$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa File: 3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa (raw, json) Hash identifier: CM60ytMsOZurVEKapW2pfwM+VBDdUjkqqePQ72M4Tgs= Subject key identifier: 88:D7:2C:80:99:8C:D7:E1:3D:C3:50:E7:3F:5F:A3:85:A7:C7:3B:00 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620221C237BC519C1925D720 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:21:c2:37:bc:51:9c:19:25:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b1aea8bd-b684-4e77-96f4-97a046c5b34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:48:f9:69:64:8a:32:1c:f8:ee:a7:2b:80: 08:4c:2a:59:af:c6:35:18:7a:0c:37:fd:d9:d7:8d: 10:dd:13:6d:e4:81:61:53:d5:4f:09:09:9c:3f:31: d3:84:a5:f1:3b:40:ce:0f:06:58:b3:7d:2c:f1:74: 7e:76:75:fc:c2:a6:ed:5b:c1:38:e9:d0:30:88:85: d9:eb:4a:dc:b1:5d:5f:69:35:30:ce:bd:bc:be:9f: 9b:e8:a1:1f:31:61:f4:a7:f5:6d:3a:92:67:a1:61: 45:73:07:be:bc:5a:13:34:2c:6e:34:04:26:b1:7d: 29:a1:74:58:ac:2d:bb:9f:6d:51:eb:d4:78:44:bd: 87:36:0c:91:a1:79:d0:7c:8f:e1:b6:8b:fb:ef:4b: b2:eb:08:fc:e5:74:56:dd:18:93:dc:b2:39:3f:aa: 95:3b:38:f8:28:eb:20:14:8d:36:65:c5:86:87:38: 39:0c:38:42:58:74:f9:a4:f7:57:7b:5e:ac:d1:da: 52:a8:7e:6c:b9:21:eb:5e:b3:c9:63:15:29:c8:86: 75:66:6d:7c:49:84:2f:59:c7:c1:99:75:3c:f8:2e: fa:8b:2c:d9:3d:03:eb:cc:2e:25:b2:9b:c3:a6:80: f5:56:ca:60:9e:83:4b:8b:aa:3d:e8:40:48:ca:34: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D7:2C:80:99:8C:D7:E1:3D:C3:50:E7:3F:5F:A3:85:A7:C7:3B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:52:7f:2c:d7:04:68:11:ad:d8:72:32:f8:05:18:c2:b5:1a: 45:f5:76:74:d5:02:3a:f1:7f:62:7d:46:50:11:63:d2:36:09: 5e:0b:30:10:77:72:bf:dd:87:9c:3f:e4:06:5e:10:ba:1d:95: e8:d2:22:f9:f5:3d:30:99:9a:d9:15:e1:52:09:47:92:e5:22: ba:0b:b7:57:87:75:2c:52:54:75:75:7e:34:2d:cf:08:96:eb: bc:a0:23:a7:43:64:1b:a5:49:53:cb:a3:9f:43:46:8b:8c:27: 50:19:57:f4:1c:84:1d:57:ae:65:68:73:4c:06:d3:03:53:63: 8f:3f:bc:d6:1e:65:3e:e8:c7:1b:f3:4a:69:19:44:24:8b:fc: 6c:0c:03:a8:47:ce:9a:b3:1b:b3:61:26:d2:38:6e:36:40:81: 18:ca:25:a4:c7:2e:fb:ab:e5:04:ba:f6:6d:dc:c4:89:61:ba: 2b:ff:d5:8d:39:61:41:ee:61:02:60:8c:38:88:cb:51:f3:e6: bb:0c:ca:7c:30:8e:cd:55:83:f4:95:55:0c:ba:76:6f:e5:46: fe:85:14:fe:50:bf:87:b5:d5:c8:bf:80:56:25:8c:de:b6:16: 98:6a:68:10:00:32:a2:98:f0:f3:0c:aa:3d:07:45:2b:4d:1a: 10:53:0e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiHCN7xRnBkl1yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjFhZWE4YmQtYjY4NC00ZTc3LTk2ZjQtOTdhMDQ2YzViMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtI+WlkijIc+O6nK4AITCpZr8Y1GHoMN/3Z 140Q3RNt5IFhU9VPCQmcPzHThKXxO0DODwZYs30s8XR+dnX8wqbtW8E46dAwiIXZ 60rcsV1faTUwzr28vp+b6KEfMWH0p/VtOpJnoWFFcwe+vFoTNCxuNAQmsX0poXRY rC27n21R69R4RL2HNgyRoXnQfI/htov770uy6wj85XRW3RiT3LI5P6qVOzj4KOsg FI02ZcWGhzg5DDhCWHT5pPdXe16s0dpSqH5suSHrXrPJYxUpyIZ1Zm18SYQvWcfB mXU8+C76iyzZPQPrzC4lspvDpoD1VspgnoNLi6o96EBIyjRXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjXLICZjNfhPcNQ5z9fo4WnxzsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q1YmEyMWYtZmUzZC0z MWZkLTk4YTctZDE4ZjhlN2Y0NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdSfyzXBGgRrdhyMvgFGMK1GkX1dnTVAjrxf2J9RlARY9I2CV4LMBB3 cr/dh5w/5AZeELodlejSIvn1PTCZmtkV4VIJR5LlIroLt1eHdSxSVHV1fjQtzwiW 67ygI6dDZBulSVPLo59DRouMJ1AZV/QchB1XrmVoc0wG0wNTY48/vNYeZT7oxxvz SmkZRCSL/GwMA6hHzpqzG7NhJtI4bjZAgRjKJaTHLvur5QS69m3cxIlhuiv/1Y05 YUHuYQJgjDiIy1Hz5rsMynwwjs1Vg/SVVQy6dm/lRv6FFP5Qv4e11ci/gFYljN62 FphqaBAAMqKY8PMMqj0HRStNGhBTDrI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:01 2025 by rpki-client