$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa File: 6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa (raw, json) Hash identifier: QgCbhTUM7myQtn2+ahn02t3A9ZuH5WtX7Z3QlRmvHtA= Subject key identifier: 2B:59:E2:FC:C8:87:D9:3A:B0:B0:81:AE:63:B6:BA:92:FD:89:64:82 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E364468CC539AA28E140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e3:64:46:8c:c5:39:aa:28:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=70f1267e-0a17-4c1b-835b-dd0ec6edd672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:45:67:d8:28:20:b2:70:d5:c2:77:0c:81: f1:2a:ef:8c:fe:c9:0c:68:db:d6:ea:d4:3f:3c:89: d9:85:4f:b9:46:44:a8:d2:31:c0:90:06:03:a4:2c: 37:2e:94:48:11:0c:30:43:52:34:2e:15:ab:e8:ba: 6b:d5:15:31:5b:b7:0a:d4:bc:4d:56:a0:cd:dd:d3: cf:b3:69:3f:0c:75:87:92:24:fa:8e:5f:a1:23:16: 5a:57:eb:8d:30:b0:ac:7e:03:01:3d:04:89:ce:11: a8:9f:da:65:8d:41:b0:ea:04:b9:d7:cc:be:2b:aa: 7e:07:12:c0:6c:df:72:f2:2c:34:94:72:52:1e:57: 70:1e:ff:ee:20:7f:5a:20:6c:c6:95:d6:81:64:81: f8:95:75:4f:c2:45:88:39:7e:f9:3c:fc:29:5d:83: 72:10:fa:2f:51:6b:1a:81:05:e1:a5:a3:14:9d:a0: 60:1e:a4:6a:15:5f:fc:01:67:c5:1f:30:d0:0b:b1: e4:a2:41:cf:16:2c:cd:82:de:30:36:94:cb:fb:77: 57:25:7d:b0:98:51:04:86:3b:2d:c9:47:f8:0f:64: 1a:1b:7d:de:87:50:67:a3:6d:48:37:64:08:98:3c: 04:a5:4a:7b:91:39:37:cd:75:a2:dd:1c:c8:dd:f3: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:E2:FC:C8:87:D9:3A:B0:B0:81:AE:63:B6:BA:92:FD:89:64:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:77:73:89:3c:84:13:e8:b7:9e:59:59:2a:52:d4:1e:c1:5b: 5e:c3:5e:4f:51:21:b5:64:94:d2:57:37:dd:95:ed:1a:e9:74: 7e:ae:d0:1c:2f:48:e3:33:dc:5b:5e:4b:06:63:1d:56:02:5f: 83:24:2f:1d:51:58:0a:89:5c:36:da:03:6e:43:b9:67:a0:17: 55:5b:30:a4:a0:57:5f:3f:0c:c7:26:41:76:85:e0:a2:b6:a1: a7:ff:b4:17:33:2d:d9:b7:58:c6:1a:dc:a8:4b:7e:c4:97:65: 49:98:da:f3:e0:9e:20:da:e1:ca:9a:84:ff:84:73:88:e7:ec: e0:2f:d9:8a:f4:94:62:d4:cb:9c:d7:2a:f0:7a:70:98:16:01: 71:f7:34:21:af:87:a5:2e:f6:48:0a:cf:37:e7:ce:df:c6:96: 37:ad:d2:e2:fc:78:0d:25:ec:c6:22:ef:7e:e7:b2:4e:34:3a: d7:b8:e1:55:4b:8a:2a:8f:72:3c:d8:1d:57:b0:ef:62:95:78: 5d:55:49:de:ec:d7:53:59:83:5a:86:86:06:9e:2b:97:51:f3: 0c:0d:c0:cb:f1:66:2a:53:ef:73:97:1d:01:fc:ad:ca:bf:48: b8:ab:21:f6:d6:97:d6:ef:bc:b4:5f:63:d7:12:f0:bf:c3:f9: 48:d7:64:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeNkRozFOaoo4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzBmMTI2N2UtMGExNy00YzFiLTgzNWItZGQwZWM2ZWRkNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5hFZ9goILJw1cJ3DIHxKu+M/skMaNvW6tQ/ PInZhU+5RkSo0jHAkAYDpCw3LpRIEQwwQ1I0LhWr6Lpr1RUxW7cK1LxNVqDN3dPP s2k/DHWHkiT6jl+hIxZaV+uNMLCsfgMBPQSJzhGon9pljUGw6gS518y+K6p+BxLA bN9y8iw0lHJSHldwHv/uIH9aIGzGldaBZIH4lXVPwkWIOX75PPwpXYNyEPovUWsa gQXhpaMUnaBgHqRqFV/8AWfFHzDQC7HkokHPFizNgt4wNpTL+3dXJX2wmFEEhjst yUf4D2QaG33eh1Bno21IN2QImDwEpUp7kTk3zXWi3RzI3fM6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtZ4vzIh9k6sLCBrmO2upL9iWSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmYzODMzMWEtMThkNS0z YjQ4LWJkOWYtOTcxOWIwOWJjMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC13c4k8hBPot55ZWSpS1B7BW17DXk9RIbVklNJXN92V7RrpdH6u0Bwv SOMz3FteSwZjHVYCX4MkLx1RWAqJXDbaA25DuWegF1VbMKSgV18/DMcmQXaF4KK2 oaf/tBczLdm3WMYa3KhLfsSXZUmY2vPgniDa4cqahP+Ec4jn7OAv2Yr0lGLUy5zX KvB6cJgWAXH3NCGvh6Uu9kgKzzfnzt/Gljet0uL8eA0l7MYi737nsk40Ote44VVL iiqPcjzYHVew72KVeF1VSd7s11NZg1qGhgaeK5dR8wwNwMvxZipT73OXHQH8rcq/ SLirIfbWl9bvvLRfY9cS8L/D+UjXZK0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:04 2025 by rpki-client