$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa File: ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa (raw, json) Hash identifier: YauBdSE+bsbzqHDAX7BVFahikU4iQSUV+G2eUOqEUmU= Subject key identifier: 6F:4F:3C:D2:53:8A:35:07:26:D7:84:27:75:31:C4:D1:56:D3:56:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DB325D4A441DF7EF3100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:db:32:5d:4a:44:1d:f7:ef:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=49cde968-2602-4591-b614-916e21885651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:1b:d5:f8:4c:85:e3:87:eb:45:e9:b4:aa: 5e:55:20:49:0c:e5:e1:0d:41:25:d9:21:b1:05:83: 5c:0a:b6:20:e5:67:52:c0:b7:63:7c:8c:11:a0:ff: ed:d1:b5:55:0b:24:0e:d5:4a:6f:0d:04:94:ea:50: 0f:3b:3d:0a:4f:31:36:46:e1:ac:12:5c:8e:4d:af: ae:f4:06:ac:0b:67:70:51:3b:17:93:f1:1f:58:f3: ac:07:52:ff:92:37:58:00:48:6e:c5:ac:aa:e4:c9: df:d4:88:34:e2:90:60:c7:5e:2c:76:7b:ce:65:3e: ea:e4:23:0c:a3:92:ee:07:69:77:8a:c2:18:55:89: c4:cc:cb:9d:89:24:94:d3:ec:5d:d7:7b:5c:0a:83: 0d:cb:19:2d:73:c5:aa:12:82:d4:ef:da:37:81:c5: ed:a7:cf:3f:13:9b:37:b0:fa:cb:0e:15:bf:9d:c0: 56:da:9e:48:8c:6c:a4:37:a8:bf:ce:ef:4e:a5:4f: b9:80:5b:e1:92:8b:64:79:ee:14:86:cb:ed:16:78: dd:ee:20:df:d3:07:c7:1a:80:b5:80:f1:73:30:3b: c7:1c:d2:e0:96:74:8d:0f:78:90:fc:f6:95:6a:5e: b8:01:b8:93:a4:6a:1e:e8:3b:f1:79:a5:82:45:78: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4F:3C:D2:53:8A:35:07:26:D7:84:27:75:31:C4:D1:56:D3:56:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:01:6d:f7:5b:0c:29:26:55:14:ff:41:3e:81:da:04:69:eb: 6a:a0:e8:a5:d1:5a:68:b0:cc:4d:11:05:aa:9c:7c:e2:9d:55: 15:f0:04:ab:e1:6b:eb:b3:8d:69:f6:82:ca:5a:82:f5:e2:4a: 56:c2:1e:f1:b1:5d:58:36:af:74:86:98:46:0b:1c:db:db:9c: ea:c1:fa:e8:5c:f5:5a:19:d1:e6:78:9c:dc:d3:53:95:f7:f7: 72:e3:07:8b:2e:b1:36:f0:c7:f2:75:a2:88:58:8f:00:ff:c3: 05:cc:ea:13:67:6a:ea:08:8f:96:1d:14:ad:cb:69:94:df:0c: d0:99:98:c5:5e:4d:eb:e8:b9:c6:d5:04:64:31:41:b7:f7:d7: 62:89:1e:65:14:e7:91:ca:e7:b0:65:89:4d:49:e0:a4:0b:0e: 09:0e:26:49:c6:52:78:1f:8c:56:6e:ea:37:f5:9f:e7:88:e2: 54:b6:ee:f8:4e:d1:98:b4:76:cb:25:a9:e2:7f:69:42:a9:d3: e5:64:ce:d7:95:5a:ab:c2:f1:ea:29:bc:3a:f5:00:9d:2f:ac: 35:b5:88:a4:59:33:1f:82:e1:74:5e:f0:0b:f2:0a:be:5f:58: e4:78:68:eb:5b:5c:c9:f0:1e:64:a0:de:a7:31:69:19:49:71: 4d:69:f5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdsyXUpEHffvMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDljZGU5NjgtMjYwMi00NTkxLWI2MTQtOTE2ZTIxODg1NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKkb1fhMheOH60XptKpeVSBJDOXhDUEl2SGx BYNcCrYg5WdSwLdjfIwRoP/t0bVVCyQO1UpvDQSU6lAPOz0KTzE2RuGsElyOTa+u 9AasC2dwUTsXk/EfWPOsB1L/kjdYAEhuxayq5Mnf1Ig04pBgx14sdnvOZT7q5CMM o5LuB2l3isIYVYnEzMudiSSU0+xd13tcCoMNyxktc8WqEoLU79o3gcXtp88/E5s3 sPrLDhW/ncBW2p5IjGykN6i/zu9OpU+5gFvhkotkee4UhsvtFnjd7iDf0wfHGoC1 gPFzMDvHHNLglnSND3iQ/PaVal64AbiTpGoe6DvxeaWCRXj5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9PPNJTijUHJteEJ3UxxNFW01ZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E3NmY1ZTEtZjU4OS0z YjkwLTgyMTMtYmE0NWYwNjdhM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIBbfdbDCkmVRT/QT6B2gRp62qg6KXRWmiwzE0RBaqcfOKdVRXwBKvh a+uzjWn2gspagvXiSlbCHvGxXVg2r3SGmEYLHNvbnOrB+uhc9VoZ0eZ4nNzTU5X3 93LjB4susTbwx/J1oohYjwD/wwXM6hNnauoIj5YdFK3LaZTfDNCZmMVeTevoucbV BGQxQbf312KJHmUU55HK57BliU1J4KQLDgkOJknGUngfjFZu6jf1n+eI4lS27vhO 0Zi0dsslqeJ/aUKp0+VkzteVWqvC8eopvDr1AJ0vrDW1iKRZMx+C4XRe8AvyCr5f WOR4aOtbXMnwHmSg3qcxaRlJcU1p9eQ= -----END CERTIFICATE-----Generated at Sat Oct 11 00:04:24 2025 by rpki-client