$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa File: efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa (raw, json) Hash identifier: rK9A49XmnVXStEAJGS4Gz9kl8CB5xSWb2/DYcaMUZdw= Subject key identifier: C4:30:4F:A9:74:01:8B:E2:72:09:A6:21:5F:2A:FA:83:DA:2F:A8:7D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620220322C3464AD7C8FFA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 161.232.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:20:32:2c:34:64:ad:7c:8f:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5c41d5ab-fe65-4396-8dca-339a537f6839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:15:58:7b:b7:35:b6:f5:13:bd:0d:35:2a: 77:1a:41:42:3f:48:97:2a:4d:d6:6d:28:fb:58:a1: 6d:69:fd:66:ed:41:98:30:f7:b1:0a:cc:f8:d1:35: c5:3c:fd:e8:bf:ce:fd:d3:ec:85:32:f9:1e:37:71: 60:73:57:e7:00:8c:ee:2e:14:b3:1a:5e:e1:5f:8d: 67:88:c6:70:08:53:af:50:65:57:2d:0c:96:85:a8: bb:88:95:4d:71:91:fe:e0:31:38:b6:7b:6e:b9:a3: 37:d7:65:5b:c3:81:8e:d5:cc:77:f2:15:c0:2d:e2: 41:fb:c5:23:b6:99:4c:f0:be:d5:c1:28:ce:25:7f: 7e:41:dd:40:a1:db:f9:5f:b1:93:ab:41:e9:78:bc: c5:6e:e6:14:33:c5:16:e0:3a:61:59:9f:96:03:eb: b4:ef:51:85:e7:8f:61:bb:3c:82:5a:d3:0d:f5:c3: 53:19:e9:ad:6c:4f:41:45:84:02:e8:fa:c4:1f:bc: fc:15:e6:3c:fb:a0:78:35:0f:7c:da:d5:2b:e8:4a: b2:7a:d5:92:ea:38:53:dd:cd:1e:b4:09:5a:6e:04: 09:97:8a:ec:bf:84:a4:19:0d:98:92:9a:72:70:1d: 83:e5:16:5a:28:e7:5e:0b:e5:f1:f1:93:00:46:dc: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:30:4F:A9:74:01:8B:E2:72:09:A6:21:5F:2A:FA:83:DA:2F:A8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efdedef0-1ca4-3a71-9348-6d9cd0bb2c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bf:a4:b8:b7:34:92:62:6c:ce:29:6b:11:c8:cf:c5:95:6d: cd:e6:f8:6a:e3:6a:15:2e:80:3a:5a:07:ca:b6:3d:dc:4b:00: ce:a1:f3:9e:a6:fc:3e:c1:9f:01:a6:32:9f:ca:56:a4:b7:63: 40:7b:ec:5a:0f:5b:d2:89:57:76:cf:9e:e8:99:ee:30:28:b5: 27:0f:36:2e:19:a9:3e:3a:86:88:43:ce:44:91:47:9f:0b:ae: db:a0:b6:08:c1:81:81:ca:24:5f:25:b3:83:c5:4c:b2:de:2a: 6e:0b:0c:d9:5e:5f:ac:dd:a7:fd:0a:96:18:c0:c3:81:5d:ba: ab:d9:fd:eb:2b:05:49:9d:a3:89:e7:aa:5b:c8:6a:4c:a8:c6: 5b:82:f4:62:94:c9:7f:32:e4:a4:0a:6e:98:72:65:95:b5:ba: 0a:81:3e:59:6c:50:a2:4a:1f:03:ff:3a:97:db:0d:09:93:3a: 25:5f:b7:a5:d6:e0:05:d0:48:a8:f5:f4:3f:c8:b9:f5:dd:0b: e8:99:85:c9:21:62:f3:f8:e5:dc:58:7d:8b:df:50:99:78:99: 88:f3:10:e4:6c:d9:a4:b0:39:92:30:08:bf:82:f0:a0:ef:11: ca:e6:64:0d:40:fc:b7:6a:37:b3:59:1f:4d:31:11:78:8f:43: e7:b1:ce:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiAyLDRkrXyP+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWM0MWQ1YWItZmU2NS00Mzk2LThkY2EtMzM5YTUzN2Y2ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL4VWHu3Nbb1E70NNSp3GkFCP0iXKk3WbSj7 WKFtaf1m7UGYMPexCsz40TXFPP3ov8790+yFMvkeN3Fgc1fnAIzuLhSzGl7hX41n iMZwCFOvUGVXLQyWhai7iJVNcZH+4DE4tntuuaM312Vbw4GO1cx38hXALeJB+8Uj tplM8L7VwSjOJX9+Qd1Aodv5X7GTq0HpeLzFbuYUM8UW4DphWZ+WA+u071GF549h uzyCWtMN9cNTGemtbE9BRYQC6PrEH7z8FeY8+6B4NQ982tUr6EqyetWS6jhT3c0e tAlabgQJl4rsv4SkGQ2YkppycB2D5RZaKOdeC+Xx8ZMARtw6xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQwT6l0AYvicgmmIV8q+oPaL6h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkZWRlZjAtMWNhNC0z YTcxLTkzNDgtNmQ5Y2QwYmIyYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO/pLi3NJJibM4paxHIz8WVbc3m+GrjahUugDpaB8q2PdxLAM6h856m /D7BnwGmMp/KVqS3Y0B77FoPW9KJV3bPnuiZ7jAotScPNi4ZqT46hohDzkSRR58L rtugtgjBgYHKJF8ls4PFTLLeKm4LDNleX6zdp/0KlhjAw4FduqvZ/esrBUmdo4nn qlvIakyoxluC9GKUyX8y5KQKbphyZZW1ugqBPllsUKJKHwP/OpfbDQmTOiVft6XW 4AXQSKj19D/IufXdC+iZhckhYvP45dxYfYvfUJl4mYjzEORs2aSwOZIwCL+C8KDv EcrmZA1A/LdqN7NZH00xEXiPQ+exzu0= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:42 2025 by rpki-client