$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa File: 157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa (raw, json) Hash identifier: ld1NXXrmKaOccnFOFqyyvZcQXfiwjw5UZwPug7G9Ok8= Subject key identifier: 3F:0F:28:89:22:EC:EE:A4:E5:AA:05:FC:DF:0A:A1:04:1F:6C:11:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974F34714618BEFA435C1C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f3:47:14:61:8b:ef:a4:35:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b98e587-b218-4e31-9f36-a9b3648a17ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:30:39:2d:2c:5d:37:9b:41:32:23:ed:b0: 34:c1:8d:b8:43:05:e8:bc:d4:7f:6a:f3:4e:41:30: 86:2b:64:30:cb:1b:30:fc:11:ba:3f:d8:cf:dc:97: ac:81:26:f0:e1:2a:15:1a:31:ea:1b:ac:5d:19:ec: 04:3e:b1:9e:a7:ff:b5:8f:79:f0:67:b0:71:41:87: cb:9b:cc:96:18:78:13:5c:b0:c1:31:ba:8e:1f:c9: d0:7f:c8:01:60:e5:45:4d:ee:4f:63:a3:d4:e0:31: f2:2b:58:04:ac:98:07:7d:de:ab:07:d4:d0:3b:68: 5e:50:b0:85:16:b9:f6:26:62:a2:59:1f:94:c3:6b: 45:13:30:85:32:a8:1a:bb:b0:61:4e:fb:12:0c:1d: 55:d1:8c:cd:f9:f7:af:e6:29:ec:ee:81:11:af:48: 4e:0c:cf:44:47:7a:e8:32:9b:9d:8c:7a:fd:b5:24: 00:e8:60:be:f0:f2:84:52:44:81:79:a3:83:ea:f0: 43:a5:87:48:f8:1a:11:bf:88:c2:0d:9b:63:59:13: a1:54:7d:e2:17:7c:fc:03:25:74:ea:e4:14:b0:aa: 38:64:79:0b:51:0c:c7:02:d9:93:10:f5:39:ff:72: f9:f1:6f:b6:f5:ac:74:8b:75:cc:35:55:a1:65:aa: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0F:28:89:22:EC:EE:A4:E5:AA:05:FC:DF:0A:A1:04:1F:6C:11:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:62:e7:35:8e:fc:1b:c9:53:8c:0e:30:08:c4:a4:5b:29:56: 7e:d5:11:30:d0:7c:06:4b:b5:55:9d:ae:37:d9:ec:4e:9a:c2: 08:bd:0c:a5:09:4c:db:09:a5:a5:b6:fb:30:3c:42:bd:16:dd: 9b:82:2a:15:a8:16:1c:31:09:4a:33:30:22:02:af:54:9e:a2: b6:f4:49:89:d8:26:7d:4e:f4:31:2c:7e:4d:26:8b:d6:9a:eb: a3:7c:00:8f:d7:33:77:ea:51:30:8b:ed:9f:e7:28:ef:2a:81: 06:a5:61:81:79:c0:bf:ea:f1:69:d1:d2:46:33:e9:84:24:3f: be:98:df:1a:70:e6:8b:d6:6d:23:2b:96:56:ee:c3:f3:bc:5e: 00:9f:06:e3:88:32:f5:ac:74:66:21:f6:23:9e:ba:90:ee:ee: ac:67:60:34:18:4c:46:48:5e:bf:3f:e6:fd:ba:b6:7b:62:ac: 56:d4:8f:65:a5:e3:f6:64:22:31:84:be:ae:33:58:23:08:eb: a7:b5:b0:f0:42:ef:9e:fc:77:70:64:60:d6:20:be:bb:dd:6d: d8:89:c3:b1:bd:25:69:40:bc:dd:e3:9b:7b:18:06:f1:2c:11: 8d:fd:4e:9a:b6:1a:e9:70:03:16:a7:68:bc:18:5a:33:bc:74: b7:c0:99:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPNHFGGL76Q1wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2I5OGU1ODctYjIxOC00ZTMxLTlmMzYtYTliMzY0OGExN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU0wOS0sXTebQTIj7bA0wY24QwXovNR/avNO QTCGK2Qwyxsw/BG6P9jP3JesgSbw4SoVGjHqG6xdGewEPrGep/+1j3nwZ7BxQYfL m8yWGHgTXLDBMbqOH8nQf8gBYOVFTe5PY6PU4DHyK1gErJgHfd6rB9TQO2heULCF Frn2JmKiWR+Uw2tFEzCFMqgau7BhTvsSDB1V0YzN+fev5ins7oERr0hODM9ER3ro MpudjHr9tSQA6GC+8PKEUkSBeaOD6vBDpYdI+BoRv4jCDZtjWROhVH3iF3z8AyV0 6uQUsKo4ZHkLUQzHAtmTEPU5/3L58W+29ax0i3XMNVWhZaoWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8PKIki7O6k5aoF/N8KoQQfbBF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTU3ZDQ4ODMtNGNjMS0z NjU1LThiMzYtY2MwZTJhYWE0NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZi5zWO/BvJU4wOMAjEpFspVn7VETDQfAZLtVWdrjfZ7E6awgi9DKUJ TNsJpaW2+zA8Qr0W3ZuCKhWoFhwxCUozMCICr1Seorb0SYnYJn1O9DEsfk0mi9aa 66N8AI/XM3fqUTCL7Z/nKO8qgQalYYF5wL/q8WnR0kYz6YQkP76Y3xpw5ovWbSMr llbuw/O8XgCfBuOIMvWsdGYh9iOeupDu7qxnYDQYTEZIXr8/5v26tntirFbUj2Wl 4/ZkIjGEvq4zWCMI66e1sPBC7578d3BkYNYgvrvdbdiJw7G9JWlAvN3jm3sYBvEs EY39Tpq2GulwAxanaLwYWjO8dLfAme4= -----END CERTIFICATE-----Generated at Fri Sep 25 14:30:37 2026 by rpki-client