$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa File: 60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa (raw, json) Hash identifier: nf1qVFkLrv/wd7n3MZCzkmQGOQiKA8/JR7WQlxefavk= Subject key identifier: F4:A6:A5:37:FB:1D:B4:FC:10:71:6E:DA:1B:0E:F3:7B:7B:23:AA:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972AD4CE6E9A9C46894BC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ad:4c:e6:e9:a9:c4:68:94:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e20f374-0cfe-4a7c-8371-422cb852c7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ce:5e:c9:c5:b4:a9:af:50:9e:57:e5:d1:8b: d9:56:31:a7:82:d6:15:09:44:7b:34:90:07:45:18: ec:f8:fc:b6:bd:13:d7:9e:8e:b7:a9:32:7d:96:e4: 65:b4:b2:c8:36:b9:c9:57:d2:16:78:e1:59:a3:c3: 6d:07:50:61:c9:64:f8:66:f4:c4:bf:f1:42:cc:40: 7f:a5:5b:c1:a5:f3:94:8c:a5:e1:b4:d2:1e:d0:dd: 00:6a:ca:c7:88:ba:c6:c0:a0:d3:dc:57:e6:b5:c5: c2:b8:9a:88:2a:aa:cc:0a:09:87:1e:41:fd:c9:7d: 73:be:f7:b2:48:fd:b4:c5:d5:ab:c1:47:22:6c:d4: a6:67:ee:82:13:cb:2b:40:5a:86:c9:b8:a8:cf:e6: 7b:46:16:92:0c:62:60:32:a8:4a:1b:bd:8f:98:e7: be:86:4e:06:80:13:bb:6c:45:92:18:92:c2:8a:a0: e7:fa:1c:82:fb:e6:bc:05:37:a3:78:14:47:30:ba: e5:a0:d0:f7:a7:73:f4:db:35:2d:37:a1:81:d1:df: 71:b1:f1:05:a1:e9:07:36:ef:64:22:2e:71:48:54: 60:4d:13:97:88:cf:e3:3f:95:7c:0a:81:8a:65:db: c5:f2:34:60:40:a5:5c:ab:c4:51:59:ab:3c:ef:e3: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A6:A5:37:FB:1D:B4:FC:10:71:6E:DA:1B:0E:F3:7B:7B:23:AA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0b:24:88:04:9d:38:b4:53:4d:43:61:cc:db:7a:07:57:b6: 9b:6b:86:c7:43:13:48:3c:0f:6e:86:79:bd:ed:5e:a7:ca:47: b8:41:59:cf:06:01:0f:a9:71:07:31:82:e8:58:3a:9a:cb:3d: f6:6f:ef:bb:9f:2a:07:af:db:01:7f:cc:27:7b:62:be:6e:d9: 32:e9:10:87:07:e7:ad:da:c0:ac:1a:8a:e6:13:0d:23:76:73: 47:6b:31:58:6a:0f:12:bd:e2:bd:e6:80:ed:bf:da:ef:6e:d1: a8:31:61:0e:d5:be:9c:2e:76:f0:15:44:0b:5a:f2:8e:af:8e: 57:f0:95:7c:0d:f4:12:28:92:bb:50:71:af:d1:a8:59:8f:1d: 1b:6b:70:f1:2c:db:b1:6c:b5:8a:39:81:87:37:09:a6:20:99: 19:be:48:26:45:db:c3:28:47:0b:27:d4:53:17:08:1b:8b:85: 1b:b8:23:54:aa:01:55:e3:c1:7e:f5:fc:70:8f:d3:00:a7:24: 0d:59:da:e7:19:87:ef:77:d0:50:69:d8:18:77:d3:15:f9:e2: 0e:4c:45:24:ac:ad:57:7a:5f:d3:dc:bd:fb:2d:2b:15:f4:bb: d8:39:1b:b6:d3:d0:05:6a:c1:e7:90:6b:ef:7f:0f:ab:1d:98: 32:2a:cc:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcq1M5umpxGiUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGUyMGYzNzQtMGNmZS00YTdjLTgzNzEtNDIyY2I4NTJjN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc5eycW0qa9Qnlfl0YvZVjGngtYVCUR7NJAH RRjs+Py2vRPXno63qTJ9luRltLLINrnJV9IWeOFZo8NtB1BhyWT4ZvTEv/FCzEB/ pVvBpfOUjKXhtNIe0N0AasrHiLrGwKDT3FfmtcXCuJqIKqrMCgmHHkH9yX1zvvey SP20xdWrwUcibNSmZ+6CE8srQFqGybioz+Z7RhaSDGJgMqhKG72PmOe+hk4GgBO7 bEWSGJLCiqDn+hyC++a8BTejeBRHMLrloND3p3P02zUtN6GB0d9xsfEFoekHNu9k Ii5xSFRgTROXiM/jP5V8CoGKZdvF8jRgQKVcq8RRWas87+MfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSmpTf7HbT8EHFu2hsO83t7I6pfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBmZDg1YzItZDJkZC0z YjUyLThkNzMtNzU2NmYzMzJiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKELJIgEnTi0U01DYczbegdXtptrhsdDE0g8D26Geb3tXqfKR7hBWc8G AQ+pcQcxguhYOprLPfZv77ufKgev2wF/zCd7Yr5u2TLpEIcH563awKwaiuYTDSN2 c0drMVhqDxK94r3mgO2/2u9u0agxYQ7VvpwudvAVRAta8o6vjlfwlXwN9BIokrtQ ca/RqFmPHRtrcPEs27FstYo5gYc3CaYgmRm+SCZF28MoRwsn1FMXCBuLhRu4I1Sq AVXjwX71/HCP0wCnJA1Z2ucZh+930FBp2Bh30xX54g5MRSSsrVd6X9PcvfstKxX0 u9g5G7bT0AVqweeQa+9/D6sdmDIqzOc= -----END CERTIFICATE-----Generated at Fri Sep 25 15:17:25 2026 by rpki-client