$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa File: 3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa (raw, json) Hash identifier: wEkY86v58F6tlW95O13SiH/XvXnkelJCHQTRlTQlmCA= Subject key identifier: D8:C1:C6:99:0A:C6:2C:45:F4:41:DC:FF:B2:2B:80:32:87:D3:2E:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461D07EFAF4EA440000380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:07:ef:af:4e:a4:40:00:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f224861d-fd5a-414b-bf6c-511e28f0ecd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:a1:76:0c:85:ad:b7:66:1a:cb:41:49:e6: 3b:e5:18:fc:6f:49:25:ac:7f:5f:6f:7e:32:81:67: 6a:0e:47:11:87:08:5d:9d:a3:7b:84:3a:01:02:ff: ce:66:c2:a6:e0:17:a8:ca:0a:ae:50:28:48:58:c1: be:b2:bd:99:0c:8a:e9:b3:33:2e:e8:81:55:73:d9: 2e:30:12:ff:3a:75:e8:8f:5f:95:ff:b8:51:66:94: ff:df:22:8e:1d:69:44:6d:cd:41:e8:78:56:d4:90: c6:99:4f:ad:4f:23:a3:9a:11:77:a1:0a:8a:67:f1: c6:8c:2a:91:c7:64:ec:f2:ca:00:e0:03:74:ee:32: 5e:d4:c5:7f:db:94:30:bf:92:ce:72:83:f7:ff:ee: 61:55:95:6b:cd:a9:20:c3:70:e4:1d:8a:3c:76:de: 13:e8:d8:39:fd:b6:2c:33:23:05:b3:ba:db:f0:80: 13:2c:d7:bc:35:5c:88:ea:c3:42:27:c5:b2:34:34: a0:2c:27:47:dd:7f:98:f6:3c:a5:f9:30:04:33:07: a2:d4:30:bf:df:b3:91:fb:82:51:83:f9:08:3c:b1: e7:b2:a2:d5:7a:d4:71:60:ff:e1:cc:9e:41:db:37: b5:05:52:16:e7:1a:43:13:3e:6f:ef:c6:ef:62:05: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:C6:99:0A:C6:2C:45:F4:41:DC:FF:B2:2B:80:32:87:D3:2E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:04:9d:01:66:12:17:5b:a0:d5:9f:fc:43:08:25:c2:5e:c1: 0f:79:ca:ed:55:0b:09:f3:b3:f5:59:a0:c2:de:16:e9:4a:61: e2:cd:c6:ca:b0:b0:94:8e:3b:7e:c3:81:f6:c2:1b:5b:b5:0d: 04:1d:13:05:bd:f7:6f:14:73:29:10:ac:3f:d3:ad:c1:97:d1: 56:57:73:7a:90:07:ac:5d:18:0c:74:7d:68:c0:ac:a8:9e:96: a1:07:08:fc:c9:2a:f3:31:16:9b:1a:80:94:d1:b5:73:c0:72: ea:8e:b0:9a:3f:f1:c2:c3:d6:4a:96:47:8c:fe:7f:d8:4d:d2: d1:83:7f:9f:6f:4a:91:b6:d2:e8:2f:ad:0b:e0:33:9e:22:0b: a7:77:2b:c7:cc:52:3f:f3:28:d2:b0:50:6b:bb:60:23:1d:9a: ba:23:a0:7d:97:57:9c:97:ab:bf:28:61:a8:20:c3:b9:15:7f: 95:16:bf:a6:3b:9d:12:2e:8c:4d:89:d9:9c:4b:a9:2a:42:c6: b4:0e:74:7a:91:98:63:21:2e:e4:9d:7d:e5:42:29:8c:6f:91: ad:2d:93:f8:bd:44:48:11:90:c3:8e:f5:c4:a7:87:c3:04:28: 40:8a:d7:ab:78:bf:50:53:fe:3b:3e:d2:d5:2f:1a:25:e2:11: 39:f9:9d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh0H769OpEAAA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjIyNDg2MWQtZmQ1YS00MTRiLWJmNmMtNTExZTI4ZjBlY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JGhdgyFrbdmGstBSeY75Rj8b0klrH9fb34y gWdqDkcRhwhdnaN7hDoBAv/OZsKm4BeoygquUChIWMG+sr2ZDIrpszMu6IFVc9ku MBL/OnXoj1+V/7hRZpT/3yKOHWlEbc1B6HhW1JDGmU+tTyOjmhF3oQqKZ/HGjCqR x2Ts8soA4AN07jJe1MV/25Qwv5LOcoP3/+5hVZVrzakgw3DkHYo8dt4T6Ng5/bYs MyMFs7rb8IATLNe8NVyI6sNCJ8WyNDSgLCdH3X+Y9jyl+TAEMwei1DC/37OR+4JR g/kIPLHnsqLVetRxYP/hzJ5B2ze1BVIW5xpDEz5v78bvYgUCtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjBxpkKxixF9EHc/7IrgDKH0y73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2ZiYTVmNjctZmM3ZC0z MDVkLWI0ZWYtYmI3NGFkZDk2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgEnQFmEhdboNWf/EMIJcJewQ95yu1VCwnzs/VZoMLeFulKYeLNxsqw sJSOO37DgfbCG1u1DQQdEwW9928UcykQrD/TrcGX0VZXc3qQB6xdGAx0fWjArKie lqEHCPzJKvMxFpsagJTRtXPAcuqOsJo/8cLD1kqWR4z+f9hN0tGDf59vSpG20ugv rQvgM54iC6d3K8fMUj/zKNKwUGu7YCMdmrojoH2XV5yXq78oYaggw7kVf5UWv6Y7 nRIujE2J2ZxLqSpCxrQOdHqRmGMhLuSdfeVCKYxvka0tk/i9REgRkMOO9cSnh8ME KECK16t4v1BT/js+0tUvGiXiETn5nUM= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:06 2025 by rpki-client