$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa File: 60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa (raw, json) Hash identifier: cjv3QHczZ2O4vXhdHWlpQ6pqfBftFJFf91/kKnyQWMw= Subject key identifier: EC:76:A6:33:D1:58:ED:4D:53:C4:25:C9:04:F9:CA:FC:C6:F6:F0:40 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201CDB86A48E2C558E80B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:cd:b8:6a:48:e2:c5:58:e8:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d00c9f69-4316-4f3b-9e80-24c43d1d4b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:5d:64:e1:c9:8b:30:d7:04:c3:fe:0d:df: 6a:4d:60:2b:3b:32:25:77:8e:13:49:23:e3:b7:ed: e9:09:26:4b:3b:ec:01:27:8e:d5:a9:01:f1:15:7a: 01:b5:3d:99:35:e9:3d:6e:31:7f:cf:11:b9:ff:b1: 4b:17:20:30:f3:f9:ce:e6:8b:e1:94:58:01:50:cc: c9:5c:43:5f:70:70:fc:0a:f1:ff:2f:13:36:c9:54: c3:32:bd:6c:77:a5:ea:02:c1:01:50:79:64:fd:d9: 6a:d8:c5:5f:8d:14:18:b2:1c:09:76:69:01:72:0d: ee:19:9f:cf:02:0b:b7:e4:e6:a9:03:3d:d2:29:48: 90:04:a9:f5:d0:50:d8:af:4e:6c:ce:dc:4e:4c:98: 73:13:c3:e8:ac:44:56:bb:13:b3:a6:33:4a:06:6b: 68:0b:5a:e9:f4:46:2c:97:5d:b5:8b:0e:13:64:ba: dd:8d:17:3b:1e:ff:23:2b:e8:6f:6d:43:41:59:54: 39:73:ef:8f:9b:03:38:27:85:ea:4e:0d:9c:d5:d8: 78:12:6e:dd:a6:ef:85:fc:33:f5:d4:46:b4:b6:16: 8d:4a:9a:35:13:5c:bc:64:79:c7:fb:9b:11:e1:05: 06:ed:88:a5:49:64:f3:50:c4:70:58:df:99:70:4d: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:76:A6:33:D1:58:ED:4D:53:C4:25:C9:04:F9:CA:FC:C6:F6:F0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c5:0b:c5:df:ee:c9:c4:58:30:c1:1e:c2:93:30:49:31:de: f2:b1:eb:2c:8a:e5:9e:bc:8e:68:9d:cf:9f:dd:94:cd:4a:da: 65:f1:7b:58:70:62:32:7f:fe:ce:c8:2d:2e:cb:e4:ef:a0:b3: 59:35:65:0f:d1:51:f8:b1:59:38:dd:ba:33:2d:6e:2d:73:0d: 3e:b4:71:32:52:9e:e1:fc:36:42:5e:39:d8:f3:6c:97:dc:b5: 82:04:ae:c3:e1:0f:2d:22:69:43:e3:d5:fe:d4:ca:bb:fe:ff: d1:68:c8:ec:bb:bb:06:f7:30:ce:87:6d:24:02:64:c8:ca:1a: 8f:dd:2d:86:d2:a4:05:ff:3e:0c:79:2b:24:d2:45:4b:6b:26: a7:d8:96:44:48:60:85:1c:d3:9a:41:f6:3a:d8:a6:ae:95:42: 69:d2:33:31:d4:35:da:4d:7a:fe:dc:b7:8f:9e:5a:02:2a:70: 08:e7:3c:e9:3d:bc:de:27:0a:5c:9b:b1:74:23:3b:55:2b:b6: ba:d4:6d:a2:fa:e3:f0:b7:4c:e1:bc:e6:70:f6:30:fd:dd:2e: 4a:32:ea:f9:f3:74:de:be:60:b2:50:44:fc:b5:57:ba:f5:5d: d9:58:02:17:2e:b5:be:55:4e:39:e4:5d:fd:0f:45:fe:13:3d: f0:3a:64:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc24akjixVjoC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDAwYzlmNjktNDMxNi00ZjNiLTllODAtMjRjNDNkMWQ0Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51dZOHJizDXBMP+Dd9qTWArOzIld44TSSPj t+3pCSZLO+wBJ47VqQHxFXoBtT2ZNek9bjF/zxG5/7FLFyAw8/nO5ovhlFgBUMzJ XENfcHD8CvH/LxM2yVTDMr1sd6XqAsEBUHlk/dlq2MVfjRQYshwJdmkBcg3uGZ/P Agu35OapAz3SKUiQBKn10FDYr05sztxOTJhzE8PorERWuxOzpjNKBmtoC1rp9EYs l121iw4TZLrdjRc7Hv8jK+hvbUNBWVQ5c++PmwM4J4XqTg2c1dh4Em7dpu+F/DP1 1Ea0thaNSpo1E1y8ZHnH+5sR4QUG7YilSWTzUMRwWN+ZcE2sVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx2pjPRWO1NU8QlyQT5yvzG9vBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBmZDg1YzItZDJkZC0z YjUyLThkNzMtNzU2NmYzMzJiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/FC8Xf7snEWDDBHsKTMEkx3vKx6yyK5Z68jmidz5/dlM1K2mXxe1hw YjJ//s7ILS7L5O+gs1k1ZQ/RUfixWTjdujMtbi1zDT60cTJSnuH8NkJeOdjzbJfc tYIErsPhDy0iaUPj1f7Uyrv+/9FoyOy7uwb3MM6HbSQCZMjKGo/dLYbSpAX/Pgx5 KyTSRUtrJqfYlkRIYIUc05pB9jrYpq6VQmnSMzHUNdpNev7ct4+eWgIqcAjnPOk9 vN4nClybsXQjO1UrtrrUbaL64/C3TOG85nD2MP3dLkoy6vnzdN6+YLJQRPy1V7r1 XdlYAhcutb5VTjnkXf0PRf4TPfA6ZJc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:23 2025 by rpki-client