$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa File: b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa (raw, json) Hash identifier: YnQ7ksn2/gjkyDNqPbiwy/0TyZHtpcrH9hNnhVXK4/U= Subject key identifier: EF:30:F2:98:05:6E:AA:35:90:0E:88:3F:71:52:6B:7E:D7:66:1C:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6367487E78CE134BB761AD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:48:7e:78:ce:13:4b:b7:61:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=903072a4-281b-4912-85e6-3231b89630e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:91:c9:df:cd:e8:15:7c:0f:55:d9:5d:2e: ec:95:24:68:5d:2a:2d:d5:4d:dc:46:fc:d1:ff:2c: 1f:8d:d3:94:b4:68:ea:73:fe:95:e1:c9:d1:56:03: dc:81:96:a8:10:45:33:e6:ae:95:5c:da:47:4c:55: bf:b2:d8:82:0a:19:b2:b5:ef:f8:60:a9:5d:3a:46: bd:7a:25:4b:4c:24:43:c2:fd:f8:02:e6:ee:4b:94: f8:83:5d:aa:60:cd:90:65:aa:51:84:84:f0:85:93: 57:2f:21:a4:0f:a3:5e:6e:00:55:7a:f5:f8:29:93: ff:34:f5:55:28:36:9b:03:ad:43:0a:0d:9a:65:da: a8:ff:1a:db:a4:43:8c:e6:be:c9:c9:70:06:5b:fb: cd:dc:34:b1:22:8a:d6:d0:22:b0:74:52:ab:2d:64: 77:ce:82:7d:99:f2:dc:26:24:97:db:fb:62:c0:88: 31:ec:7b:9a:52:30:7b:f7:e6:cd:ff:1f:4b:61:de: 24:4f:5d:13:d7:32:20:01:7b:68:d2:b8:72:8d:c2: f1:ee:33:97:14:45:d4:74:af:a2:27:e7:a0:1c:1f: 5a:89:93:dd:df:bb:e4:94:99:43:d0:50:0e:c2:49: 2f:4f:2f:f5:49:e0:f4:b0:11:70:ea:0a:3b:a2:9d: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:30:F2:98:05:6E:AA:35:90:0E:88:3F:71:52:6B:7E:D7:66:1C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:11:4b:65:0f:66:5c:7d:64:a9:32:60:51:8f:da:d6:e6:41: af:ab:75:3c:14:3d:37:51:9d:56:0e:56:da:f3:0e:8d:e6:88: 0f:3e:b3:61:e9:25:bc:73:2c:34:73:0c:db:d0:5a:96:3a:b4: bb:cc:98:fd:d5:c7:55:91:a8:d8:65:a8:06:ff:fa:c6:f4:d0: 6c:0d:42:9d:b8:af:f1:ac:b9:a1:80:1b:6c:76:33:ba:17:a1: 42:9c:04:a1:89:c4:92:63:bd:57:b6:70:86:67:76:4d:39:04: 70:98:09:49:71:d2:fe:35:53:16:13:a7:f0:2e:f6:4b:5f:dd: 54:85:5e:30:69:a1:c0:41:35:91:3b:60:bc:ad:c4:9b:d9:a5: 2a:0d:dc:6e:b0:27:2d:3f:e7:5a:b7:e3:0a:6f:9d:98:dd:2b: fb:6a:ac:d1:37:d3:20:9f:43:db:b9:d2:c3:cf:44:c3:b5:d8: 2a:d2:80:ae:a1:49:70:2a:f1:ba:de:d3:b7:a6:88:19:d0:97: a6:c6:d1:ea:34:31:e0:f4:4e:62:7a:cc:a1:f7:cc:00:06:78: 7b:15:2a:85:bd:18:79:ef:56:ca:2b:c1:b2:66:67:b8:0e:bb: b9:24:c9:c6:7e:9c:7e:14:a8:01:a3:4d:12:a3:93:32:1f:76: 32:0b:c3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0h+eM4TS7dhrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OTAzMDcyYTQtMjgxYi00OTEyLTg1ZTYtMzIzMWI4OTYzMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5WRyd/N6BV8D1XZXS7slSRoXSot1U3cRvzR /ywfjdOUtGjqc/6V4cnRVgPcgZaoEEUz5q6VXNpHTFW/stiCChmyte/4YKldOka9 eiVLTCRDwv34AubuS5T4g12qYM2QZapRhITwhZNXLyGkD6NebgBVevX4KZP/NPVV KDabA61DCg2aZdqo/xrbpEOM5r7JyXAGW/vN3DSxIorW0CKwdFKrLWR3zoJ9mfLc JiSX2/tiwIgx7HuaUjB79+bN/x9LYd4kT10T1zIgAXto0rhyjcLx7jOXFEXUdK+i J+egHB9aiZPd37vklJlD0FAOwkkvTy/1SeD0sBFw6go7op2zzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8w8pgFbqo1kA6IP3FSa37XZhzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjJjOWIxNWMtOWQ4Mi0z ZWU1LWI2YTAtNDUwZGFhOTU4NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoRS2UPZlx9ZKkyYFGP2tbmQa+rdTwUPTdRnVYOVtrzDo3miA8+s2Hp JbxzLDRzDNvQWpY6tLvMmP3Vx1WRqNhlqAb/+sb00GwNQp24r/GsuaGAG2x2M7oX oUKcBKGJxJJjvVe2cIZndk05BHCYCUlx0v41UxYTp/Au9ktf3VSFXjBpocBBNZE7 YLytxJvZpSoN3G6wJy0/51q34wpvnZjdK/tqrNE30yCfQ9u50sPPRMO12CrSgK6h SXAq8bre07emiBnQl6bG0eo0MeD0TmJ6zKH3zAAGeHsVKoW9GHnvVsorwbJmZ7gO u7kkycZ+nH4UqAGjTRKjkzIfdjILwwU= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:38 2025 by rpki-client