$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa File: e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa (raw, json) Hash identifier: vllYuN9Cb9dM9zgtE/WaZLH1Qyf8crcLeaDfGBe5eMA= Subject key identifier: 97:BE:A4:0A:D3:79:86:C1:81:EF:95:25:88:A6:7D:42:3A:0A:B4:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E6A4F04DC8F348359A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e6:a4:f0:4d:c8:f3:48:35:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=3a9db614-85e3-4909-9e7a-6f83fa0f4f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:73:39:1f:e8:0d:a6:4e:47:54:9a:0b:8f: 01:11:95:fa:5d:95:d7:a6:0b:f2:5f:0b:4e:e4:2d: 16:44:78:2a:c8:10:0f:4d:66:9a:07:bd:bf:08:8e: a9:a6:2c:ec:73:55:13:5c:40:ed:74:2a:1c:49:f6: 99:91:4e:22:0f:2b:4c:b6:71:d0:16:57:0f:ef:8e: b4:3c:cb:73:9f:07:6a:09:8b:98:a5:e8:ed:06:9a: 74:c3:97:e1:13:12:d0:51:b1:5c:81:c2:2a:16:2e: 69:10:19:27:1f:7c:66:aa:bb:04:84:78:ec:20:90: 13:8e:b1:c4:a0:c8:8b:82:10:88:e9:05:2d:e9:ec: f3:0c:d8:2d:29:fd:cb:ba:10:ef:f2:1a:e3:ec:cd: b2:d7:01:2d:cf:3e:36:4c:d2:ed:26:e1:fd:4c:c3: de:fd:a7:cf:08:12:d7:88:e9:81:e3:2f:b0:34:08: 21:36:84:49:2f:04:c3:e7:82:60:03:63:2b:6f:72: ba:84:e8:9c:bd:31:2c:e4:13:04:67:a7:cd:4f:b4: 4d:fe:29:e5:e3:9a:4f:37:52:13:25:0d:ea:90:6a: 91:00:de:f6:6d:8d:bf:87:b2:55:d6:af:36:03:2e: 48:a1:ba:71:51:70:ec:9d:8e:38:34:df:0e:00:2a: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BE:A4:0A:D3:79:86:C1:81:EF:95:25:88:A6:7D:42:3A:0A:B4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:46:52:f4:7a:75:e1:e2:a4:e1:56:4c:2e:89:36:d7:3c:0c: 6a:a7:9b:3f:9a:e4:de:e2:dc:a2:0f:69:79:e5:46:23:86:7c: c2:35:5f:6a:c4:ee:c8:79:5c:0e:90:7d:31:45:e5:07:c7:a4: aa:c7:ce:16:38:54:2b:63:68:f4:1d:23:d8:65:a3:e6:5b:54: c4:ad:6f:09:d1:d7:48:20:48:e9:6e:5e:e7:25:c1:a0:31:e6: 71:c1:dd:2c:3b:b8:f4:17:b1:86:21:1e:fc:0e:9a:fe:5d:1c: 4c:84:aa:44:fa:33:12:9d:c2:ac:0c:d3:1a:04:21:18:3b:14: 76:df:7e:e6:85:6b:b3:81:a8:c0:e6:43:8a:d6:99:b3:05:68: e1:1b:2a:c7:7f:b3:92:30:b5:30:c3:c0:9d:ca:90:90:ea:f7: f0:11:34:be:9a:f5:b3:d4:5b:79:fc:c4:c6:80:d0:74:2c:6e: 93:e6:9f:5e:86:a0:bf:65:67:4a:9d:8d:8e:dd:01:56:40:31: 45:4d:62:06:e7:6c:60:2a:3b:0d:b7:6b:b7:b1:6c:3f:c8:31: 25:b5:90:07:e1:f5:e1:44:e8:6a:c1:21:2d:e0:67:43:76:9c: 35:ae:96:e1:d3:81:13:67:04:ba:cf:d1:9a:2a:36:5e:6d:ed: f9:29:38:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeak8E3I80g1mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2E5ZGI2MTQtODVlMy00OTA5LTllN2EtNmY4M2ZhMGY0ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdVzOR/oDaZOR1SaC48BEZX6XZXXpgvyXwtO 5C0WRHgqyBAPTWaaB72/CI6ppizsc1UTXEDtdCocSfaZkU4iDytMtnHQFlcP7460 PMtznwdqCYuYpejtBpp0w5fhExLQUbFcgcIqFi5pEBknH3xmqrsEhHjsIJATjrHE oMiLghCI6QUt6ezzDNgtKf3LuhDv8hrj7M2y1wEtzz42TNLtJuH9TMPe/afPCBLX iOmB4y+wNAghNoRJLwTD54JgA2Mrb3K6hOicvTEs5BMEZ6fNT7RN/inl45pPN1IT JQ3qkGqRAN72bY2/h7JV1q82Ay5IobpxUXDsnY44NN8OACrmlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe+pArTeYbBge+VJYimfUI6CrSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVhZGFmN2QtZDc1MC0z NWE0LWJiY2QtZTlhNWYwODUzZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlGUvR6deHipOFWTC6JNtc8DGqnmz+a5N7i3KIPaXnlRiOGfMI1X2rE 7sh5XA6QfTFF5QfHpKrHzhY4VCtjaPQdI9hlo+ZbVMStbwnR10ggSOluXuclwaAx 5nHB3Sw7uPQXsYYhHvwOmv5dHEyEqkT6MxKdwqwM0xoEIRg7FHbffuaFa7OBqMDm Q4rWmbMFaOEbKsd/s5IwtTDDwJ3KkJDq9/ARNL6a9bPUW3n8xMaA0HQsbpPmn16G oL9lZ0qdjY7dAVZAMUVNYgbnbGAqOw23a7exbD/IMSW1kAfh9eFE6GrBIS3gZ0N2 nDWuluHTgRNnBLrP0ZoqNl5t7fkpOGg= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:42 2025 by rpki-client