$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa File: 957476a5-697f-35e9-93fb-d2a0b6428b90.roa (raw, json) Hash identifier: gNNqVGageA5HNYftZCyChnMQOiZslGdLUT0y/WwME68= Subject key identifier: E6:2A:CE:E6:D3:6C:19:34:4E:D5:93:12:05:A2:7B:23:FF:B7:95:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BC8745DC8A91A7D33AB20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:c8:74:5d:c8:a9:1a:7d:33:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=35a239e2-583c-4269-b224-c2d2a5817032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:dc:22:40:d7:73:24:34:81:c9:af:0e:15: 02:99:ce:89:64:a6:7c:40:31:d0:bd:c5:13:ff:95: 09:f7:b8:14:4e:e8:26:ef:6f:f9:b0:e4:98:bd:ea: 93:8e:5e:ab:83:40:8e:80:a9:91:27:84:c4:40:1a: c9:a0:ce:98:34:57:89:d2:aa:39:bc:d0:ff:92:a5: f7:08:21:0c:ef:cf:cb:26:6c:74:31:54:fe:a8:fa: 93:76:6a:0d:bb:a7:d6:91:42:6e:73:78:8b:c6:06: fd:1f:58:62:a6:9e:8a:f2:36:34:6b:5f:99:28:94: 45:9f:a1:6c:aa:8b:58:b9:35:db:87:20:16:49:c4: 74:98:eb:6f:09:01:28:78:a4:8d:55:c0:1b:1d:47: dd:1d:3b:0d:fa:76:6e:19:6c:d6:fe:e9:71:3b:2b: 41:1a:3a:bb:de:fa:94:d8:43:e8:ff:56:83:4d:a6: 73:9a:e6:fe:30:f7:5e:f2:df:f9:9c:b4:e4:3a:c1: b6:ba:85:b2:8f:16:dc:54:c0:19:9d:a2:92:a6:8d: 4c:9c:34:fb:06:99:bb:72:d9:66:e6:1f:07:d2:65: c3:3f:14:96:ff:72:fd:c9:09:c0:7f:41:aa:52:9b: 24:0e:fb:2d:f9:5e:b1:c7:2b:d8:12:83:71:b7:a4: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:CE:E6:D3:6C:19:34:4E:D5:93:12:05:A2:7B:23:FF:B7:95:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:eb:ed:aa:84:ae:9b:05:9a:be:e4:04:40:da:91:62:98:e4: c7:4d:c9:b0:b2:d3:23:fc:1f:56:d0:c0:29:ca:7e:e7:a1:67: 5a:99:c7:bf:87:e5:f1:d9:42:f2:75:78:26:e7:83:4e:83:de: ed:a4:2d:59:a9:68:05:27:49:d4:04:8f:bb:77:24:fa:ca:8f: 5e:cc:77:74:9a:9e:9f:be:4d:30:23:0d:38:92:fc:7c:74:a7: eb:6f:61:c2:d2:49:34:a8:2a:f4:a8:27:d7:6c:f0:b0:55:26: 4a:48:1c:93:36:0d:d0:30:ec:01:ea:44:d0:e4:97:f3:9a:a1: 98:a6:02:c5:63:53:3b:15:fc:b5:53:54:04:1d:aa:9b:2b:45: de:29:67:3b:a8:86:f6:9c:cd:68:d3:d4:d3:55:ed:ba:63:a8: c0:e1:01:1a:d2:49:af:35:39:c1:92:d3:fc:88:e8:9c:c6:26: ef:1b:46:f1:10:37:cc:c1:ac:c8:b0:59:f1:a0:9c:fc:02:13: 26:ac:e8:b4:f8:89:80:3b:27:5c:16:e6:f7:2a:e3:c7:78:65: 09:46:af:20:65:eb:8d:31:aa:22:d0:49:35:01:41:e8:27:c2: 13:ee:56:14:d3:91:50:ac:39:a5:f9:34:6c:5b:39:90:2e:98: 49:d1:37:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm8h0XcipGn0zqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzVhMjM5ZTItNTgzYy00MjY5LWIyMjQtYzJkMmE1ODE3MDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVzcIkDXcyQ0gcmvDhUCmc6JZKZ8QDHQvcUT /5UJ97gUTugm72/5sOSYveqTjl6rg0COgKmRJ4TEQBrJoM6YNFeJ0qo5vND/kqX3 CCEM78/LJmx0MVT+qPqTdmoNu6fWkUJuc3iLxgb9H1hipp6K8jY0a1+ZKJRFn6Fs qotYuTXbhyAWScR0mOtvCQEoeKSNVcAbHUfdHTsN+nZuGWzW/ulxOytBGjq73vqU 2EPo/1aDTaZzmub+MPde8t/5nLTkOsG2uoWyjxbcVMAZnaKSpo1MnDT7Bpm7ctlm 5h8H0mXDPxSW/3L9yQnAf0GqUpskDvst+V6xxyvYEoNxt6QtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYqzubTbBk0TtWTEgWieyP/t5U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3NDc2YTUtNjk3Zi0z NWU5LTkzZmItZDJhMGI2NDI4YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjr7aqErpsFmr7kBEDakWKY5MdNybCy0yP8H1bQwCnKfuehZ1qZx7+H 5fHZQvJ1eCbng06D3u2kLVmpaAUnSdQEj7t3JPrKj17Md3Sanp++TTAjDTiS/Hx0 p+tvYcLSSTSoKvSoJ9ds8LBVJkpIHJM2DdAw7AHqRNDkl/OaoZimAsVjUzsV/LVT VAQdqpsrRd4pZzuohvaczWjT1NNV7bpjqMDhARrSSa81OcGS0/yI6JzGJu8bRvEQ N8zBrMiwWfGgnPwCEyas6LT4iYA7J1wW5vcq48d4ZQlGryBl640xqiLQSTUBQegn whPuVhTTkVCsOaX5NGxbOZAumEnRN+Q= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:24 2026 by rpki-client