$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa File: 5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa (raw, json) Hash identifier: 6Zh54db5AmEJ7Uz3h4zjdxOTb3sjQxdyhKQZq7y5k6w= Subject key identifier: F9:51:87:34:CD:D5:31:D5:8B:16:36:FB:AB:C3:17:54:B6:C3:FC:79 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C945AC6E95EA395D5BB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:94:5a:c6:e9:5e:a3:95:d5:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d8a5a81c-67fd-4349-932c-eb7639fb9e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:88:c9:a2:42:f3:ae:21:1b:ef:aa:65:88: c6:b3:f4:76:40:db:77:15:2e:65:66:e4:0b:73:b8: d8:eb:08:1c:34:a9:7c:96:4c:86:29:54:fd:28:29: a8:68:5b:d6:3d:a0:f6:d9:86:69:42:75:ba:c3:14: 76:de:8e:81:fe:e8:44:98:03:71:60:e1:20:50:c7: 05:e1:81:34:da:41:f3:18:ce:69:00:cf:b2:db:e2: 78:bb:90:c1:96:3e:94:54:9a:a9:a8:bb:2c:45:23: ad:49:6f:d8:9c:2b:55:c5:73:32:04:e5:17:42:5a: 3d:28:76:a8:91:2b:ff:39:f8:f4:85:bb:ed:a4:a7: d2:20:ea:85:a8:33:b9:22:3f:96:a8:5b:0e:2f:2d: e3:6f:c0:c3:aa:e1:51:18:b7:c0:55:74:6a:37:ed: 8e:f2:ad:1a:85:9c:a0:2b:75:24:e2:02:76:cc:a8: 8d:6a:a3:77:a6:fe:af:b2:3a:4f:ba:a7:30:53:bb: 08:d1:60:ef:02:93:54:cc:7e:1d:ee:83:3f:81:5a: b1:97:14:80:03:56:d8:84:44:8c:75:63:66:c0:5a: 73:58:18:24:6b:a3:27:ec:b4:60:d4:41:59:a2:24: 09:c7:d9:28:59:c4:11:93:a1:58:49:fc:00:34:26: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:87:34:CD:D5:31:D5:8B:16:36:FB:AB:C3:17:54:B6:C3:FC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:28:39:4c:22:d0:b2:73:40:00:4f:25:20:25:d6:87:76:b0: 14:3b:c0:df:4a:25:c3:d9:96:4a:2a:78:7b:60:f0:1a:d7:a7: 3f:31:bd:cf:02:8b:73:9e:22:6e:bb:98:e6:6c:5a:b7:8c:89: 16:40:3d:8b:23:b6:d7:f6:b9:92:df:fe:17:61:91:b2:cd:e6: 73:da:dd:f0:f4:73:4e:0b:52:be:50:ba:3a:72:9f:18:33:81: 85:19:0f:96:87:9c:9c:57:cf:0f:5d:8f:7b:39:1f:7d:5d:5e: 4c:1c:b8:f8:ac:e9:b2:42:c7:0e:8b:51:f8:69:3f:22:e3:2e: ed:62:c5:3f:e0:26:85:f6:92:60:ce:38:69:db:41:fa:44:a2: c6:39:9b:75:7c:47:33:3b:44:c0:c2:f6:b2:de:b3:47:e1:b9: 51:88:14:d6:99:d6:0a:79:27:43:41:a5:64:06:45:50:20:a9: 52:d6:7f:6d:0d:15:f5:5c:75:a6:93:f7:28:76:e1:08:33:90: 8f:7c:fa:95:8b:b2:fd:d5:88:af:4f:df:f5:4d:0f:e1:a4:9c: 70:f5:de:c7:0b:1e:f6:8e:ba:08:2d:ec:36:e7:cd:6a:67:ec: e2:89:7b:28:95:c7:20:5c:75:86:d3:34:4a:a8:5d:98:da:89: b0:f6:1d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJRaxuleo5XVuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDhhNWE4MWMtNjdmZC00MzQ5LTkzMmMtZWI3NjM5ZmI5ZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT6IyaJC864hG++qZYjGs/R2QNt3FS5lZuQL c7jY6wgcNKl8lkyGKVT9KCmoaFvWPaD22YZpQnW6wxR23o6B/uhEmANxYOEgUMcF 4YE02kHzGM5pAM+y2+J4u5DBlj6UVJqpqLssRSOtSW/YnCtVxXMyBOUXQlo9KHao kSv/Ofj0hbvtpKfSIOqFqDO5Ij+WqFsOLy3jb8DDquFRGLfAVXRqN+2O8q0ahZyg K3Uk4gJ2zKiNaqN3pv6vsjpPuqcwU7sI0WDvApNUzH4d7oM/gVqxlxSAA1bYhESM dWNmwFpzWBgka6Mn7LRg1EFZoiQJx9koWcQRk6FYSfwANCYysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlRhzTN1THVixY2+6vDF1S2w/x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTEwOWU0OTEtYTNjNy0z ZWJmLTgzMWUtNGUzMWRjMGJhZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgoOUwi0LJzQABPJSAl1od2sBQ7wN9KJcPZlkoqeHtg8BrXpz8xvc8C i3OeIm67mOZsWreMiRZAPYsjttf2uZLf/hdhkbLN5nPa3fD0c04LUr5Qujpynxgz gYUZD5aHnJxXzw9dj3s5H31dXkwcuPis6bJCxw6LUfhpPyLjLu1ixT/gJoX2kmDO OGnbQfpEosY5m3V8RzM7RMDC9rLes0fhuVGIFNaZ1gp5J0NBpWQGRVAgqVLWf20N FfVcdaaT9yh24QgzkI98+pWLsv3ViK9P3/VND+GknHD13scLHvaOuggt7DbnzWpn 7OKJeyiVxyBcdYbTNEqoXZjaibD2Hew= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:33 2026 by rpki-client