$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa File: 957476a5-697f-35e9-93fb-d2a0b6428b90.roa (raw, json) Hash identifier: xXYnfU1niGHPtiyAaSKHtlXdNne0aWAiESLaLAlNBcY= Subject key identifier: 76:5F:85:4B:31:4F:2A:D2:C8:BC:BE:56:5F:49:C7:60:E8:F5:13:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461BACFD391265CDD68FE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1b:ac:fd:39:12:65:cd:d6:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d0c4915f-b0bc-477e-9a4f-142d51d7eec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:0c:d5:75:fd:7e:a2:90:d3:3c:69:bc:fd: 05:bc:e5:37:b1:3c:67:f0:ce:8b:10:b0:83:7d:3f: 9a:76:02:ff:a0:c9:d1:dc:be:a7:60:81:4f:bf:d2: 99:60:07:16:f8:bb:86:e2:b5:02:b0:67:9c:e6:80: 13:8c:ae:b6:52:03:92:df:e7:e4:94:c0:8a:75:32: ad:98:21:2e:fe:48:d7:d4:b9:b7:59:f3:2e:bd:2a: 48:35:23:7c:6c:80:82:54:97:25:b3:e3:9d:f1:50: 47:08:40:6c:8a:fc:8a:6b:88:c0:42:96:1e:02:bd: cf:e0:14:cc:b7:5b:6f:01:44:95:86:83:63:68:53: b7:0c:76:ae:f5:e5:64:d3:83:1d:c7:a9:f8:0b:a2: 3c:35:66:00:32:38:15:f6:ed:46:87:5f:66:4d:95: 0e:b6:05:5e:c8:d9:cf:29:0b:9f:09:b8:2a:28:70: e2:5e:52:40:ff:fe:92:d3:59:2f:e1:82:51:57:d0: d2:90:74:5c:03:69:18:38:15:13:1b:c3:21:4a:84: 25:fd:9b:e7:fb:55:29:3f:d4:b2:95:af:04:eb:5f: 32:70:be:52:87:b7:90:d5:1e:7c:3f:da:ff:be:5d: 3e:3a:9e:56:b1:c4:f8:81:76:fa:2c:60:da:bb:76: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:85:4B:31:4F:2A:D2:C8:BC:BE:56:5F:49:C7:60:E8:F5:13:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c0:11:8a:00:37:a7:19:6f:99:6f:45:ac:55:de:7f:f9:7c: 99:f0:fd:b9:c3:8c:87:27:21:67:bc:2a:e4:1c:09:28:e2:7e: ec:8b:4f:c3:00:7e:98:c0:32:55:57:bb:a1:ed:d8:0e:bc:84: ba:af:d9:72:89:30:e5:ae:20:50:62:7b:cb:5a:37:da:00:52: 4b:7f:a1:67:30:34:09:6a:0c:39:17:0f:f9:74:7c:7f:df:ee: 6c:ac:a4:fb:7c:07:52:e6:4c:41:81:81:f6:20:17:f0:b4:16: fe:96:64:95:4f:59:89:7c:da:76:99:ce:4f:e0:36:49:d7:68: d3:cb:93:a3:b1:ae:39:69:bd:70:30:48:66:7f:5f:9f:f2:f4: d7:f9:7d:ea:b5:7d:0d:22:4f:a8:d2:8d:8b:de:e6:ca:c1:16: a9:96:ea:9f:49:b1:9d:c5:ed:56:9b:df:04:89:87:ca:ae:61: 67:2d:60:04:17:41:54:d8:98:de:8f:90:70:22:91:b1:b4:26: 7b:0e:4b:42:8d:d7:39:7d:37:b9:e3:32:27:0e:2a:51:42:76: b8:ae:27:8f:e6:03:74:78:96:48:99:ad:72:dd:30:82:38:90: cf:36:a8:69:85:15:92:c5:37:54:b2:e4:71:7e:c1:79:57:93: 1b:c1:6b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhus/TkSZc3Wj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDBjNDkxNWYtYjBiYy00NzdlLTlhNGYtMTQyZDUxZDdlZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuREM1XX9fqKQ0zxpvP0FvOU3sTxn8M6LELCD fT+adgL/oMnR3L6nYIFPv9KZYAcW+LuG4rUCsGec5oATjK62UgOS3+fklMCKdTKt mCEu/kjX1Lm3WfMuvSpINSN8bICCVJcls+Od8VBHCEBsivyKa4jAQpYeAr3P4BTM t1tvAUSVhoNjaFO3DHau9eVk04Mdx6n4C6I8NWYAMjgV9u1Gh19mTZUOtgVeyNnP KQufCbgqKHDiXlJA//6S01kv4YJRV9DSkHRcA2kYOBUTG8MhSoQl/Zvn+1UpP9Sy la8E618ycL5Sh7eQ1R58P9r/vl0+Op5WscT4gXb6LGDau3bnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZfhUsxTyrSyLy+Vl9Jx2Do9RM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3NDc2YTUtNjk3Zi0z NWU5LTkzZmItZDJhMGI2NDI4YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDAEYoAN6cZb5lvRaxV3n/5fJnw/bnDjIcnIWe8KuQcCSjifuyLT8MA fpjAMlVXu6Ht2A68hLqv2XKJMOWuIFBie8taN9oAUkt/oWcwNAlqDDkXD/l0fH/f 7myspPt8B1LmTEGBgfYgF/C0Fv6WZJVPWYl82naZzk/gNknXaNPLk6OxrjlpvXAw SGZ/X5/y9Nf5feq1fQ0iT6jSjYve5srBFqmW6p9JsZ3F7Vab3wSJh8quYWctYAQX QVTYmN6PkHAikbG0JnsOS0KN1zl9N7njMicOKlFCdriuJ4/mA3R4lkiZrXLdMII4 kM82qGmFFZLFN1Sy5HF+wXlXkxvBa/A= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:42 2025 by rpki-client