AMg70PcIxLouOTTq5bhEGFodc QUrGdwtuA49s1nRFP08d+vrCByv0vmfdl6XcFxvWylhhcEtdhIhe2cAuCKgfchvm HfdkN7JmCdfmRCxmUTPOBbClvVzeX75i9zsQ7FqCHawQ3cZV/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4LXDaqJJ18VGGCxBmMLTuJ8Ll2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzCXOlrSTOGthDanXCbveqrPfpkUgGPbrI4iUx2yOq5KezJZ4O2krq+ /J0PRnCaaryq6YyH8QGejhVbWkMLv7PlE+vVhAz5WI5tTKxQ60yufUAmDuq5zH5q HHpIZ9iggSvCU8PM7gSKrretQvp68kb9NzfIgFwIABUBSJYQAVvjy5K4mxlPlQ5t pwxCJva78GMWlxCUdt2eRBGy3VjG5qS81bmgw1XAKG9q/v8FJww8rJohq5W8qW9l OrF/0u7f0NNZw/SyfFHLuA/4vg+U8VKdZAGtj4fIJ9KQLNgfrJNtx/S7rRwsm7kX q5TBYMal0ivQJ6h6mTQHXzigfNDsnhg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:02 2025 by rpki-client