$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa File: b862068d-b68f-3d97-9cf9-13093d74cc0b.roa (raw, json) Hash identifier: DkTRXksoEpTrktXBZoRLvqEE2HF6peV6yQY6g9bpI2I= Subject key identifier: C1:EB:C3:4C:A4:E6:21:C1:08:1C:D1:A4:B8:B7:A8:A3:44:36:1A:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C26D77BB2FD252E0CB900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:26:d7:7b:b2:fd:25:2e:0c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a0ccde93-b727-4830-8bfb-7053e04d01b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:e5:97:b5:84:7e:30:ee:74:c4:26:f3:d2: 2c:cc:ca:e3:02:2a:a4:80:c6:33:f3:30:52:37:8f: c8:a0:7c:9b:8a:95:e3:b9:2f:ed:5d:83:c5:5a:81: 75:2e:67:6d:b6:c7:fa:35:1c:71:d8:6c:d1:4b:fd: f1:ea:3f:bc:4f:20:29:79:26:f8:47:73:82:68:7b: 4c:c0:b9:0f:a4:84:c3:e3:b2:b4:35:15:1e:4e:b7: 73:36:0f:fc:50:24:7e:21:c6:c3:da:61:7e:a4:15: 27:fe:5b:bf:e3:08:76:e1:87:98:05:d1:c7:b9:4d: f8:47:2d:07:1c:c9:50:93:e4:a7:c7:5f:ae:4c:41: 5a:92:76:d2:0a:33:f5:93:03:5e:29:8f:4c:3b:51: dd:08:45:13:ae:2a:0d:69:54:dc:75:e0:ab:6c:13: ee:0d:aa:21:67:ca:cb:b3:ab:83:ce:71:2b:e1:94: fe:18:af:a0:23:7d:d5:26:cc:49:91:42:98:44:c3: 91:aa:66:25:02:39:fa:18:a8:60:68:68:54:23:92: f0:76:a7:ca:e0:3d:a7:9f:74:8e:05:99:ab:c3:fe: 10:49:d5:2e:ff:e5:02:fe:c4:9a:a1:4b:9d:3c:39: c9:4e:db:d2:0f:77:1f:ac:76:3b:07:41:32:9d:3f: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EB:C3:4C:A4:E6:21:C1:08:1C:D1:A4:B8:B7:A8:A3:44:36:1A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a7:f2:c1:a6:66:14:51:8e:6f:d0:e5:ab:5a:ae:fa:45:de: 81:44:38:59:a9:1e:d1:13:f9:5d:85:56:b2:3b:09:5d:76:a1: b3:4c:8b:b5:9e:1b:2a:d1:95:f5:ea:30:5e:88:f9:ed:96:eb: 4a:79:83:a5:a6:a7:a5:03:dd:02:cb:2a:98:f6:ff:9f:11:72: 32:f2:d5:bf:ea:6d:26:99:3b:b0:98:75:ce:8e:ab:1d:3b:cf: 98:bf:05:29:06:50:91:9e:f1:19:23:c0:dc:34:92:ae:12:30: 5f:c6:f7:83:7f:ef:cc:0b:0f:2b:3b:6a:dc:90:7f:f7:99:8f: cf:27:b9:a4:03:ca:fa:e0:11:7c:7d:d8:6d:86:b9:0b:99:64: 05:6e:c0:7c:dc:47:32:4b:e6:67:2e:7d:98:05:2b:e5:be:a2: d6:99:17:6d:4c:ea:c4:97:b0:0d:fa:6d:6f:a1:c2:6b:90:b9: 42:ff:40:ae:7e:86:05:3f:55:a1:c0:35:98:0f:79:fe:4a:34: 2d:8f:32:00:23:4b:e0:2f:77:8d:b4:20:ad:9c:30:b9:c3:a5: 97:ad:a6:d0:a8:c6:b0:20:44:b3:2d:f2:ea:13:df:2e:09:d9: ea:48:16:e4:09:30:4a:06:94:45:ab:5e:53:f9:0d:ce:c3:d9: 61:8c:2b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnCbXe7L9JS4MuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTBjY2RlOTMtYjcyNy00ODMwLThiZmItNzA1M2UwNGQwMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3Xll7WEfjDudMQm89IszMrjAiqkgMYz8zBS N4/IoHybipXjuS/tXYPFWoF1Lmdttsf6NRxx2GzRS/3x6j+8TyApeSb4R3OCaHtM wLkPpITD47K0NRUeTrdzNg/8UCR+IcbD2mF+pBUn/lu/4wh24YeYBdHHuU34Ry0H HMlQk+Snx1+uTEFaknbSCjP1kwNeKY9MO1HdCEUTrioNaVTcdeCrbBPuDaohZ8rL s6uDznEr4ZT+GK+gI33VJsxJkUKYRMORqmYlAjn6GKhgaGhUI5LwdqfK4D2nn3SO BZmrw/4QSdUu/+UC/sSaoUudPDnJTtvSD3cfrHY7B0EynT/m8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHrw0yk5iHBCBzRpLi3qKNENhphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjg2MjA2OGQtYjY4Zi0z ZDk3LTljZjktMTMwOTNkNzRjYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqn8sGmZhRRjm/Q5atarvpF3oFEOFmpHtET+V2FVrI7CV12obNMi7We GyrRlfXqMF6I+e2W60p5g6Wmp6UD3QLLKpj2/58RcjLy1b/qbSaZO7CYdc6Oqx07 z5i/BSkGUJGe8RkjwNw0kq4SMF/G94N/78wLDys7atyQf/eZj88nuaQDyvrgEXx9 2G2GuQuZZAVuwHzcRzJL5mcufZgFK+W+otaZF21M6sSXsA36bW+hwmuQuUL/QK5+ hgU/VaHANZgPef5KNC2PMgAjS+Avd420IK2cMLnDpZetptCoxrAgRLMt8uoT3y4J 2epIFuQJMEoGlEWrXlP5Dc7D2WGMK/c= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:55 2026 by rpki-client