$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa File: 3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa (raw, json) Hash identifier: IgOS4YYfyC6MNky3A5lTftnh5Eg3tg2ViVGoPw/ETDI= Subject key identifier: BC:F2:7F:7E:5A:4B:9C:AA:D8:C6:6B:3D:37:45:07:24:58:E5:B2:7C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C81EF04D4C3B17A983AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:81:ef:04:d4:c3:b1:7a:98:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=84f399a2-d94d-4557-9ea1-c8c53e400dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:eb:b8:4c:20:de:19:9b:06:f3:80:a3:4e: 65:16:b8:a2:ec:9b:6e:e3:69:e6:ae:19:31:a2:9d: 3e:12:14:c8:67:05:11:d4:3b:7b:98:a5:87:27:14: c4:98:f5:b9:b1:a1:5f:44:ff:a9:14:bc:4c:67:bd: 52:e2:7c:4c:30:9a:73:77:7f:12:78:a0:52:13:78: 08:2b:91:40:0b:58:65:c2:99:f5:72:03:7b:ee:f2: 35:53:3a:ea:01:4c:9e:ca:74:6c:04:d8:f2:5a:f0: 64:f0:c3:3d:76:92:13:5e:0e:50:2b:0d:c2:af:e7: 9c:36:08:40:99:95:cb:ff:eb:75:c4:6d:05:a3:45: 6c:fb:d2:29:c4:60:72:4c:56:1c:89:8c:c2:da:57: 52:58:4a:48:aa:c7:00:81:f7:c6:bd:de:44:1d:30: b4:7f:b3:79:1d:32:51:65:e8:84:85:34:f5:8f:cb: 06:f9:00:bb:e5:30:cc:af:f2:81:b7:58:36:bf:74: 22:16:d9:4d:77:6b:30:b2:8c:3d:bc:a6:56:2a:53: 9d:b8:f2:f4:ce:d4:08:e2:7b:0a:aa:96:1c:4e:57: e8:a2:91:6f:34:3d:94:f5:df:19:9c:1f:de:4d:ec: d3:cf:82:1f:18:3a:49:8a:5f:ef:5d:31:7a:fa:4b: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:7F:7E:5A:4B:9C:AA:D8:C6:6B:3D:37:45:07:24:58:E5:B2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d5ba21f-fe3d-31fd-98a7-d18f8e7f4430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:be:92:7e:74:99:e2:d6:c6:7f:dd:bb:1f:81:8c:6b:57:3f: 61:f1:0c:35:7a:a2:39:8e:c1:ad:75:66:c8:5b:c9:cc:51:12: dd:a1:f5:bc:03:09:a4:f1:05:96:94:cf:bb:f1:13:4a:a4:82: 44:73:c6:a5:a6:db:15:9b:42:64:c8:27:90:b7:81:53:c6:e0: c1:ff:53:87:a5:3d:1f:f9:92:b7:da:f2:e9:45:f5:45:d7:dd: 81:2f:a0:cb:72:cb:94:9d:fa:d9:6f:64:40:a4:07:d6:6c:9f: fa:99:b9:63:4a:ba:fb:ed:6e:62:9b:d6:08:51:b3:f5:a0:74: 06:91:f1:09:a5:b7:27:e8:f8:14:ee:ce:4c:2f:f4:87:ad:e5: 94:97:69:4e:83:3e:ec:d2:64:eb:fc:60:cf:76:d9:55:de:7f: f2:39:79:97:55:3c:54:db:7b:9d:f7:8b:76:8c:e5:09:9c:ae: d5:df:11:bd:3b:04:10:1f:dd:32:4e:63:dd:a2:9f:59:8c:2f: 04:58:14:0c:da:be:dd:81:61:42:7b:54:95:bb:2b:d7:fc:b7: d3:9d:35:21:30:2d:ed:9f:6c:8c:22:dd:a1:de:d1:27:56:c5: 3a:46:4d:b8:69:0c:25:f0:a6:24:43:02:03:83:17:9d:ee:37: c8:4f:3c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIHvBNTDsXqYOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODRmMzk5YTItZDk0ZC00NTU3LTllYTEtYzhjNTNlNDAwZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomTruEwg3hmbBvOAo05lFrii7Jtu42nmrhkx op0+EhTIZwUR1Dt7mKWHJxTEmPW5saFfRP+pFLxMZ71S4nxMMJpzd38SeKBSE3gI K5FAC1hlwpn1cgN77vI1UzrqAUyeynRsBNjyWvBk8MM9dpITXg5QKw3Cr+ecNghA mZXL/+t1xG0Fo0Vs+9IpxGByTFYciYzC2ldSWEpIqscAgffGvd5EHTC0f7N5HTJR ZeiEhTT1j8sG+QC75TDMr/KBt1g2v3QiFtlNd2swsow9vKZWKlOduPL0ztQI4nsK qpYcTlfoopFvND2U9d8ZnB/eTezTz4IfGDpJil/vXTF6+kt1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzyf35aS5yq2MZrPTdFByRY5bJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q1YmEyMWYtZmUzZC0z MWZkLTk4YTctZDE4ZjhlN2Y0NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6+kn50meLWxn/dux+BjGtXP2HxDDV6ojmOwa11ZshbycxREt2h9bwD CaTxBZaUz7vxE0qkgkRzxqWm2xWbQmTIJ5C3gVPG4MH/U4elPR/5krfa8ulF9UXX 3YEvoMtyy5Sd+tlvZECkB9Zsn/qZuWNKuvvtbmKb1ghRs/WgdAaR8Qmltyfo+BTu zkwv9Iet5ZSXaU6DPuzSZOv8YM922VXef/I5eZdVPFTbe533i3aM5QmcrtXfEb07 BBAf3TJOY92in1mMLwRYFAzavt2BYUJ7VJW7K9f8t9OdNSEwLe2fbIwi3aHe0SdW xTpGTbhpDCXwpiRDAgODF53uN8hPPAw= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:55 2026 by rpki-client