$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa File: e1972a51-3a87-356d-9a0a-7156bfd2d564.roa (raw, json) Hash identifier: dpRx2JHgIz5xGiW6yHZN9OOAfKYk35ur3vhd0k7lrXA= Subject key identifier: E1:CF:89:8E:9B:4D:9B:86:71:69:4A:67:F2:FA:FA:04:90:E6:A9:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673BBA2061480B83C60BEE Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 161.232.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3b:ba:20:61:48:0b:83:c6:0b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=1c4b11fe-6873-4ad2-8215-bdee0afa4b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:17:d0:16:b9:96:56:bc:5e:ed:24:5f:8d: 53:1e:96:45:b3:9f:bf:46:2c:a1:39:27:77:26:6b: dd:5f:fd:df:c0:03:fa:08:3b:2d:9a:50:1d:49:21: d8:44:08:45:a7:76:9f:fb:17:4c:d7:46:6a:87:12: 41:b1:14:3b:2f:37:13:0a:aa:ef:34:a3:4a:27:d4: d6:f2:dd:48:f5:8c:ca:09:95:b2:56:fc:f9:00:ce: 63:54:f6:12:d8:6b:60:25:21:51:b1:bc:fb:08:5e: 57:06:4b:14:06:7a:57:18:92:e4:b1:4f:46:66:0a: 1d:f4:ca:f1:64:1d:3c:fb:cf:e2:b2:2a:24:0c:1c: ed:cd:17:e6:56:1d:3f:34:c7:1e:49:31:ac:51:65: 0b:c5:db:34:14:ac:7c:ee:48:51:4b:07:cc:1d:48: 1f:d7:b6:7d:8b:1d:dc:d1:38:5f:1e:a0:5f:33:4c: 99:a8:54:47:31:ec:a0:e9:2e:9e:f0:d7:c1:78:24: 9b:9a:fc:b7:bb:48:28:da:09:f6:cb:56:f9:f1:aa: be:7e:c1:0a:0c:4c:25:f7:f8:fc:33:58:df:ea:61: 96:3d:4f:89:c3:24:9f:d0:2f:9a:b8:98:9f:99:df: 71:54:77:01:78:42:d6:02:64:fd:41:8d:67:96:25: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:89:8E:9B:4D:9B:86:71:69:4A:67:F2:FA:FA:04:90:E6:A9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1972a51-3a87-356d-9a0a-7156bfd2d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:40:0f:7f:8e:13:83:75:8d:97:eb:bb:5f:e8:b4:7b:c3:44: 6f:10:9e:a8:d2:a9:e1:e7:69:cf:2e:89:4c:f9:80:76:ce:0a: 6d:db:df:fe:d8:12:69:f1:1d:ad:24:f2:cd:7b:74:32:7a:bc: 98:2b:cf:77:9b:c1:e6:ee:23:2f:fa:69:04:8d:07:1b:99:82: 2a:1c:0f:a4:43:6e:53:6b:1b:e0:77:35:93:89:f1:fb:bd:a6: 81:43:52:dd:6e:ae:67:ef:87:21:a3:4d:13:54:ea:ff:25:da: 43:6a:4e:6a:2e:10:47:be:96:52:45:d4:f5:47:d4:ac:07:47: a9:95:b7:c8:75:b5:04:04:9b:35:7e:7b:8e:7f:73:b7:c9:32: 33:de:67:3c:c3:88:34:68:68:42:17:bf:0f:70:b1:78:a6:6d: 45:d9:15:9f:34:3b:91:8d:20:2c:0d:a2:f8:85:6a:ad:4e:7b: 50:ff:7b:be:29:f0:a0:3c:db:f1:dc:9b:3c:3a:c1:e5:cf:71: 39:d8:be:80:5c:7c:42:a5:00:59:2c:aa:22:2f:b9:b1:63:72: 31:10:95:d1:ca:01:af:94:21:9e:fe:b9:99:f5:2d:95:aa:e2: 2c:4e:ad:b1:35:9b:dd:1d:6f:f9:8d:9d:69:b3:b7:1d:f2:fe: 48:8e:72:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzu6IGFIC4PGC+4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MWM0YjExZmUtNjg3My00YWQyLTgyMTUtYmRlZTBhZmE0YjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgMX0Ba5lla8Xu0kX41THpZFs5+/RiyhOSd3 JmvdX/3fwAP6CDstmlAdSSHYRAhFp3af+xdM10ZqhxJBsRQ7LzcTCqrvNKNKJ9TW 8t1I9YzKCZWyVvz5AM5jVPYS2GtgJSFRsbz7CF5XBksUBnpXGJLksU9GZgod9Mrx ZB08+8/isiokDBztzRfmVh0/NMceSTGsUWULxds0FKx87khRSwfMHUgf17Z9ix3c 0ThfHqBfM0yZqFRHMeyg6S6e8NfBeCSbmvy3u0go2gn2y1b58aq+fsEKDEwl9/j8 M1jf6mGWPU+JwySf0C+auJifmd9xVHcBeELWAmT9QY1nliUqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHPiY6bTZuGcWlKZ/L6+gSQ5qmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE5NzJhNTEtM2E4Ny0z NTZkLTlhMGEtNzE1NmJmZDJkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFAD3+OE4N1jZfru1/otHvDRG8QnqjSqeHnac8uiUz5gHbOCm3b3/7Y EmnxHa0k8s17dDJ6vJgrz3ebwebuIy/6aQSNBxuZgiocD6RDblNrG+B3NZOJ8fu9 poFDUt1urmfvhyGjTRNU6v8l2kNqTmouEEe+llJF1PVH1KwHR6mVt8h1tQQEmzV+ e45/c7fJMjPeZzzDiDRoaEIXvw9wsXimbUXZFZ80O5GNICwNoviFaq1Oe1D/e74p 8KA82/Hcmzw6weXPcTnYvoBcfEKlAFksqiIvubFjcjEQldHKAa+UIZ7+uZn1LZWq 4ixOrbE1m90db/mNnWmztx3y/kiOcko= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:46 2025 by rpki-client