$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa File: 2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa (raw, json) Hash identifier: MW0q8F5yf2XtU3srh87baRIQlklhSUcsJLIBzcsi6Wg= Subject key identifier: 90:26:43:8E:21:EB:61:1E:59:57:55:26:FA:2F:9F:E1:85:D1:8A:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021AC43BA457333201AE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1a:c4:3b:a4:57:33:32:01:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c39136d8-0bc7-4f98-8a3a-70fa64972a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:a8:ba:96:37:d3:cc:61:a6:41:42:81:5e: 6a:31:52:f1:1c:b2:aa:38:0b:87:15:95:6e:03:13: ef:a2:33:70:cd:39:44:29:74:ca:ea:ce:5f:ef:9e: c4:ef:31:85:b8:cc:79:2c:b1:a8:e6:fb:59:b6:f5: 6f:5b:27:9c:a6:aa:7b:39:f2:22:d2:bf:bf:e5:0d: d3:31:39:d0:18:af:70:8b:c3:e6:c3:d6:af:b2:27: c4:f5:cc:a5:c3:43:86:1f:f4:a2:99:39:85:ec:37: 44:e6:83:20:a0:d4:38:68:d7:ef:9e:c8:2b:c6:a2: 18:79:96:33:64:95:ff:4d:a8:d8:ed:86:a5:09:fb: e8:b3:1d:f9:15:5d:39:7a:90:06:54:00:ae:4e:9d: 5b:17:41:11:5f:b8:4e:8b:8e:65:f1:07:82:1e:eb: 97:7b:39:cd:da:45:78:1b:8c:bc:cb:e8:fc:9d:18: 02:d8:e8:bd:fc:ff:a8:cc:9f:fa:f9:24:72:6c:26: 3d:0d:80:df:e7:2b:f1:1b:dd:57:21:91:76:98:a5: 71:6e:63:03:ab:2e:92:e4:5b:e6:10:69:da:32:01: fa:99:d4:ea:1a:4f:51:6c:1e:ac:7f:df:13:ad:34: 3e:7c:29:c0:3c:5f:59:0c:53:16:07:cb:4b:57:5e: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:43:8E:21:EB:61:1E:59:57:55:26:FA:2F:9F:E1:85:D1:8A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f1:e8:dd:b4:42:7b:3f:47:d6:83:a6:d0:60:29:b6:9a:40: d5:35:d0:b3:90:9b:e7:85:67:76:39:f9:83:26:20:2c:55:f0: ca:f9:e3:6f:07:08:18:6e:bc:1b:15:53:7c:fb:1b:6f:db:f2: 18:d4:65:ba:b3:16:77:f7:a2:a0:5e:38:55:44:37:db:da:20: 74:45:27:c6:9b:46:c7:a0:2c:35:57:f8:40:ae:e4:f5:67:77: bd:cf:97:aa:57:6c:a5:07:ae:91:82:68:23:c8:0a:c0:15:dd: cc:ae:fb:f3:9e:ab:d7:57:68:d0:2e:5d:2f:7b:93:fc:d6:29: 54:2b:f1:15:9a:5d:ee:60:90:07:1b:a5:db:6f:29:26:fc:41: 7a:58:f5:f0:ed:d8:1c:b0:c9:4a:0f:87:38:05:ff:8d:c3:76: 3e:01:16:d3:16:18:93:5a:9f:cb:7a:a0:47:92:e2:28:9d:ce: 81:77:17:35:64:50:d0:75:09:96:6e:ad:9a:ce:b6:c9:47:48: e8:3a:0f:41:d4:82:cf:c5:dd:7b:a2:f9:2a:a8:39:16:16:1d: a6:da:05:4f:25:d9:11:37:e8:dc:41:05:b1:46:9e:f1:2a:b8: 30:9f:ef:a6:9d:07:e1:84:54:91:08:77:46:a6:c4:0c:0e:44: 04:61:74:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhrEO6RXMzIBroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzM5MTM2ZDgtMGJjNy00Zjk4LThhM2EtNzBmYTY0OTcyYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGmoupY308xhpkFCgV5qMVLxHLKqOAuHFZVu AxPvojNwzTlEKXTK6s5f757E7zGFuMx5LLGo5vtZtvVvWyecpqp7OfIi0r+/5Q3T MTnQGK9wi8Pmw9avsifE9cylw0OGH/SimTmF7DdE5oMgoNQ4aNfvnsgrxqIYeZYz ZJX/TajY7YalCfvosx35FV05epAGVACuTp1bF0ERX7hOi45l8QeCHuuXeznN2kV4 G4y8y+j8nRgC2Oi9/P+ozJ/6+SRybCY9DYDf5yvxG91XIZF2mKVxbmMDqy6S5Fvm EGnaMgH6mdTqGk9RbB6sf98TrTQ+fCnAPF9ZDFMWB8tLV14cKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAmQ44h62EeWVdVJvovn+GF0YrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmYwMGE0YTUtNDFjMS0z Yzg4LTk3YWQtOGI4ZTZkZjY2NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrx6N20Qns/R9aDptBgKbaaQNU10LOQm+eFZ3Y5+YMmICxV8Mr5428H CBhuvBsVU3z7G2/b8hjUZbqzFnf3oqBeOFVEN9vaIHRFJ8abRsegLDVX+ECu5PVn d73Pl6pXbKUHrpGCaCPICsAV3cyu+/Oeq9dXaNAuXS97k/zWKVQr8RWaXe5gkAcb pdtvKSb8QXpY9fDt2BywyUoPhzgF/43Ddj4BFtMWGJNan8t6oEeS4iidzoF3FzVk UNB1CZZurZrOtslHSOg6D0HUgs/F3Xui+SqoORYWHabaBU8l2RE36NxBBbFGnvEq uDCf76adB+GEVJEId0amxAwORARhdKo= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:41 2025 by rpki-client