$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa File: 496f17e0-3824-37af-a3f6-19223c789842.roa (raw, json) Hash identifier: TYUZnB1bZQ3h7hopox/sAVD/x/7RAVeTOZx2iv8fHO8= Subject key identifier: 3A:7A:7F:62:FA:01:55:A9:3A:B0:7F:68:A7:87:02:21:46:A2:54:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D9B30D8FF4A10E321BA2 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d9:b3:0d:8f:f4:a1:0e:32:1b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b2b832f3-df22-4ecc-bd3d-c566e3797265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:55:08:01:c3:df:1e:e2:33:42:b3:6a:a4: 57:a7:09:6a:1a:1e:30:f0:2c:b3:96:86:21:f0:4c: 59:3c:83:fc:58:e9:0d:5e:f6:74:0e:c2:a8:0a:e0: 5d:29:06:2d:0a:b9:c5:4b:d5:fa:cf:2f:83:24:23: dc:32:e9:e4:34:b5:4e:61:bf:74:12:34:6b:3a:50: 80:4f:25:aa:14:c2:1e:79:7a:43:7f:aa:54:7e:bb: 3a:b5:0c:66:65:c1:22:7d:c1:2b:8a:00:e1:a0:8d: a9:9c:de:17:18:b1:bd:be:38:03:f4:a6:2a:4b:3a: 3d:e2:8c:1f:79:e1:af:45:88:d4:d6:95:37:5c:c8: 83:a0:19:93:dc:74:a4:9c:01:e4:7f:02:b1:8f:2a: 9d:96:15:43:a7:bc:2e:3b:63:f0:de:2c:ca:01:0f: 0f:7b:8e:38:dc:20:7f:11:a5:d8:bb:f5:e7:42:50: 29:96:38:64:8e:37:6a:f1:56:01:ed:53:63:f5:3b: f1:6c:04:54:bd:ea:e6:49:dc:3a:80:11:4d:38:4e: 7f:9a:a6:df:bb:4c:62:bf:6f:c3:6f:e2:dd:0c:29: b8:4c:83:42:76:bf:9a:f1:12:8d:39:9c:b5:be:24: 24:e8:f5:4d:30:fa:26:5b:29:6e:8a:94:ca:9e:c4: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:7F:62:FA:01:55:A9:3A:B0:7F:68:A7:87:02:21:46:A2:54:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e8:14:d8:9e:1a:22:8e:94:d8:21:da:72:d7:04:5c:ea:2f: b2:c4:ff:c6:a5:c2:e2:44:89:29:28:9b:c0:32:eb:be:77:65: cb:4c:fa:54:3b:6e:12:fc:63:a9:1c:f8:84:8f:9c:3f:e3:f3: de:71:a5:96:09:a9:f5:47:5e:b3:dc:ba:39:a6:ce:b1:35:cf: 31:75:e5:a6:9c:b0:73:ee:e5:2c:98:73:f2:bc:31:cb:25:51: e4:21:a4:34:ef:af:9d:13:83:d5:c0:c7:ca:aa:ce:01:3c:a7: b5:80:cd:ca:3a:8c:d2:9f:25:97:4e:32:a0:95:b0:53:b9:ae: 38:8c:83:91:55:84:f6:9e:6f:62:38:36:f9:e8:71:53:ad:cf: 53:98:b8:47:20:fc:8b:ea:a8:d9:00:d1:fd:cf:99:89:7e:ee: 51:00:08:94:01:cd:7d:01:0c:c4:11:cc:60:f5:90:16:44:0d: 21:39:e2:22:8a:d5:07:27:ae:bf:ea:a3:08:02:40:fe:07:88: bc:9d:3c:e3:a0:e9:5d:41:17:39:8a:5b:68:ea:a1:95:dc:2e: 89:ac:1f:71:34:52:f8:18:5c:d8:f4:9b:2f:a6:75:75:d5:1e: 87:25:1b:62:ad:0d:2f:ca:3c:17:08:89:0f:08:51:7c:0f:88: 1b:65:9a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdmzDY/0oQ4yG6IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjJiODMyZjMtZGYyMi00ZWNjLWJkM2QtYzU2NmUzNzk3MjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouNVCAHD3x7iM0KzaqRXpwlqGh4w8CyzloYh 8ExZPIP8WOkNXvZ0DsKoCuBdKQYtCrnFS9X6zy+DJCPcMunkNLVOYb90EjRrOlCA TyWqFMIeeXpDf6pUfrs6tQxmZcEifcErigDhoI2pnN4XGLG9vjgD9KYqSzo94owf eeGvRYjU1pU3XMiDoBmT3HSknAHkfwKxjyqdlhVDp7wuO2Pw3izKAQ8Pe4443CB/ EaXYu/XnQlApljhkjjdq8VYB7VNj9TvxbARUvermSdw6gBFNOE5/mqbfu0xiv2/D b+LdDCm4TINCdr+a8RKNOZy1viQk6PVNMPomWyluipTKnsR7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp6f2L6AVWpOrB/aKeHAiFGolTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDk2ZjE3ZTAtMzgyNC0z N2FmLWEzZjYtMTkyMjNjNzg5ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABboFNieGiKOlNgh2nLXBFzqL7LE/8alwuJEiSkom8Ay6753ZctM+lQ7 bhL8Y6kc+ISPnD/j895xpZYJqfVHXrPcujmmzrE1zzF15aacsHPu5SyYc/K8Mcsl UeQhpDTvr50Tg9XAx8qqzgE8p7WAzco6jNKfJZdOMqCVsFO5rjiMg5FVhPaeb2I4 NvnocVOtz1OYuEcg/IvqqNkA0f3PmYl+7lEACJQBzX0BDMQRzGD1kBZEDSE54iKK 1Qcnrr/qowgCQP4HiLydPOOg6V1BFzmKW2jqoZXcLomsH3E0UvgYXNj0my+mdXXV HoclG2KtDS/KPBcIiQ8IUXwPiBtlmoo= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:23 2025 by rpki-client