$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json) Hash identifier: Pl9i8dbQ2zY3fFxeslx7Ez6162FpQsUPBBY5vDjNiWM= Subject key identifier: AF:DC:05:9A:C0:2A:CB:D1:53:3E:92:88:B8:9A:23:25:13:A5:CD:FD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C693C78CB108B06BA4730 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:69:3c:78:cb:10:8b:06:ba:47:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f62b897-27b9-44e7-aafb-b2cbea61aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:71:6d:fb:fd:21:96:53:55:fe:4c:e6:a4: 57:de:0b:f1:f8:53:fb:2c:12:d8:cd:b3:c7:f9:03: 99:fd:8d:25:40:2a:a4:7b:c7:00:85:cc:7e:5f:3f: 6e:a9:c8:a4:b6:0a:69:bf:76:e9:53:b2:44:2e:8b: 21:a3:db:82:1d:58:34:5e:f6:a0:5d:0e:f6:db:84: 04:ee:4c:df:d3:49:74:17:7b:1a:b3:37:ea:40:6e: b9:a6:54:37:04:fe:f4:66:f7:71:4d:d0:6f:e2:5b: d9:0a:53:93:da:17:39:43:44:30:97:20:90:4a:42: 94:f0:c3:cf:50:09:23:6d:4f:74:90:ca:a9:d4:1d: b7:3a:72:bd:d1:15:8b:33:de:2f:ec:f5:36:cf:86: a4:21:39:c6:9d:ee:8d:e9:02:02:37:a0:ea:fe:d7: 9c:c6:74:04:25:8c:45:3f:22:10:62:d0:0e:73:43: b2:67:c5:d1:4e:b0:fd:13:01:19:e1:5b:3a:da:a6: 93:e6:69:e4:9d:84:15:ad:2b:90:bb:16:8a:48:43: 02:0c:6b:88:10:75:90:cb:fb:d4:9b:13:83:8f:7d: c8:57:e6:c3:ac:90:15:53:a1:eb:bc:73:de:2b:8c: fa:c4:5c:1b:77:bf:49:37:10:2b:19:53:25:63:57: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DC:05:9A:C0:2A:CB:D1:53:3E:92:88:B8:9A:23:25:13:A5:CD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:49:60:30:ed:59:27:de:c8:1c:bb:a0:52:fe:ca:f8:76:92: 7b:90:5d:73:64:0d:47:2d:9c:73:1d:be:74:03:83:ae:73:77: 29:da:14:0e:f8:6a:b7:d8:ac:f3:d8:22:92:23:8f:e0:fe:7f: 5e:70:1b:40:e7:99:24:88:f2:b5:14:f8:50:8f:ba:6e:e3:bb: ff:c6:eb:7d:41:14:05:8f:21:bb:f7:50:50:27:fc:a0:77:48: 2e:2e:bc:cb:c1:e6:92:c0:14:6f:bc:d5:77:cc:9b:38:b3:b3: f7:2c:fb:c6:3f:30:54:db:17:66:f5:4e:ca:e5:83:da:66:f0: 71:d7:5d:ae:fe:25:ca:18:01:69:e2:d5:58:d0:9a:48:9f:e4: 79:d3:1e:19:48:85:c1:4e:ec:32:70:56:43:d9:87:3e:70:7b: 4f:c9:ac:8e:56:2d:63:89:93:65:b3:d7:ec:ec:f9:ea:d1:3c: d3:49:e0:43:92:f0:5c:02:26:da:04:c8:1b:17:35:8c:87:58: 30:ed:d1:5a:c6:af:66:29:9d:b1:5c:64:35:02:c3:27:a4:53: a2:1c:8e:a4:5b:d7:63:ee:08:f1:95:cf:49:27:b5:2c:e0:57: de:7e:a2:ab:e7:4b:6c:f7:47:ad:0f:9c:50:f2:43:36:fd:3e: 4a:1a:99:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnGk8eMsQiwa6RzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Y2MmI4OTctMjdiOS00NGU3LWFhZmItYjJjYmVhNjFhYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA1xbfv9IZZTVf5M5qRX3gvx+FP7LBLYzbPH +QOZ/Y0lQCqke8cAhcx+Xz9uqciktgppv3bpU7JELosho9uCHVg0XvagXQ7224QE 7kzf00l0F3saszfqQG65plQ3BP70ZvdxTdBv4lvZClOT2hc5Q0QwlyCQSkKU8MPP UAkjbU90kMqp1B23OnK90RWLM94v7PU2z4akITnGne6N6QICN6Dq/tecxnQEJYxF PyIQYtAOc0OyZ8XRTrD9EwEZ4Vs62qaT5mnknYQVrSuQuxaKSEMCDGuIEHWQy/vU mxODj33IV+bDrJAVU6HrvHPeK4z6xFwbd79JNxArGVMlY1cuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/cBZrAKsvRUz6SiLiaIyUTpc39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1JYDDtWSfeyBy7oFL+yvh2knuQXXNkDUctnHMdvnQDg65zdynaFA74 arfYrPPYIpIjj+D+f15wG0DnmSSI8rUU+FCPum7ju//G631BFAWPIbv3UFAn/KB3 SC4uvMvB5pLAFG+81XfMmzizs/cs+8Y/MFTbF2b1Tsrlg9pm8HHXXa7+JcoYAWni 1VjQmkif5HnTHhlIhcFO7DJwVkPZhz5we0/JrI5WLWOJk2Wz1+zs+erRPNNJ4EOS 8FwCJtoEyBsXNYyHWDDt0VrGr2YpnbFcZDUCwyekU6IcjqRb12PuCPGVz0kntSzg V95+oqvnS2z3R60PnFDyQzb9PkoamXI= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:27 2026 by rpki-client