$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa File: c5313336-6e92-360f-a1a0-4a2a5045ae80.roa (raw, json) Hash identifier: 8Ct1np9DWBA8/qLTatRpn7kSdw/Nn8cs/OoybK2U/JQ= Subject key identifier: 0A:FF:CF:0F:61:31:DB:78:3C:51:1F:B9:21:C8:1A:C1:28:50:BA:54 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202242BADFD72F9CAFAEB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:24:2b:ad:fd:72:f9:ca:fa:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=431ee004-0ae7-4277-8520-567fb8d45d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:1e:ab:3d:3d:6a:72:eb:9b:4e:43:2c:b7: 5f:33:35:57:02:10:db:e3:a3:93:db:c3:38:c6:81: c5:82:d9:e3:c6:9b:83:75:c2:21:fd:9a:be:5c:f9: 8c:1d:7a:1f:38:d6:b6:5e:c5:67:2f:d7:2e:f3:46: 0f:6d:da:be:e7:1c:2e:20:68:f7:c7:bb:97:21:6d: aa:1c:0f:ca:e6:b6:02:7a:2e:95:cd:8c:2a:c7:f5: 6b:45:e8:bc:55:f7:6b:e1:a7:27:fc:8b:6c:98:3b: 35:d5:ff:47:f8:ad:72:90:7e:87:b5:4c:e0:27:2b: 8a:e6:61:b0:13:56:4c:d4:d9:bf:31:9a:ed:18:36: b6:ba:6f:70:8a:08:80:4f:f0:ce:24:e3:ac:fa:4c: b2:a8:30:25:25:e3:22:68:7b:60:6e:6f:de:20:f1: 4d:54:bd:80:28:5a:97:63:d9:7c:79:dd:29:6e:c1: 1a:1c:ce:98:48:c2:bd:47:e7:a8:b0:7e:e2:21:42: cd:5c:83:c2:9c:ca:71:02:fe:cc:32:4d:a2:9f:3a: f7:dd:f1:66:39:1d:ca:29:e0:c9:11:ad:56:dd:3d: 07:1b:e3:30:de:99:af:99:ec:01:71:17:8e:a4:65: 7f:19:22:78:b7:5f:ff:40:b4:f7:36:19:40:f6:24: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FF:CF:0F:61:31:DB:78:3C:51:1F:B9:21:C8:1A:C1:28:50:BA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:6f:d7:bc:fe:4d:a7:24:4b:72:65:d6:2b:25:b3:1a:97:94: c1:10:92:43:6f:7c:d1:77:47:d1:80:09:70:d9:7e:1b:c1:b0: 4d:74:14:5b:70:44:61:4f:84:70:73:f1:cd:f0:1f:9c:b8:cb: a6:7f:c1:c6:2e:1f:c7:c0:63:08:2e:54:5c:dc:86:4b:02:3c: 36:c1:9b:9b:0f:c0:0c:09:be:8f:b9:db:32:d3:62:c1:d5:8d: 2b:80:02:53:36:50:0b:a8:d3:ae:44:42:c0:1c:d0:8d:9b:b0: b4:2d:6b:3c:d3:95:18:d9:62:48:9d:6b:0e:72:25:dd:e3:18: 86:56:f8:d0:dc:9a:90:ec:40:35:8f:da:d8:f3:b3:00:03:f4: 60:aa:ea:67:54:96:03:0f:90:a2:56:83:cc:18:be:ce:a2:83: 26:d8:0c:f6:fe:1a:3d:67:62:12:ea:46:07:dc:db:3b:97:5e: 4f:75:52:33:7d:51:f2:4e:4f:1e:2d:c2:c7:6f:22:35:a5:07: a5:bf:2e:5a:93:9a:e7:c4:3a:2f:76:42:06:a7:3c:b5:4c:49: e6:6d:bb:bc:fc:62:91:55:9c:a8:1d:fa:e4:db:c4:6c:07:92: 4b:e8:51:d4:7f:1d:94:9f:f8:22:12:e4:7e:eb:fb:d2:de:f3: bb:c6:b8:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiQrrf1y+cr66wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDMxZWUwMDQtMGFlNy00Mjc3LTg1MjAtNTY3ZmI4ZDQ1ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOYeqz09anLrm05DLLdfMzVXAhDb46OT28M4 xoHFgtnjxpuDdcIh/Zq+XPmMHXofONa2XsVnL9cu80YPbdq+5xwuIGj3x7uXIW2q HA/K5rYCei6VzYwqx/VrRei8Vfdr4acn/ItsmDs11f9H+K1ykH6HtUzgJyuK5mGw E1ZM1Nm/MZrtGDa2um9wigiAT/DOJOOs+kyyqDAlJeMiaHtgbm/eIPFNVL2AKFqX Y9l8ed0pbsEaHM6YSMK9R+eosH7iIULNXIPCnMpxAv7MMk2inzr33fFmOR3KKeDJ Ea1W3T0HG+Mw3pmvmewBcReOpGV/GSJ4t1//QLT3NhlA9iQVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr/zw9hMdt4PFEfuSHIGsEoULpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzUzMTMzMzYtNmU5Mi0z NjBmLWExYTAtNGEyYTUwNDVhZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNv17z+TackS3Jl1islsxqXlMEQkkNvfNF3R9GACXDZfhvBsE10FFtw RGFPhHBz8c3wH5y4y6Z/wcYuH8fAYwguVFzchksCPDbBm5sPwAwJvo+52zLTYsHV jSuAAlM2UAuo065EQsAc0I2bsLQtazzTlRjZYkidaw5yJd3jGIZW+NDcmpDsQDWP 2tjzswAD9GCq6mdUlgMPkKJWg8wYvs6igybYDPb+Gj1nYhLqRgfc2zuXXk91UjN9 UfJOTx4twsdvIjWlB6W/LlqTmufEOi92QganPLVMSeZtu7z8YpFVnKgd+uTbxGwH kkvoUdR/HZSf+CIS5H7r+9Le87vGuPY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:32 2025 by rpki-client