$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa File: 957476a5-697f-35e9-93fb-d2a0b6428b90.roa (raw, json) Hash identifier: aq27L79qhbBL7Y1odSkP25dBOcHMhn3T9xU9REHq1I8= Subject key identifier: 17:BA:F5:13:0E:79:08:FA:51:A2:5B:6D:85:D0:07:8B:87:77:81:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D334FBF23DB05BD09D60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d3:34:fb:f2:3d:b0:5b:d0:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b0f46375-5662-4d44-9b38-06857f0bb1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:bf:7e:10:2f:50:a5:1f:f0:b8:42:ec:45: a7:ab:f1:91:41:5e:02:a9:8c:f0:0e:11:4e:f6:d3: a4:b5:cc:2f:76:c6:2a:f7:dc:12:ef:9d:6e:d1:ac: 11:58:b4:29:de:c1:99:8c:09:df:1a:0a:57:8e:69: cd:6b:73:fa:09:67:0a:f1:6b:b2:bc:ef:a1:b7:98: 1f:ce:cc:9b:a4:47:5e:99:d9:55:21:a3:ed:9f:c3: 9c:a2:cc:9c:42:32:61:09:59:dd:f7:b9:b3:b2:15: 59:8e:20:f7:fd:b2:9a:25:75:e2:d8:26:27:fd:4b: 8a:56:36:62:45:b2:4b:90:f1:a7:f0:2e:0e:fe:7b: 55:f4:57:e4:2b:5e:83:38:36:07:34:23:56:b3:92: c9:b8:78:c2:5e:ca:ea:d1:fc:43:85:f2:f9:8f:21: 42:58:9d:6d:ad:e5:c2:ab:a0:90:da:90:c2:3c:0a: d7:b7:58:e2:c2:6a:af:df:8b:3e:42:57:91:48:9d: ec:48:51:1c:d8:61:2c:45:1c:93:ad:0b:23:9d:a6: 2a:40:07:66:c9:45:45:ee:6c:d5:f0:f8:89:b7:06: 3f:4c:0c:0d:30:7f:94:62:c2:2a:e4:0a:38:89:6a: a5:3d:03:42:73:4a:70:2d:29:5c:b1:3d:ce:a5:b2: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BA:F5:13:0E:79:08:FA:51:A2:5B:6D:85:D0:07:8B:87:77:81:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5c:e0:c5:a2:3b:eb:3e:1e:d5:43:1d:df:03:8e:85:eb:02: 59:f2:d1:18:f4:bc:cb:ce:d8:cb:42:e2:8c:19:40:ff:28:df: 88:9c:ac:ee:35:5e:2f:b4:cd:d0:3b:7f:60:75:94:f0:0c:10: 58:ff:80:c7:d6:3c:5d:7f:ed:a0:20:42:64:9b:14:73:71:a0: 75:3e:f7:9d:2f:93:76:88:fa:7d:06:f4:ba:47:a5:1f:ed:0c: f2:c1:43:7c:aa:81:8b:b6:8c:bc:aa:99:04:25:b6:16:5b:85: 48:16:87:9a:a3:c5:00:27:dc:df:ce:99:c3:0a:7b:ce:54:41: 38:fe:ce:da:89:62:04:58:0e:1d:26:bd:56:f8:fb:24:53:d4: 31:3f:86:b3:7b:15:2b:59:26:37:19:ec:10:e3:a9:94:8f:50: 8e:7a:4c:d7:01:1b:53:2a:89:b9:2e:1b:e0:72:df:7e:ce:7e: 48:9d:c5:3a:f3:f4:d2:5d:22:4e:b9:65:5f:9d:70:af:f1:29: ab:16:1c:54:4b:b0:31:ee:d6:e4:fc:68:6e:a1:b7:ed:72:ab: 6f:18:48:76:7f:d9:3a:02:91:03:d0:07:be:de:b1:0e:4d:f1: 38:13:c9:e7:36:db:7c:ac:e6:e9:05:9a:6f:8e:9c:8c:d7:b5: 80:e1:18:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdM0+/I9sFvQnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjBmNDYzNzUtNTY2Mi00ZDQ0LTliMzgtMDY4NTdmMGJiMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/+/fhAvUKUf8LhC7EWnq/GRQV4CqYzwDhFO 9tOktcwvdsYq99wS751u0awRWLQp3sGZjAnfGgpXjmnNa3P6CWcK8WuyvO+ht5gf zsybpEdemdlVIaPtn8OcosycQjJhCVnd97mzshVZjiD3/bKaJXXi2CYn/UuKVjZi RbJLkPGn8C4O/ntV9FfkK16DODYHNCNWs5LJuHjCXsrq0fxDhfL5jyFCWJ1treXC q6CQ2pDCPArXt1jiwmqv34s+QleRSJ3sSFEc2GEsRRyTrQsjnaYqQAdmyUVF7mzV 8PiJtwY/TAwNMH+UYsIq5Ao4iWqlPQNCc0pwLSlcsT3OpbK4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe69RMOeQj6UaJbbYXQB4uHd4FCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3NDc2YTUtNjk3Zi0z NWU5LTkzZmItZDJhMGI2NDI4YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlc4MWiO+s+HtVDHd8DjoXrAlny0Rj0vMvO2MtC4owZQP8o34icrO41 Xi+0zdA7f2B1lPAMEFj/gMfWPF1/7aAgQmSbFHNxoHU+950vk3aI+n0G9LpHpR/t DPLBQ3yqgYu2jLyqmQQlthZbhUgWh5qjxQAn3N/OmcMKe85UQTj+ztqJYgRYDh0m vVb4+yRT1DE/hrN7FStZJjcZ7BDjqZSPUI56TNcBG1MqibkuG+By337OfkidxTrz 9NJdIk65ZV+dcK/xKasWHFRLsDHu1uT8aG6ht+1yq28YSHZ/2ToCkQPQB77esQ5N 8TgTyec223ys5ukFmm+OnIzXtYDhGIY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:06 2025 by rpki-client