$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa File: 92d88aa8-e412-3241-8d69-65a663e555a3.roa (raw, json) Hash identifier: 5Ec+K40kr2KOLceQ9/qoijPdwZwljMHGCPksiQHwRpo= Subject key identifier: 8C:EB:15:9C:07:93:AD:BA:45:74:75:2D:82:7D:BF:11:D5:59:0A:8B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021C319C8553A71EE87F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1c:31:9c:85:53:a7:1e:e8:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b0688bba-a81a-43b6-adcf-2c310a4717b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:da:d7:84:6e:d2:d9:4f:ec:e8:89:2d:ce: 57:f8:26:5e:11:75:bf:af:98:91:64:ec:cd:20:b6: d7:f0:5c:5a:b0:cc:37:d5:7c:4d:87:de:f0:0d:52: bf:3e:44:62:4a:50:17:01:0a:5e:63:f6:0d:b7:16: ea:e0:d1:e8:ea:fc:b0:94:57:e3:06:96:48:19:33: f8:c2:00:98:29:2b:5b:64:f7:b6:0d:9e:91:c0:90: 3c:9c:4d:6a:90:04:35:0a:a5:a6:ee:46:d0:17:23: 5f:1d:78:99:13:0f:c0:7e:fc:b9:91:72:05:2f:2d: e4:0b:2a:74:72:06:91:cd:8f:ea:b0:40:5b:ab:d3: 62:a6:a2:41:4a:9d:b9:85:2f:67:21:c7:0d:a6:94: ba:67:56:07:02:c9:bd:0a:ef:81:e8:21:6c:7d:06: 12:54:bd:8d:54:6a:7f:54:91:d5:5b:1c:98:9c:aa: bc:85:db:65:77:fe:dd:74:88:9f:c3:a2:89:33:37: 8e:5b:78:7e:01:23:db:f2:73:dd:91:bd:33:28:6a: 11:14:02:45:cf:9b:ef:50:3c:5f:1e:a0:1e:ff:66: a0:5e:6d:9d:fd:37:92:05:10:21:0b:04:fb:e3:50: 82:23:68:4b:69:fc:5d:ac:54:7e:22:97:2a:ed:08: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EB:15:9C:07:93:AD:BA:45:74:75:2D:82:7D:BF:11:D5:59:0A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b7:16:65:bc:fb:f9:fd:31:0a:56:5e:d2:46:7f:b9:2f:20: 16:bb:7b:13:bd:0f:23:e9:35:6c:17:7a:05:c1:17:10:3d:b3: 21:4c:16:54:4e:8f:02:70:18:a9:ae:75:d8:2f:47:50:ee:9f: 56:93:d0:72:26:13:be:6a:8b:42:c2:9f:bb:06:2d:7b:40:b4: da:c5:81:c3:ae:62:bf:58:7e:bf:d4:b3:d9:86:59:cc:10:8b: 1c:68:93:8b:e8:2d:45:50:b6:f6:59:26:ff:79:10:b4:cc:f6: a8:53:c3:87:08:c4:80:d5:08:bf:7b:d8:b2:77:69:4e:cc:cf: 65:78:0e:db:d1:a0:9e:cc:3d:5a:2a:79:02:66:d9:42:65:33: 2e:c1:29:ca:88:56:6b:59:e8:f1:f3:d0:b6:7c:26:61:8b:d5: dc:41:6c:7f:ec:30:84:5a:bd:da:d7:81:69:a0:1c:50:5a:bf: d9:15:6a:e5:60:d1:9a:74:ea:eb:08:06:18:6a:03:4f:b3:64: 5f:0d:1f:f2:b3:33:b0:bc:37:92:52:6f:df:2d:71:e1:5d:1a: b2:35:67:d6:8d:6f:67:bb:d4:97:89:72:3c:80:c3:13:8f:f5: 66:e9:66:ae:dd:14:6e:87:c6:35:52:a4:91:9a:8c:6d:aa:ed: fa:c6:91:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhwxnIVTpx7of4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjA2ODhiYmEtYTgxYS00M2I2LWFkY2YtMmMzMTBhNDcxN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLa14Ru0tlP7OiJLc5X+CZeEXW/r5iRZOzN ILbX8FxasMw31XxNh97wDVK/PkRiSlAXAQpeY/YNtxbq4NHo6vywlFfjBpZIGTP4 wgCYKStbZPe2DZ6RwJA8nE1qkAQ1CqWm7kbQFyNfHXiZEw/Afvy5kXIFLy3kCyp0 cgaRzY/qsEBbq9NipqJBSp25hS9nIccNppS6Z1YHAsm9Cu+B6CFsfQYSVL2NVGp/ VJHVWxyYnKq8hdtld/7ddIifw6KJMzeOW3h+ASPb8nPdkb0zKGoRFAJFz5vvUDxf HqAe/2agXm2d/TeSBRAhCwT741CCI2hLafxdrFR+Ipcq7Qg2gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzrFZwHk626RXR1LYJ9vxHVWQqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTJkODhhYTgtZTQxMi0z MjQxLThkNjktNjVhNjYzZTU1NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO3FmW8+/n9MQpWXtJGf7kvIBa7exO9DyPpNWwXegXBFxA9syFMFlRO jwJwGKmuddgvR1Dun1aT0HImE75qi0LCn7sGLXtAtNrFgcOuYr9Yfr/Us9mGWcwQ ixxok4voLUVQtvZZJv95ELTM9qhTw4cIxIDVCL972LJ3aU7Mz2V4DtvRoJ7MPVoq eQJm2UJlMy7BKcqIVmtZ6PHz0LZ8JmGL1dxBbH/sMIRavdrXgWmgHFBav9kVauVg 0Zp06usIBhhqA0+zZF8NH/KzM7C8N5JSb98tceFdGrI1Z9aNb2e71JeJcjyAwxOP 9WbpZq7dFG6HxjVSpJGajG2q7frGkQo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:13 2025 by rpki-client