$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json) Hash identifier: 5s1rZhgi38N2d5ZifWI8GlKqBM3qQ5aYW/I7FfWKnAY= Subject key identifier: CA:08:77:D8:74:A1:69:67:62:D7:A5:05:43:0E:35:52:92:BE:20:49 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498727A2D00CFA221639A940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:27:a2:d0:0c:fa:22:16:39:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2007a0fd-04a3-4fdd-919e-30012f3af16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:1d:6f:a6:6a:e6:82:d5:0d:d0:6a:12:46: 94:81:97:e5:58:3b:e0:16:25:4d:56:f2:59:4d:2b: c3:44:53:d5:a3:06:ef:fc:4c:3c:d0:10:74:24:fb: ab:dc:2c:c4:14:83:88:e1:b3:8b:29:09:cb:d8:56: cf:12:ab:af:3c:60:9d:cb:84:91:e2:85:45:70:74: 02:b5:43:0f:d9:ef:05:5b:da:ab:ec:fb:a0:ed:dc: 60:b2:7c:5a:35:fd:5e:c1:32:48:8f:4f:aa:f6:cf: 49:17:85:29:2a:47:1b:8c:96:af:dc:65:f2:a6:29: b4:0f:81:6d:62:90:38:c8:3d:89:84:35:b7:47:00: 1b:06:14:15:97:37:2d:7c:88:ab:9b:43:e3:56:b0: 81:03:7b:b9:8f:2e:40:c0:1d:f4:5b:fb:33:8d:b8: 80:a1:57:10:f9:75:93:36:b4:56:4b:0a:20:36:ed: b6:c3:cd:60:3b:54:fa:dc:df:70:af:b7:8e:69:fe: b2:39:03:91:d7:5b:d5:19:a0:ee:fd:d0:3f:61:3c: 44:55:5f:46:72:89:01:e7:9c:3d:eb:5d:8c:30:41: c1:c3:b8:2b:90:13:d2:98:d1:e0:fe:1d:06:76:ce: c6:b6:67:3a:95:8e:83:13:40:aa:21:25:22:2c:ec: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:77:D8:74:A1:69:67:62:D7:A5:05:43:0E:35:52:92:BE:20:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5c:d1:0f:7a:88:d8:c7:f5:5a:74:57:75:50:7f:4b:ce:a2: f7:a6:5a:79:81:4b:f2:53:4b:96:c2:40:46:2a:86:e0:51:46: 51:9f:b9:95:9e:49:e3:73:f4:6c:a1:35:da:79:32:90:40:89: 0a:a6:df:08:5e:ad:34:63:e0:15:34:63:a9:e2:b0:3d:dc:77: 30:cd:3a:a2:b5:a3:30:97:51:7f:c8:a0:c1:35:58:3a:65:43: 14:87:1d:a3:4d:7e:a8:c2:f5:84:a3:aa:0b:57:bc:2a:4a:c9: bb:4f:0c:d6:f8:6c:58:02:2a:29:52:b3:0d:29:da:9a:76:f0: 34:96:fd:ce:a0:48:8a:20:e2:37:1b:c7:cd:e6:58:f7:42:52: 55:4c:88:4c:97:7f:71:6b:08:ef:ba:a2:58:6e:f6:73:2e:b5: b4:13:4b:81:d3:06:19:2d:c1:86:76:3c:f8:ad:38:1d:4d:19: 38:81:b0:13:15:0c:d9:76:07:d9:a8:64:c6:55:a2:08:6c:07: 68:8b:f3:84:6b:24:ae:e8:e8:98:e0:e3:a3:19:de:24:28:49: 18:36:cf:2f:02:07:b1:c1:6f:79:c4:1c:be:32:e4:24:eb:24: d0:ac:1a:20:46:05:98:de:84:87:9a:32:9a:bd:3c:32:d1:54: 46:d5:9a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhyei0Az6IhY5qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjAwN2EwZmQtMDRhMy00ZmRkLTkxOWUtMzAwMTJmM2FmMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljgdb6Zq5oLVDdBqEkaUgZflWDvgFiVNVvJZ TSvDRFPVowbv/Ew80BB0JPur3CzEFIOI4bOLKQnL2FbPEquvPGCdy4SR4oVFcHQC tUMP2e8FW9qr7Pug7dxgsnxaNf1ewTJIj0+q9s9JF4UpKkcbjJav3GXypim0D4Ft YpA4yD2JhDW3RwAbBhQVlzctfIirm0PjVrCBA3u5jy5AwB30W/szjbiAoVcQ+XWT NrRWSwogNu22w81gO1T63N9wr7eOaf6yOQOR11vVGaDu/dA/YTxEVV9GcokB55w9 612MMEHBw7grkBPSmNHg/h0Gds7Gtmc6lY6DE0CqISUiLOwRKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoId9h0oWlnYtelBUMONVKSviBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpc0Q96iNjH9Vp0V3VQf0vOovemWnmBS/JTS5bCQEYqhuBRRlGfuZWe SeNz9GyhNdp5MpBAiQqm3wherTRj4BU0Y6nisD3cdzDNOqK1ozCXUX/IoME1WDpl QxSHHaNNfqjC9YSjqgtXvCpKybtPDNb4bFgCKilSsw0p2pp28DSW/c6gSIog4jcb x83mWPdCUlVMiEyXf3FrCO+6olhu9nMutbQTS4HTBhktwYZ2PPitOB1NGTiBsBMV DNl2B9moZMZVoghsB2iL84RrJK7o6Jjg46MZ3iQoSRg2zy8CB7HBb3nEHL4y5CTr JNCsGiBGBZjehIeaMpq9PDLRVEbVmtI= -----END CERTIFICATE-----Generated at Sat Sep 26 13:34:48 2026 by rpki-client