$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa File: 9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa (raw, json) Hash identifier: M9o33fERMb4YJbRxVHTmdpF+4b3jvYaVmK8X5wATfc8= Subject key identifier: A6:53:1E:AE:49:95:1F:63:4F:CB:BD:0A:FA:32:D2:E5:31:7B:D1:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461F435611DAB936693A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1f:43:56:11:da:b9:36:69:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=cbe1719e-8e18-4113-b380-17033a7bbb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:68:02:cc:9b:33:69:82:62:45:2e:8f:0a: 30:65:d0:0a:ef:bf:2e:a0:c5:f5:d5:fa:37:f8:14: c7:8e:34:76:cd:a8:b8:3e:9a:df:fb:89:40:33:ed: 2c:e1:19:ad:21:16:a5:3b:e6:fd:3a:82:2f:7d:8f: c7:8f:a1:25:26:70:3d:30:3e:22:be:63:db:64:1e: e2:e8:53:cf:3b:7a:b8:99:72:0e:dd:86:ea:c4:f0: be:96:cd:37:81:3c:60:7f:99:b3:fc:4c:aa:dc:f3: e2:42:c5:16:a2:74:75:e2:ed:b8:35:6e:26:cc:eb: c7:a1:7d:68:c9:b3:55:09:03:f2:22:7f:be:81:a7: 7f:cf:f5:8b:73:fb:57:c6:36:24:fc:3f:49:85:a8: 2a:16:79:96:15:75:af:a6:ca:00:f6:90:6d:13:92: e7:ad:64:bb:f3:3f:16:ff:00:d9:d1:7b:5e:b6:08: 32:54:35:ed:fb:f8:bf:3a:93:78:24:39:f7:d4:06: 46:c4:66:aa:02:72:25:2e:c6:a3:08:98:16:f9:f9: fa:1f:f6:4c:02:a5:a2:09:21:de:5b:2f:0b:6a:01: 69:fd:15:36:ef:41:df:63:6a:c2:72:a2:e8:85:4c: 6a:b6:1b:01:7d:e3:93:2d:87:fe:57:c4:4d:f5:e0: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:53:1E:AE:49:95:1F:63:4F:CB:BD:0A:FA:32:D2:E5:31:7B:D1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:75:3f:6d:2d:7e:63:41:51:73:7f:5b:d1:9c:ff:c3:aa:94: 9d:af:7e:15:f5:bd:cd:d4:e2:b4:fe:56:1b:46:6d:ea:0f:b1: af:93:5d:9c:51:2a:61:01:50:62:2a:78:7a:e4:bf:1d:13:31: fd:0f:cb:27:0d:42:c7:7f:0d:9b:72:29:93:7b:12:76:57:da: e1:1b:8c:a1:18:84:e8:39:ec:03:4e:f4:35:c2:8f:60:8b:c0: 26:16:a4:63:5c:c8:2b:a9:e2:0a:e2:37:cc:b5:82:4c:c7:bd: 42:52:63:39:1c:32:78:56:1a:b8:1e:fa:ae:b5:5f:be:50:a3: 0f:07:52:a7:b8:73:05:c9:a3:ae:13:4b:75:30:fc:3f:c4:dd: b1:0f:39:42:75:ab:2b:be:8e:a3:7b:c8:55:6e:4d:d4:fe:83: 0f:35:e5:30:c1:d7:dc:6f:09:95:ff:c1:6e:f0:d1:7a:65:f9: b5:b0:dc:f5:10:12:06:9c:2f:2d:84:d6:ba:52:d8:51:89:86: ca:e2:6d:67:de:94:a3:b0:cf:cf:a9:37:76:9b:06:7f:cb:22: bc:4e:9c:4c:c7:46:4f:7f:d1:b5:90:52:86:75:a7:2e:a7:c7: b1:6c:e0:fd:91:1e:38:b2:89:94:60:f2:bb:46:ab:57:46:71: 47:48:a8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh9DVhHauTZpOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2JlMTcxOWUtOGUxOC00MTEzLWIzODAtMTcwMzNhN2JiYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR1oAsybM2mCYkUujwowZdAK778uoMX11fo3 +BTHjjR2zai4Pprf+4lAM+0s4RmtIRalO+b9OoIvfY/Hj6ElJnA9MD4ivmPbZB7i 6FPPO3q4mXIO3YbqxPC+ls03gTxgf5mz/Eyq3PPiQsUWonR14u24NW4mzOvHoX1o ybNVCQPyIn++gad/z/WLc/tXxjYk/D9JhagqFnmWFXWvpsoA9pBtE5LnrWS78z8W /wDZ0XtetggyVDXt+/i/OpN4JDn31AZGxGaqAnIlLsajCJgW+fn6H/ZMAqWiCSHe Wy8LagFp/RU270HfY2rCcqLohUxqthsBfeOTLYf+V8RN9eCb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZTHq5JlR9jT8u9Cvoy0uUxe9HcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWE4OWMwNmUtZTdiOS0z N2U2LWIzYjEtYTgyYzNiODQ1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd1P20tfmNBUXN/W9Gc/8OqlJ2vfhX1vc3U4rT+VhtGbeoPsa+TXZxR KmEBUGIqeHrkvx0TMf0PyycNQsd/DZtyKZN7EnZX2uEbjKEYhOg57ANO9DXCj2CL wCYWpGNcyCup4griN8y1gkzHvUJSYzkcMnhWGrge+q61X75Qow8HUqe4cwXJo64T S3Uw/D/E3bEPOUJ1qyu+jqN7yFVuTdT+gw815TDB19xvCZX/wW7w0Xpl+bWw3PUQ EgacLy2E1rpS2FGJhsribWfelKOwz8+pN3abBn/LIrxOnEzHRk9/0bWQUoZ1py6n x7Fs4P2RHjiyiZRg8rtGq1dGcUdIqNY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:09 2025 by rpki-client