$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa File: 8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa (raw, json) Hash identifier: 6eoEn+hFZQm1jWvOWzq2G8jIUE+tRncuNK9n3PoY69Q= Subject key identifier: 23:B0:4E:22:E0:9D:92:7C:8F:1F:4B:F1:C3:C3:24:43:29:D3:0D:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C33459119435FCA40E443 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:33:45:91:19:43:5f:ca:40:e4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2434e53f-a720-4de2-90df-c4776f5d4e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:e9:87:d0:bb:d2:fb:9e:7b:f2:04:02:a9: c6:e5:97:7e:03:5d:be:c1:c2:cf:4b:ef:81:80:b7: b8:e6:6a:f8:f0:06:b2:b5:c8:ba:42:2b:af:18:c5: 75:49:b0:e5:91:c2:24:af:e0:e1:91:cb:40:6b:e6: 15:25:b0:6c:c2:b5:32:ac:c1:c5:03:ec:d5:ee:46: d8:a9:e3:02:d0:2f:a1:4e:ea:53:c5:21:1e:6c:9b: ef:c9:a9:b7:76:74:26:06:b5:02:f5:50:4e:ce:ee: 18:f5:0d:0f:78:89:a9:e0:25:d9:f7:2f:81:59:ff: b0:b1:d7:d5:e4:01:74:9d:e2:2c:8c:31:32:cd:f7: fc:68:41:e3:af:3b:2d:0c:17:a4:fa:e2:7f:32:d1: 4c:b9:6c:12:f6:5b:34:66:ed:71:97:ce:93:7a:f9: 8f:96:2a:f6:05:5e:0c:9a:2b:f1:cf:91:5c:92:cc: 90:8c:d7:3b:eb:1a:7d:d4:17:0b:c4:6e:5f:39:d8: b3:70:f8:7a:5b:fc:67:59:b4:29:ac:6d:98:ad:53: a9:2b:8c:ba:2a:fc:c8:1c:5d:e2:f0:d6:f5:55:26: 2d:ab:bb:03:e6:34:4b:63:19:53:a2:d3:fb:3c:1b: aa:bd:b7:26:4d:37:e3:bc:c9:9e:6a:90:37:0f:5f: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:4E:22:E0:9D:92:7C:8F:1F:4B:F1:C3:C3:24:43:29:D3:0D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8cc44947-8cff-34dc-8fa9-3e707a06d96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5b:87:ee:74:92:45:9b:6c:6f:3a:7e:18:0f:dd:28:9c:7b: 4c:e0:45:c8:7d:d9:e2:15:44:15:71:fa:ad:a7:71:38:b3:03: f1:1f:fc:c8:ff:f5:28:d0:ba:f6:9d:2d:92:2d:5e:0c:b0:fa: dd:46:17:52:68:98:3d:d6:8c:70:2b:5d:86:6f:5f:a5:68:9e: ab:99:50:42:ec:ac:ce:6e:2e:22:b2:8e:91:6d:07:60:1a:c4: 76:e4:7b:47:a7:13:23:b7:c6:60:b6:79:18:e0:bf:35:f5:84: c7:6b:24:8a:cc:fe:dc:af:fa:4b:99:d4:b3:ff:58:55:2b:01: a7:0e:bd:ee:e0:af:1a:5f:27:b3:f7:a9:bc:a9:02:c7:28:b1: 2f:a7:fb:f8:c5:ff:58:5c:21:4c:cf:23:7a:4b:24:d0:5a:2f: cf:a5:6d:44:c5:cf:36:a6:91:b4:74:18:37:eb:76:3b:05:d1: 8f:5c:4d:c5:23:5d:90:63:91:7c:00:81:2e:86:3a:3c:41:d3: 8f:5d:ea:74:21:09:47:1f:b7:97:06:24:ac:53:d4:8e:e5:1d: 05:20:1e:03:19:e6:18:7f:65:24:4b:88:ef:d2:92:f8:8f:fa: e8:30:68:38:d6:15:a6:53:68:20:4e:dc:bb:c4:9a:71:59:7c: 27:5a:c5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnDNFkRlDX8pA5EMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjQzNGU1M2YtYTcyMC00ZGUyLTkwZGYtYzQ3NzZmNWQ0ZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyPph9C70vuee/IEAqnG5Zd+A12+wcLPS++B gLe45mr48Aaytci6QiuvGMV1SbDlkcIkr+DhkctAa+YVJbBswrUyrMHFA+zV7kbY qeMC0C+hTupTxSEebJvvyam3dnQmBrUC9VBOzu4Y9Q0PeImp4CXZ9y+BWf+wsdfV 5AF0neIsjDEyzff8aEHjrzstDBek+uJ/MtFMuWwS9ls0Zu1xl86TevmPlir2BV4M mivxz5FcksyQjNc76xp91BcLxG5fOdizcPh6W/xnWbQprG2YrVOpK4y6KvzIHF3i 8Nb1VSYtq7sD5jRLYxlTotP7PBuqvbcmTTfjvMmeapA3D1+IKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOwTiLgnZJ8jx9L8cPDJEMp0w2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGNjNDQ5NDctOGNmZi0z NGRjLThmYTktM2U3MDdhMDZkOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVbh+50kkWbbG86fhgP3Sice0zgRch92eIVRBVx+q2ncTizA/Ef/Mj/ 9SjQuvadLZItXgyw+t1GF1JomD3WjHArXYZvX6VonquZUELsrM5uLiKyjpFtB2Aa xHbke0enEyO3xmC2eRjgvzX1hMdrJIrM/tyv+kuZ1LP/WFUrAacOve7grxpfJ7P3 qbypAscosS+n+/jF/1hcIUzPI3pLJNBaL8+lbUTFzzamkbR0GDfrdjsF0Y9cTcUj XZBjkXwAgS6GOjxB049d6nQhCUcft5cGJKxT1I7lHQUgHgMZ5hh/ZSRLiO/SkviP +ugwaDjWFaZTaCBO3LvEmnFZfCdaxZ4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:28 2026 by rpki-client