$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa File: eaf44f97-1815-370f-85ae-5c98c59072b6.roa (raw, json) Hash identifier: e9Es29ApmHNdkd4tQboiLT60frvifZbmcmZLkeJOjME= Subject key identifier: AE:8C:36:78:8F:DF:ED:CD:C2:25:B8:8C:57:4D:E0:34:54:8B:AF:53 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202181BE67C263BB3B44D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:18:1b:e6:7c:26:3b:b3:b4:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=44d20af7-b50a-4d17-a8c2-9e9735d4750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:05:c3:b9:68:2d:46:01:66:69:bc:51:12: 2b:9d:8d:70:e5:f8:90:ab:12:01:cb:70:df:67:c5: d9:22:61:ad:fa:15:0c:0a:f9:8f:83:22:11:8d:2d: 74:66:81:c0:94:ea:c3:fe:68:eb:fd:dd:d9:8d:31: 3e:d2:a5:c3:58:25:3d:30:a3:a2:3e:80:aa:bd:9e: 76:7b:0a:fc:56:95:0f:34:97:04:28:01:b5:a6:03: 50:0a:8d:3e:4e:92:0f:32:c4:f9:e0:1a:e2:04:87: 2e:00:7a:ec:32:1c:d0:88:ca:38:6e:9f:f6:30:a9: ca:4f:d2:8a:b3:1a:af:f6:4c:d6:6d:ae:de:e4:a8: a7:b7:a8:4c:c1:76:f0:a4:0b:fc:54:2f:01:3f:19: 2c:a8:5c:73:33:af:7b:38:62:52:35:5a:b8:53:ad: 6f:a4:03:72:64:89:2b:18:c5:4d:08:c4:cd:68:e9: 0b:2d:be:5e:35:a5:79:9e:8c:ac:c1:a4:8f:4e:02: 45:3a:37:d7:c3:2f:60:ff:e1:87:38:6c:bb:e8:ad: 92:68:31:68:c7:90:28:39:9f:57:c3:fe:46:87:7b: fe:e7:2c:6d:80:64:8a:eb:b6:83:a5:60:13:9f:18: 4b:9d:2e:5a:e8:dd:0f:09:e8:b4:6d:f8:02:c8:a2: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:36:78:8F:DF:ED:CD:C2:25:B8:8C:57:4D:E0:34:54:8B:AF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d1:c8:c1:47:05:2d:ba:b8:b0:01:ca:cf:d7:a8:1b:28:7e: 9e:56:50:69:ce:d6:3d:2c:ed:3b:f5:f7:09:68:6c:c4:90:de: 6e:ae:f4:99:0c:67:18:f8:d2:a3:11:68:5f:c2:bf:0e:be:a7: 9c:ac:81:3e:04:cd:5e:60:0b:8c:86:a6:bd:f4:33:b4:0b:63: 2d:fb:84:1b:f9:24:36:00:51:66:9d:ef:ff:2c:76:1c:b6:bf: 9c:6b:55:49:82:bc:d5:7a:c1:38:48:05:90:8b:dd:9e:ec:13: 89:7d:73:f2:3f:42:ac:32:79:36:28:f8:41:72:e7:e4:e6:32: 8b:f0:b4:b1:29:84:1d:1a:bf:37:16:b7:8d:4a:44:95:b5:46: eb:03:3f:bb:d6:ef:23:8f:68:d2:95:51:d3:71:d7:d8:e0:16: 14:53:ec:f2:6b:d1:65:34:a7:c0:93:fb:93:61:65:d5:44:df: 50:17:94:ef:54:81:8f:3f:53:5b:4a:1b:86:09:34:6f:92:d7: 52:04:fb:c8:e7:db:9b:b4:e1:61:11:cc:26:a2:8a:f6:0f:6a: 21:c7:32:cd:90:a2:43:ce:43:6d:77:42:e2:7e:0d:81:6c:17: 70:03:39:da:4b:0d:1d:6f:d0:a4:8b:50:31:4f:0b:9a:54:69: 58:05:3e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhgb5nwmO7O0TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDRkMjBhZjctYjUwYS00ZDE3LWE4YzItOWU5NzM1ZDQ3NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuwFw7loLUYBZmm8URIrnY1w5fiQqxIBy3Df Z8XZImGt+hUMCvmPgyIRjS10ZoHAlOrD/mjr/d3ZjTE+0qXDWCU9MKOiPoCqvZ52 ewr8VpUPNJcEKAG1pgNQCo0+TpIPMsT54BriBIcuAHrsMhzQiMo4bp/2MKnKT9KK sxqv9kzWba7e5Kint6hMwXbwpAv8VC8BPxksqFxzM697OGJSNVq4U61vpANyZIkr GMVNCMTNaOkLLb5eNaV5noyswaSPTgJFOjfXwy9g/+GHOGy76K2SaDFox5AoOZ9X w/5Gh3v+5yxtgGSK67aDpWATnxhLnS5a6N0PCei0bfgCyKIvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6MNniP3+3NwiW4jFdN4DRUi69TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWFmNDRmOTctMTgxNS0z NzBmLTg1YWUtNWM5OGM1OTA3MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfRyMFHBS26uLABys/XqBsofp5WUGnO1j0s7Tv19wlobMSQ3m6u9JkM Zxj40qMRaF/Cvw6+p5ysgT4EzV5gC4yGpr30M7QLYy37hBv5JDYAUWad7/8sdhy2 v5xrVUmCvNV6wThIBZCL3Z7sE4l9c/I/QqwyeTYo+EFy5+TmMovwtLEphB0avzcW t41KRJW1RusDP7vW7yOPaNKVUdNx19jgFhRT7PJr0WU0p8CT+5NhZdVE31AXlO9U gY8/U1tKG4YJNG+S11IE+8jn25u04WERzCaiivYPaiHHMs2QokPOQ213QuJ+DYFs F3ADOdpLDR1v0KSLUDFPC5pUaVgFPkk= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:31 2025 by rpki-client