$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa File: 1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa (raw, json) Hash identifier: UMlFoBg9lWASM8XBjN/9Y7SaCnZ5+ljgvvTv+QWPG0U= Subject key identifier: D1:4D:55:26:F0:79:94:0F:6C:62:89:73:54:AE:94:2A:0A:2C:CC:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CAE67AE0B0FDAF4428E40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:ae:67:ae:0b:0f:da:f4:42:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=70bda05d-6376-4343-ab79-03d78855ab90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:31:ad:e9:64:56:c3:11:9e:7b:0c:ca:27: 9a:1e:e9:c7:8c:51:c3:5b:5c:d0:18:4f:27:d5:13: d0:30:1b:e0:b6:23:69:21:74:d3:51:f3:1f:b7:26: 2a:e5:3c:5b:be:b5:7e:58:e9:66:18:cb:c4:8d:1c: a3:14:c7:bb:38:4d:20:c5:9d:90:3a:9a:02:da:62: 94:37:95:e3:1c:2a:50:45:94:05:3e:b0:b1:96:11: 24:8b:31:74:c2:2b:4a:a8:fa:3d:c8:bc:9f:e4:87: c7:dc:73:5f:d0:e4:8d:8d:80:be:b1:c7:c3:b5:ca: ab:e6:92:5d:88:e5:92:b0:b7:22:11:0c:8c:d6:54: 30:ff:1b:ac:60:c0:08:6f:fa:ec:95:bd:2c:df:56: e4:98:5f:91:94:aa:6a:8b:60:41:54:ea:5f:06:68: 77:f9:fd:35:80:fa:2b:f4:da:0f:e5:1e:ef:d5:40: 36:77:eb:26:cf:a1:85:73:75:6d:1b:45:41:36:98: f7:e4:ec:1f:a0:28:e7:cc:1b:83:4c:dc:07:56:f7: 32:d0:d9:35:78:21:7d:24:3e:12:bb:7d:cd:aa:10: f5:1c:d3:07:40:d4:38:11:4b:55:13:fb:7d:1c:1a: c4:f1:a4:88:1f:e0:6c:30:fc:4a:da:2c:7f:de:81: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:55:26:F0:79:94:0F:6C:62:89:73:54:AE:94:2A:0A:2C:CC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:08:b2:de:0d:bc:a6:69:43:7d:cf:aa:d9:e9:d1:53:d3:f9: 05:c6:0f:13:cf:eb:2d:6a:80:ea:b9:b0:40:fb:b9:a6:08:18: 83:be:1b:23:08:14:d1:2c:75:ae:e9:5d:6d:39:7a:12:98:50: 5b:79:83:9d:bc:7a:e5:aa:c4:73:28:46:34:c6:f0:88:4c:0e: 60:5a:10:c2:d7:52:23:cb:ef:a3:e3:63:c7:f6:b2:2d:44:23: ca:94:85:af:a2:04:3a:c5:64:0d:aa:b4:35:36:d2:7d:b1:8f: 21:9b:6b:0b:9f:ae:ce:0e:3a:e9:ce:2e:31:83:ee:44:0d:4a: 72:00:18:69:8a:d9:1c:c0:c1:87:5c:ac:71:53:b5:68:b3:6d: b4:9e:d8:e0:e5:e0:f8:48:79:84:26:1d:8b:f0:f4:c5:4d:d6: 0f:6c:58:c4:b9:71:32:f8:33:ff:b1:ee:36:cb:70:08:e5:26: 51:82:eb:c0:d5:6a:3d:30:24:38:89:74:1f:c8:44:42:8b:29: 40:c9:e8:97:09:2c:34:b8:e7:3f:d3:c4:4f:e1:4c:14:3a:5b: 57:3b:e2:bf:71:09:9f:dd:55:da:a3:77:30:ed:e9:c0:65:ab: 03:85:6a:0c:ac:db:c1:1f:00:cd:18:fb:16:bc:0f:71:24:7d: 44:49:48:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnK5nrgsP2vRCjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzBiZGEwNWQtNjM3Ni00MzQzLWFiNzktMDNkNzg4NTVhYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvIxrelkVsMRnnsMyieaHunHjFHDW1zQGE8n 1RPQMBvgtiNpIXTTUfMftyYq5TxbvrV+WOlmGMvEjRyjFMe7OE0gxZ2QOpoC2mKU N5XjHCpQRZQFPrCxlhEkizF0witKqPo9yLyf5IfH3HNf0OSNjYC+scfDtcqr5pJd iOWSsLciEQyM1lQw/xusYMAIb/rslb0s31bkmF+RlKpqi2BBVOpfBmh3+f01gPor 9NoP5R7v1UA2d+smz6GFc3VtG0VBNpj35OwfoCjnzBuDTNwHVvcy0Nk1eCF9JD4S u33NqhD1HNMHQNQ4EUtVE/t9HBrE8aSIH+BsMPxK2ix/3oGeIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFNVSbweZQPbGKJc1SulCoKLMyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWZhMzlmMmItODBiZi0z ZTNkLThhYTMtNjMwZjE4MjBjODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQIst4NvKZpQ33Pqtnp0VPT+QXGDxPP6y1qgOq5sED7uaYIGIO+GyMI FNEsda7pXW05ehKYUFt5g528euWqxHMoRjTG8IhMDmBaEMLXUiPL76PjY8f2si1E I8qUha+iBDrFZA2qtDU20n2xjyGbawufrs4OOunOLjGD7kQNSnIAGGmK2RzAwYdc rHFTtWizbbSe2ODl4PhIeYQmHYvw9MVN1g9sWMS5cTL4M/+x7jbLcAjlJlGC68DV aj0wJDiJdB/IREKLKUDJ6JcJLDS45z/TxE/hTBQ6W1c74r9xCZ/dVdqjdzDt6cBl qwOFagys28EfAM0Y+xa8D3EkfURJSDE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:39 2026 by rpki-client