$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa File: a097af28-8a8b-38d4-b862-8811b0f968e9.roa (raw, json) Hash identifier: kt8CLkHJRU18Zhl8XafJiiarQ/GQHr9gfCQUp/R0OcI= Subject key identifier: 2F:37:27:92:69:12:B0:02:BF:23:EC:5E:BF:33:BD:6C:F8:B8:49:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021E9CAE6A55E611733180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1e:9c:ae:6a:55:e6:11:73:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=00285aa9-727f-460a-8ee0-6cbb90db0f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:f0:7a:be:8e:87:93:99:94:94:f8:ed:3b: 8d:47:06:bb:ba:e9:8c:1d:c6:01:ae:96:84:d0:b7: 62:0f:7a:c6:ab:09:6f:5e:b1:90:42:17:8e:ce:13: 89:2a:0d:8e:79:ad:ef:a7:ff:f4:3d:e3:5b:d7:7c: d3:8a:44:5d:01:a2:ba:a7:31:52:57:97:56:9d:45: bf:5f:25:33:60:6b:1e:2a:2e:3a:50:f2:6d:00:5a: 11:c7:be:ba:75:2e:c8:1a:58:9c:77:25:a7:3a:76: c8:12:1d:63:4d:00:15:84:76:e9:a5:24:c2:df:b6: a6:e8:0a:05:37:73:98:d1:a4:da:b4:eb:94:ec:44: 6b:64:23:f8:35:18:9d:96:30:fc:0e:7f:3e:95:86: 14:3a:e8:28:d2:cf:c3:2d:db:57:81:dc:61:83:e4: e8:96:5b:ff:cc:30:5d:54:ef:1a:60:ad:e8:f0:ec: 5e:59:d0:ce:8a:79:6e:52:80:29:5a:5a:5e:ca:93: f9:f8:ea:9e:35:51:50:e8:67:5f:11:3f:8c:2f:6e: f1:f9:13:76:ad:a4:1d:2a:f7:60:d6:6c:75:e5:c8: ba:89:8e:00:02:4a:c7:7d:06:23:d3:c1:19:76:aa: 91:e2:ca:77:55:fc:d1:7a:a0:75:14:6d:f2:52:94: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:37:27:92:69:12:B0:02:BF:23:EC:5E:BF:33:BD:6C:F8:B8:49:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:ae:c1:f1:ee:52:a4:1d:84:6c:a0:fe:48:7d:d4:6a:73: d3:e0:25:a4:0b:5c:3a:3a:98:5c:ce:9f:42:e5:6d:94:4f:f7: 4a:1c:a4:f4:bd:51:52:26:96:b3:bd:16:9a:f4:f9:90:dc:98: b7:01:26:0c:01:01:59:5a:cd:5f:fb:02:53:3e:9c:33:13:0f: 2b:fd:57:88:64:3f:e3:58:cc:38:58:0c:d4:ad:bf:32:e8:61: 28:6c:82:a6:17:9b:a7:16:8a:fe:0a:3c:89:a2:c3:f7:88:54: 14:49:b1:46:1d:3d:cb:bd:b0:7d:65:67:28:0b:40:e7:69:df: b9:74:28:c0:ce:56:55:47:95:4a:3a:fd:e3:44:a4:16:c7:b6: 07:d4:9a:df:53:2c:61:ac:dd:4e:bd:99:d4:da:06:9a:80:0d: b4:81:82:14:53:4b:d5:72:6a:55:6e:fe:a9:9a:e3:03:13:00: 13:99:13:f5:31:0e:98:d2:a8:50:25:85:bc:e0:5f:b5:70:c4: 79:78:23:ed:52:34:01:8e:d2:cf:cc:9e:3f:63:cc:ae:6e:b2: 91:2e:ab:d6:44:f7:47:18:0e:c7:52:90:a6:cc:c7:3c:70:0a: 57:e0:9d:b0:71:d2:f6:96:53:fa:71:53:46:2a:eb:73:2a:ff: 60:5a:e2:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAh6crmpV5hFzMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDAyODVhYTktNzI3Zi00NjBhLThlZTAtNmNiYjkwZGIwZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Hwer6Oh5OZlJT47TuNRwa7uumMHcYBrpaE 0LdiD3rGqwlvXrGQQheOzhOJKg2Oea3vp//0PeNb13zTikRdAaK6pzFSV5dWnUW/ XyUzYGseKi46UPJtAFoRx766dS7IGlicdyWnOnbIEh1jTQAVhHbppSTC37am6AoF N3OY0aTatOuU7ERrZCP4NRidljD8Dn8+lYYUOugo0s/DLdtXgdxhg+Tollv/zDBd VO8aYK3o8OxeWdDOinluUoApWlpeypP5+OqeNVFQ6GdfET+ML27x+RN2raQdKvdg 1mx15ci6iY4AAkrHfQYj08EZdqqR4sp3VfzReqB1FG3yUpRA6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC83J5JpErACvyPsXr8zvWz4uEmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTA5N2FmMjgtOGE4Yi0z OGQ0LWI4NjItODgxMWIwZjk2OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw1rsHx7lKkHYRsoP5IfdRqc9PgJaQLXDo6mFzOn0LlbZRP90ocpPS9 UVImlrO9Fpr0+ZDcmLcBJgwBAVlazV/7AlM+nDMTDyv9V4hkP+NYzDhYDNStvzLo YShsgqYXm6cWiv4KPImiw/eIVBRJsUYdPcu9sH1lZygLQOdp37l0KMDOVlVHlUo6 /eNEpBbHtgfUmt9TLGGs3U69mdTaBpqADbSBghRTS9VyalVu/qma4wMTABOZE/Ux DpjSqFAlhbzgX7VwxHl4I+1SNAGO0s/Mnj9jzK5uspEuq9ZE90cYDsdSkKbMxzxw ClfgnbBx0vaWU/pxU0Yq63Mq/2Ba4ps= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:19 2025 by rpki-client