$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa File: 8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa (raw, json) Hash identifier: JtMtKIAuieMwwwlcVq9/+aUQB1VoQb6lKOVK7hmE4WA= Subject key identifier: 30:B3:E1:CD:21:95:10:C5:AD:B3:7A:0E:E7:0D:6F:87:FA:2F:F9:40 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673EFCFEE7EA6378FA2D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3e:fc:fe:e7:ea:63:78:fa:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=da628325-a691-43e1-83aa-fbf5ed9c499d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:ff:b7:27:c2:c1:2e:af:a9:a9:af:ab:6c: 24:6d:5b:14:e4:6b:b3:c9:d2:b5:e5:23:14:05:d3: e8:2e:82:3a:ca:3e:6b:58:7d:82:b5:0a:42:83:7d: 3d:a5:3e:10:39:fb:ec:d9:ce:b2:8c:f3:5b:44:b6: f0:00:58:0e:a9:ce:2f:3e:e9:b1:a8:17:2d:78:1a: 6c:cc:b9:78:c9:02:2a:73:ab:66:a6:92:14:5d:2b: 4c:36:b5:9d:5e:57:bb:20:60:7a:af:db:a0:10:39: 51:f3:6b:02:de:f9:e1:b3:78:6e:79:e6:9b:a0:dc: 13:40:e3:74:86:90:47:87:16:e1:92:ea:9d:4d:b8: f9:78:b8:47:16:c0:ad:a9:ec:d2:81:b5:f9:8b:5c: 8c:4d:36:3d:62:01:5e:b6:99:10:25:5f:da:1e:19: 2d:e9:ba:ac:6e:fe:70:f0:e8:d7:7d:63:a2:81:66: 79:f4:b6:86:cb:81:5b:7d:ff:1c:7e:30:f3:e7:c4: 99:a7:89:54:12:e5:13:7e:ea:ac:fb:fc:1d:46:19: 32:26:be:19:a4:ef:27:65:03:bc:2d:6f:c0:ea:76: af:60:36:34:c4:5f:7b:37:52:53:23:54:f3:d1:13: 0b:2f:97:53:9e:d9:9f:00:40:08:cc:bd:87:0c:46: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:E1:CD:21:95:10:C5:AD:B3:7A:0E:E7:0D:6F:87:FA:2F:F9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:63:b9:4d:9c:e5:a9:00:6f:72:4b:09:33:bb:cb:88:99:ba: 58:c3:a2:06:cd:b6:a4:31:cf:bd:83:70:a0:f8:5c:84:ab:87: 4b:5d:90:22:dc:bd:3b:cd:de:a2:9c:74:93:85:f7:58:90:53: d9:bc:18:58:cc:c0:ed:90:c4:1e:97:93:96:19:83:73:34:dd: af:bb:1f:05:4e:e6:43:76:c7:7c:07:d7:9d:57:7d:3b:28:69: 38:38:d6:7b:2d:41:17:00:75:b7:68:b9:0f:91:92:26:1b:ff: 81:9d:87:11:f1:f3:ce:0b:e5:c8:b7:c7:30:52:73:58:ba:79: c7:35:87:27:a6:7c:2e:f7:50:1d:da:01:16:1b:44:70:cc:21: 24:73:79:32:bf:69:66:bc:ac:fa:a6:a2:9b:55:42:e3:a2:56: f8:ad:8f:22:ac:6b:83:53:5a:9f:59:f3:23:a8:65:e9:77:2a: 87:19:8e:32:3f:3e:de:02:b2:4a:1f:4d:44:fd:97:ea:58:26: 22:65:a7:43:31:a9:f2:2f:50:67:7d:22:50:ae:39:1e:aa:6e: 0b:9b:30:da:29:a9:07:e7:05:f4:35:5b:6e:7a:17:53:84:0c: 2d:65:ef:bf:9c:4b:8f:1c:32:83:4d:a1:ce:5f:53:74:70:1f: 08:0a:66:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz78/ufqY3j6LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZGE2MjgzMjUtYTY5MS00M2UxLTgzYWEtZmJmNWVkOWM0OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlf/tyfCwS6vqamvq2wkbVsU5GuzydK15SMU BdPoLoI6yj5rWH2CtQpCg309pT4QOfvs2c6yjPNbRLbwAFgOqc4vPumxqBcteBps zLl4yQIqc6tmppIUXStMNrWdXle7IGB6r9ugEDlR82sC3vnhs3hueeaboNwTQON0 hpBHhxbhkuqdTbj5eLhHFsCtqezSgbX5i1yMTTY9YgFetpkQJV/aHhkt6bqsbv5w 8OjXfWOigWZ59LaGy4Fbff8cfjDz58SZp4lUEuUTfuqs+/wdRhkyJr4ZpO8nZQO8 LW/A6navYDY0xF97N1JTI1Tz0RMLL5dTntmfAEAIzL2HDEaDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCz4c0hlRDFrbN6DucNb4f6L/lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGNjNDQ5NDctOGNmZi0z NGRjLThmYTktM2U3MDdhMDZkOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEljuU2c5akAb3JLCTO7y4iZuljDogbNtqQxz72DcKD4XISrh0tdkCLc vTvN3qKcdJOF91iQU9m8GFjMwO2QxB6Xk5YZg3M03a+7HwVO5kN2x3wH151XfTso aTg41nstQRcAdbdouQ+RkiYb/4GdhxHx884L5ci3xzBSc1i6ecc1hyemfC73UB3a ARYbRHDMISRzeTK/aWa8rPqmoptVQuOiVvitjyKsa4NTWp9Z8yOoZel3KocZjjI/ Pt4CskofTUT9l+pYJiJlp0MxqfIvUGd9IlCuOR6qbgubMNopqQfnBfQ1W256F1OE DC1l77+cS48cMoNNoc5fU3RwHwgKZnc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:03 2025 by rpki-client