$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa File: 9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa (raw, json) Hash identifier: ohQCIBP/QHqCQmvBCaa2D6Q6Ss1g0zPdtiX39hFHhOY= Subject key identifier: E9:9A:F8:A2:70:FA:11:4A:10:A5:30:35:6F:FB:FA:1A:D5:9E:CF:F5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202324A6E444EEFB9DC6100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:32:4a:6e:44:4e:ef:b9:dc:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a818cb4a-43f5-48f8-b3eb-baa31d855002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:23:40:91:1e:cc:fb:23:b2:48:9a:e5:62: 02:9f:bd:54:c4:f3:de:2f:bf:e5:54:c3:2e:4d:6a: e8:78:b7:66:9f:26:35:9a:7f:a7:cc:2a:b2:99:59: c4:25:c0:44:68:74:bf:72:84:e8:7e:d0:7f:7d:94: 5f:2d:c1:42:2b:21:3c:26:10:4f:d5:4a:9b:ac:b4: b6:6a:5f:e1:84:6b:37:66:b3:6c:3d:30:72:51:da: a0:c7:18:b9:e3:bd:35:1d:61:62:c6:be:47:de:74: b1:45:43:05:fe:74:83:a4:7a:d2:99:0a:e6:b2:12: ce:44:b0:39:c9:c6:c9:a6:9f:b8:2a:ee:09:f7:25: ac:b3:6c:13:3c:bf:cb:25:9e:2d:bc:82:4a:09:e3: d1:fa:15:b9:64:c6:d5:93:c9:77:a9:72:93:7b:08: 8f:e0:27:7b:60:f8:b7:e9:97:a9:70:ab:94:f2:ad: a2:71:c0:7c:58:75:db:df:b5:4d:17:84:54:97:fb: 90:26:00:ab:bf:51:b4:41:35:57:2b:a3:1e:10:73: ba:e2:d7:06:9a:c6:d7:df:ae:0e:b6:6b:e1:11:a2: c8:fb:38:97:9d:8b:58:63:73:32:7a:a5:04:dc:61: ed:da:a3:7f:d0:58:06:72:51:32:4e:e9:c0:60:64: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:F8:A2:70:FA:11:4A:10:A5:30:35:6F:FB:FA:1A:D5:9E:CF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:3b:3f:16:5e:b6:0a:53:55:9d:40:d4:be:79:8a:15:7e:27: 74:4c:8b:95:82:b6:7e:c1:fc:da:81:73:54:65:b9:f8:4e:df: b6:3b:9e:0a:4c:62:5c:b5:43:37:81:14:45:60:be:5a:50:0c: 24:6e:4d:47:1e:2e:4e:73:20:37:d6:66:c0:c6:b1:20:a6:11: 50:1c:52:29:0b:63:07:3e:45:ab:63:f2:67:97:54:5b:15:b3: f4:7a:2a:61:1e:62:72:f6:b9:25:50:76:e5:56:36:23:29:79: 1c:1a:7f:e8:ca:c6:ec:3f:9a:6a:43:24:b2:ad:bb:a8:d0:89: fb:1b:80:60:15:11:7f:97:82:c4:47:d7:23:48:87:27:cd:00: 41:30:f6:fc:51:eb:24:fc:db:1f:8d:0c:91:5c:c4:2c:d7:ff: 0e:57:11:6d:d3:01:d3:90:5e:cd:e5:ad:a2:a6:fc:d7:11:a7: 2c:40:25:0e:18:45:37:ac:9f:d7:16:89:2e:fa:a1:0d:d7:69: 99:12:b7:47:8f:27:61:0b:87:6a:b9:aa:96:a8:0a:fb:71:63: 72:2e:3b:06:7a:ac:75:7b:ec:e9:fa:48:34:5b:f7:cb:43:ef: c0:95:9e:95:90:d0:71:24:5d:c2:5b:ac:db:db:11:80:c4:39: 0f:26:82:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjJKbkRO77ncYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTgxOGNiNGEtNDNmNS00OGY4LWIzZWItYmFhMzFkODU1MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOEjQJEezPsjskia5WICn71UxPPeL7/lVMMu TWroeLdmnyY1mn+nzCqymVnEJcBEaHS/coToftB/fZRfLcFCKyE8JhBP1UqbrLS2 al/hhGs3ZrNsPTByUdqgxxi54701HWFixr5H3nSxRUMF/nSDpHrSmQrmshLORLA5 ycbJpp+4Ku4J9yWss2wTPL/LJZ4tvIJKCePR+hW5ZMbVk8l3qXKTewiP4Cd7YPi3 6ZepcKuU8q2iccB8WHXb37VNF4RUl/uQJgCrv1G0QTVXK6MeEHO64tcGmsbX364O tmvhEaLI+ziXnYtYY3MyeqUE3GHt2qN/0FgGclEyTunAYGSaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOma+KJw+hFKEKUwNW/7+hrVns/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWE4OWMwNmUtZTdiOS0z N2U2LWIzYjEtYTgyYzNiODQ1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc7PxZetgpTVZ1A1L55ihV+J3RMi5WCtn7B/NqBc1RlufhO37Y7ngpM Yly1QzeBFEVgvlpQDCRuTUceLk5zIDfWZsDGsSCmEVAcUikLYwc+Ratj8meXVFsV s/R6KmEeYnL2uSVQduVWNiMpeRwaf+jKxuw/mmpDJLKtu6jQifsbgGAVEX+XgsRH 1yNIhyfNAEEw9vxR6yT82x+NDJFcxCzX/w5XEW3TAdOQXs3lraKm/NcRpyxAJQ4Y RTesn9cWiS76oQ3XaZkSt0ePJ2ELh2q5qpaoCvtxY3IuOwZ6rHV77On6SDRb98tD 78CVnpWQ0HEkXcJbrNvbEYDEOQ8mgow= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:13 2025 by rpki-client