$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa File: 6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa (raw, json) Hash identifier: o+PHwOcProIn+fZowR3c3N9cjiKk6TRscfeVbYWg4gY= Subject key identifier: 4C:7E:9A:6D:9E:57:25:C3:20:6A:A3:C7:BD:AC:29:3B:D7:D9:0B:99 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BE6652D282D9EA8089C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:e6:65:2d:28:2d:9e:a8:08:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d5f89b82-6b56-4b2b-93b4-da3e8304a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:96:57:1b:78:00:5f:c6:2d:92:21:6c:67: 21:1b:a9:24:29:94:23:98:29:6b:40:80:03:89:af: 00:a1:d2:a6:6a:36:e3:e5:8d:09:69:56:db:40:84: 94:02:60:8a:04:5f:2f:a3:b7:2d:4c:8a:7d:2d:e4: 31:c0:c8:95:be:a8:a6:87:a5:8d:7d:a1:cd:54:35: 74:27:05:56:75:70:4c:17:a2:65:e1:6c:b0:12:56: 19:04:bd:67:49:39:8b:ac:84:fd:77:5b:bb:ff:d9: 72:5a:9a:0b:48:a0:8f:7a:31:03:d6:aa:2d:c2:93: 22:14:c9:4a:4d:97:b9:45:07:95:81:4d:69:b7:57: 4d:e8:4b:e4:f8:a6:ee:05:62:dc:88:03:8a:ed:71: 19:bc:98:de:ee:1b:db:7b:b4:1a:dc:71:82:d6:ad: eb:da:de:fa:c3:07:f3:24:bf:d9:78:89:d9:70:5c: d1:ed:08:04:e9:cf:91:b3:6f:7c:36:b1:3d:47:1f: c7:74:05:4f:b8:f2:fe:f4:a2:ab:2c:66:aa:bd:54: 6b:67:ff:33:56:6f:4b:78:95:76:e0:fb:fd:52:05: cb:23:19:7a:f7:c5:d9:a1:7c:b4:e4:e8:b6:31:b2: 5d:ec:73:65:02:73:9c:9a:21:ad:f1:f0:33:d9:eb: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7E:9A:6D:9E:57:25:C3:20:6A:A3:C7:BD:AC:29:3B:D7:D9:0B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2a:b1:2d:49:9d:85:7b:ec:4e:82:9a:1c:c7:07:2f:97:6f: 11:67:df:9a:b1:20:c5:57:a5:96:ab:d4:07:08:f9:d4:50:f4: 06:09:0b:f5:39:93:8a:86:1b:29:82:60:f7:e2:b3:71:89:84: 58:44:85:6b:05:ad:ae:10:5e:03:96:12:e9:76:93:71:99:c1: b2:26:8a:e4:fe:ab:b6:1c:0e:d5:78:36:cf:41:e9:70:0b:f8: 80:da:97:78:70:5e:97:4a:14:0a:99:8a:6e:70:79:8a:10:2a: 2a:64:ae:9b:f3:aa:d5:c0:77:0e:23:ee:06:88:62:27:36:ac: 06:7a:45:6e:c9:a2:f2:66:3f:f3:f8:01:3c:9a:6e:8b:e7:9a: 48:bd:9c:8a:22:a5:52:b9:78:2e:a7:99:ca:14:19:56:09:67: 43:96:f7:46:f2:a4:c2:b8:f1:62:c6:5c:aa:8e:2f:c5:fd:10: 1f:4f:14:49:7d:b0:ef:3d:fd:0a:53:57:57:fc:da:ac:aa:ad: 10:23:39:b7:c5:06:2d:11:de:cb:7b:f9:b0:79:4e:a5:0b:04: 1b:c1:31:1e:b1:cf:45:70:8c:b0:4e:b1:f4:1e:3b:59:5e:21: 15:b1:e5:a1:13:db:13:b5:fd:1a:3a:78:15:47:01:e2:14:27: 84:99:5f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+ZlLSgtnqgInIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDVmODliODItNmI1Ni00YjJiLTkzYjQtZGEzZTgzMDRhNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPCWVxt4AF/GLZIhbGchG6kkKZQjmClrQIAD ia8AodKmajbj5Y0JaVbbQISUAmCKBF8vo7ctTIp9LeQxwMiVvqimh6WNfaHNVDV0 JwVWdXBMF6Jl4WywElYZBL1nSTmLrIT9d1u7/9lyWpoLSKCPejED1qotwpMiFMlK TZe5RQeVgU1pt1dN6Evk+KbuBWLciAOK7XEZvJje7hvbe7Qa3HGC1q3r2t76wwfz JL/ZeInZcFzR7QgE6c+Rs298NrE9Rx/HdAVPuPL+9KKrLGaqvVRrZ/8zVm9LeJV2 4Pv9UgXLIxl698XZoXy05Oi2MbJd7HNlAnOcmiGt8fAz2etUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx+mm2eVyXDIGqjx72sKTvX2QuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmYzODMzMWEtMThkNS0z YjQ4LWJkOWYtOTcxOWIwOWJjMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAqsS1JnYV77E6CmhzHBy+XbxFn35qxIMVXpZar1AcI+dRQ9AYJC/U5 k4qGGymCYPfis3GJhFhEhWsFra4QXgOWEul2k3GZwbImiuT+q7YcDtV4Ns9B6XAL +IDal3hwXpdKFAqZim5weYoQKipkrpvzqtXAdw4j7gaIYic2rAZ6RW7JovJmP/P4 ATyabovnmki9nIoipVK5eC6nmcoUGVYJZ0OW90bypMK48WLGXKqOL8X9EB9PFEl9 sO89/QpTV1f82qyqrRAjObfFBi0R3st7+bB5TqULBBvBMR6xz0VwjLBOsfQeO1le IRWx5aET2xO1/Ro6eBVHAeIUJ4SZX6g= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:25 2026 by rpki-client