$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa File: 7398979f-b238-3247-b6f2-0711d0b06197.roa (raw, json) Hash identifier: GCIAsB7/3T3+HWPS8e3HkQWQnD4zqKWHCE/08VcVXGQ= Subject key identifier: 3A:F7:FF:54:2F:97:99:55:6B:4F:A6:12:73:C5:D7:E0:7C:C2:8B:AE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C2F39A334BEDD6ACC7F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:2f:39:a3:34:be:dd:6a:cc:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a9bcbc8-d541-49b5-8741-a2ffa1e1a67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:69:42:12:74:76:6f:8d:98:be:92:e5:f5: be:df:95:aa:62:5e:45:77:2a:d8:8b:7d:ae:b1:94: 84:b1:67:6a:13:ec:63:e9:a8:32:4f:36:e8:10:ba: 1c:8a:2f:19:52:d7:35:80:eb:b4:33:1a:a7:85:af: 47:ee:d8:fb:6b:8f:4b:75:d7:bc:03:89:52:46:fe: 71:e7:18:42:e7:76:5b:64:51:0b:12:92:f9:b8:46: bb:7f:92:54:97:e0:57:76:fe:26:7e:c6:31:ff:a1: 1a:54:36:85:e2:28:42:91:09:b3:d8:15:5c:7c:a1: b1:98:80:74:79:30:eb:bb:23:7e:7a:c6:57:e0:a7: d8:f6:63:b2:ff:71:a9:c3:83:cb:70:9a:31:04:e8: b2:f1:80:94:85:95:fa:22:33:1e:e4:0b:60:2a:72: 68:bb:e2:85:31:4a:fc:70:40:72:b0:5b:2a:ca:ae: 71:ad:50:fc:2a:ee:64:32:9a:12:52:17:ec:13:e3: 8d:62:df:f6:a3:12:f7:cb:84:78:64:b7:41:ea:44: e6:fd:17:7d:a9:8b:ec:2b:3c:58:b4:ae:16:25:92: ab:63:9f:78:64:1a:c0:52:57:7f:13:6f:6a:20:96: ca:54:60:b4:99:0f:76:67:c4:0a:50:6b:cb:12:7a: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F7:FF:54:2F:97:99:55:6B:4F:A6:12:73:C5:D7:E0:7C:C2:8B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7398979f-b238-3247-b6f2-0711d0b06197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d0:5d:a5:5d:e3:e6:27:64:76:1b:e8:1e:b8:50:04:4e:54: 98:29:58:e6:38:79:91:cb:f2:03:48:65:b1:b5:d5:37:36:48: f3:1a:24:36:79:d0:29:38:35:f3:a6:a9:f1:b2:83:4c:29:16: 44:75:4f:67:63:05:44:fc:6e:7d:33:88:29:05:dd:c0:5d:ea: 90:0d:bc:f6:6d:01:f7:75:05:57:f2:e8:e5:65:77:34:ac:63: a0:46:24:04:f3:4e:f3:be:6b:f3:c9:f4:15:41:35:c9:76:48: 98:92:f6:a1:8a:da:0d:45:30:4e:7d:74:bb:31:7b:e2:cf:dd: 7b:c1:e8:60:f2:d7:39:24:d3:9f:c1:41:3a:fe:84:c0:b7:d3: 15:e7:b2:36:06:8b:c0:f0:05:ce:77:25:10:7d:e3:83:ca:52: 58:02:6d:c0:aa:74:ab:24:06:9c:fb:96:1b:0f:06:8f:ea:4f: b2:30:8c:63:bc:27:fc:65:67:e1:05:eb:fd:9b:90:d7:23:f7: 5d:d2:02:4e:ed:0c:bd:45:c7:ee:bd:0f:d3:2b:f5:68:c3:cc: 01:d9:42:48:d9:9e:b6:6a:f3:ec:00:0b:90:75:10:92:7f:20: e5:d4:b5:1b:c8:5e:6e:fc:2f:dd:cf:d5:ad:4a:b1:c1:37:c3: 5c:46:e0:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnC85ozS+3WrMf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGE5YmNiYzgtZDU0MS00OWI1LTg3NDEtYTJmZmExZTFhNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO9pQhJ0dm+NmL6S5fW+35WqYl5FdyrYi32u sZSEsWdqE+xj6agyTzboELocii8ZUtc1gOu0Mxqnha9H7tj7a49Ldde8A4lSRv5x 5xhC53ZbZFELEpL5uEa7f5JUl+BXdv4mfsYx/6EaVDaF4ihCkQmz2BVcfKGxmIB0 eTDruyN+esZX4KfY9mOy/3Gpw4PLcJoxBOiy8YCUhZX6IjMe5AtgKnJou+KFMUr8 cEBysFsqyq5xrVD8Ku5kMpoSUhfsE+ONYt/2oxL3y4R4ZLdB6kTm/Rd9qYvsKzxY tK4WJZKrY594ZBrAUld/E29qIJbKVGC0mQ92Z8QKUGvLEnpPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr3/1Qvl5lVa0+mEnPF1+B8wouuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzM5ODk3OWYtYjIzOC0z MjQ3LWI2ZjItMDcxMWQwYjA2MTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTQXaVd4+YnZHYb6B64UAROVJgpWOY4eZHL8gNIZbG11Tc2SPMaJDZ5 0Ck4NfOmqfGyg0wpFkR1T2djBUT8bn0ziCkF3cBd6pANvPZtAfd1BVfy6OVldzSs Y6BGJATzTvO+a/PJ9BVBNcl2SJiS9qGK2g1FME59dLsxe+LP3XvB6GDy1zkk05/B QTr+hMC30xXnsjYGi8DwBc53JRB944PKUlgCbcCqdKskBpz7lhsPBo/qT7IwjGO8 J/xlZ+EF6/2bkNcj913SAk7tDL1Fx+69D9Mr9WjDzAHZQkjZnrZq8+wAC5B1EJJ/ IOXUtRvIXm78L93P1a1KscE3w1xG4LA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:26 2026 by rpki-client