$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa File: 157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa (raw, json) Hash identifier: OdXZBDEeznvp9K78YFp0bZyOMzoTz+9iUpr238EXeww= Subject key identifier: 86:8D:FD:4B:93:F1:52:A0:66:06:C5:4D:DD:67:3F:DE:D3:37:9C:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620207A51300B597F0602780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:07:a5:13:00:b5:97:f0:60:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=8fa85061-910d-4061-abba-a6b352ccdc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:44:b0:8e:c7:71:0c:e2:00:83:2b:c3:aa: a9:bd:66:d3:41:38:aa:3d:8d:17:45:8e:f6:db:73: 94:ca:80:7f:24:41:a7:94:6c:26:81:fe:c3:54:14: cd:f1:af:f8:bb:6e:77:0f:79:28:c4:46:f6:d4:32: f3:8d:1f:80:0f:b3:d6:2a:9c:17:48:4e:96:83:30: a3:61:cb:aa:6f:a3:19:ea:49:dc:f4:58:b5:63:bd: a6:26:4d:d6:15:cc:0c:9a:97:9b:36:0c:0c:29:24: e8:90:7e:80:76:24:80:f3:44:b5:a6:f5:53:19:e1: 93:96:0d:3b:17:e4:d1:b8:56:e9:7f:4b:26:b1:cf: cb:6c:f8:fb:c9:88:90:33:dd:d2:1e:16:b2:7d:34: e2:06:29:8e:ac:9c:7b:7f:a5:33:74:80:ba:9f:98: e3:d3:6e:dc:f2:0d:a1:70:32:84:e8:ce:1d:32:d5: 1d:dd:ef:d6:4f:ce:e4:39:e7:dd:bb:0d:c1:09:68: 83:0f:5a:11:6f:33:88:6e:bd:e5:1f:90:cb:61:04: 58:72:03:48:c1:bc:3f:57:d7:0f:a0:bb:8c:a5:24: a7:12:eb:0b:ae:01:6a:ee:10:1d:52:a4:9b:40:28: 7b:e6:9d:ee:78:16:71:63:a2:13:b6:61:00:45:d9: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:FD:4B:93:F1:52:A0:66:06:C5:4D:DD:67:3F:DE:D3:37:9C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:44:e1:d9:4a:32:95:8f:f3:20:45:11:f5:b6:9c:b4:e1:f9: c8:52:51:70:41:4b:60:1b:f6:d3:fb:42:1c:10:6d:f3:89:d2: 01:42:75:d6:86:f5:f8:5f:63:02:56:aa:73:40:a5:1b:9b:de: 19:0f:70:73:98:ac:7b:3a:ee:f3:ee:1d:00:73:76:f6:ca:05: f0:d6:b2:59:ae:60:b2:8b:76:4f:c9:65:6a:6e:6a:07:8f:d4: 47:41:13:72:9e:6d:07:0c:10:5c:e8:f3:b9:fe:43:aa:85:d6: 97:3f:cf:cf:91:e1:66:47:0a:27:e9:3a:1a:1e:98:9c:36:20: 1a:8b:7d:ab:07:a9:f0:b0:95:01:d1:ae:31:c1:37:40:81:2c: 65:a8:c8:a6:0c:09:a1:e1:31:89:3d:6d:42:97:ca:36:3e:98: c1:6f:8a:db:31:9a:01:c7:f5:e4:7f:0b:02:bc:77:7c:0a:2e: 23:b9:4d:cf:ee:65:07:fa:04:d5:c7:fe:17:67:a9:72:cd:cd: 15:dd:b8:79:ba:3a:f7:e3:b1:9c:d9:de:15:cd:90:f8:8c:d6: a6:5f:64:8d:40:83:95:67:16:8b:ff:65:37:de:73:bf:5f:3c: d3:95:b3:7e:63:56:b3:ba:e1:7a:e1:04:2c:a0:18:d6:a1:5f: 1c:91:1b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgelEwC1l/BgJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OGZhODUwNjEtOTEwZC00MDYxLWFiYmEtYTZiMzUyY2NkYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHpEsI7HcQziAIMrw6qpvWbTQTiqPY0XRY72 23OUyoB/JEGnlGwmgf7DVBTN8a/4u253D3koxEb21DLzjR+AD7PWKpwXSE6WgzCj Ycuqb6MZ6knc9Fi1Y72mJk3WFcwMmpebNgwMKSTokH6AdiSA80S1pvVTGeGTlg07 F+TRuFbpf0smsc/LbPj7yYiQM93SHhayfTTiBimOrJx7f6UzdIC6n5jj027c8g2h cDKE6M4dMtUd3e/WT87kOefduw3BCWiDD1oRbzOIbr3lH5DLYQRYcgNIwbw/V9cP oLuMpSSnEusLrgFq7hAdUqSbQCh75p3ueBZxY6ITtmEARdnmhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaN/UuT8VKgZgbFTd1nP97TN5yRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTU3ZDQ4ODMtNGNjMS0z NjU1LThiMzYtY2MwZTJhYWE0NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpE4dlKMpWP8yBFEfW2nLTh+chSUXBBS2Ab9tP7QhwQbfOJ0gFCddaG 9fhfYwJWqnNApRub3hkPcHOYrHs67vPuHQBzdvbKBfDWslmuYLKLdk/JZWpuageP 1EdBE3KebQcMEFzo87n+Q6qF1pc/z8+R4WZHCifpOhoemJw2IBqLfasHqfCwlQHR rjHBN0CBLGWoyKYMCaHhMYk9bUKXyjY+mMFvitsxmgHH9eR/CwK8d3wKLiO5Tc/u ZQf6BNXH/hdnqXLNzRXduHm6OvfjsZzZ3hXNkPiM1qZfZI1Ag5VnFov/ZTfec79f PNOVs35jVrO64XrhBCygGNahXxyRGyU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:37 2025 by rpki-client