$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa File: c5313336-6e92-360f-a1a0-4a2a5045ae80.roa (raw, json) Hash identifier: 5KDVi5F3OxnlR6i4tiLYg/DAWocWEQlgRyumEfip/gY= Subject key identifier: 3A:F3:18:B6:C8:53:D8:11:8B:52:BD:37:12:E6:5B:E3:B5:9E:A4:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4988B0306ACD54AC2CA27040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:b0:30:6a:cd:54:ac:2c:a2:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1a6e0bf-5d0d-4136-8a5b-f72c75d6e88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:c8:ad:a5:1c:75:2d:26:31:2b:f5:a6:fb: bb:8a:26:f1:0a:dc:37:31:bc:b1:9c:ea:5c:77:a9: 5b:eb:58:03:e3:4c:06:40:d6:d2:c2:c7:e5:05:71: d4:a1:42:64:2f:31:6a:fc:ca:49:a3:06:3f:41:da: 31:d3:86:a6:55:89:5a:f3:4e:c7:da:27:0f:09:d4: 6b:87:b3:a2:b9:8b:04:14:db:16:4a:1c:cb:aa:8c: 4c:8b:39:eb:7c:5c:e0:93:4c:4a:26:9d:f0:54:ef: 2c:5f:36:bb:d8:46:c7:c8:59:6c:cb:32:ee:85:15: 37:36:98:a7:36:2c:8d:3a:26:4c:5a:76:3c:99:77: 48:34:ce:25:3e:c1:0f:fe:06:74:f5:47:7a:a4:0b: ff:b1:29:67:10:18:e0:52:00:80:c2:22:ae:c4:79: bd:1d:65:67:6f:39:49:e6:e8:b6:47:79:f5:e6:4e: 85:8a:3f:23:b4:c8:9a:83:fa:33:b6:d7:55:3d:18: 08:00:78:cd:61:df:18:3f:ed:ae:61:14:88:56:5a: 22:f1:6e:27:37:ba:a8:89:ed:6a:9f:b0:fc:89:2d: 55:44:7a:4f:af:48:92:c1:ce:8d:5b:58:a9:8c:3b: fd:b8:95:56:d8:e4:42:dd:22:35:06:33:56:df:58: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:18:B6:C8:53:D8:11:8B:52:BD:37:12:E6:5B:E3:B5:9E:A4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:92:54:87:b9:be:91:9f:4f:e8:21:7c:ff:e6:d2:05:80:89: b5:39:76:7b:18:ee:da:79:e8:cb:a4:46:72:81:78:f4:c1:63: 37:2e:f1:91:c3:42:4b:65:48:0b:3d:48:e8:ad:0f:ce:6b:2d: 97:db:6c:0a:e1:e2:a1:6b:7c:d9:8d:13:a6:d4:8a:5b:be:cf: 6e:99:d2:04:e0:dc:e0:dd:36:92:95:08:b3:a5:e9:41:e9:4b: 2b:1a:08:06:22:85:17:09:be:f9:63:8a:0a:dd:07:8c:2c:57: 6b:e8:1e:c7:8a:17:23:94:76:b7:6f:b7:75:21:6d:46:66:6b: 85:0d:50:00:4e:e3:b8:d6:dc:79:a4:30:6d:35:c0:fc:a9:d8: 10:81:a7:36:46:30:63:c9:98:e0:fb:6f:07:3f:df:37:a4:e8: 6b:fa:05:bf:68:f8:9a:09:1b:32:e0:65:1b:98:82:ef:d5:2c: b9:60:d0:0b:a1:39:36:c5:76:c8:d6:4a:3f:ab:f9:b4:ef:31: 4d:3f:05:5b:f0:a9:49:e3:f7:06:96:45:e3:58:08:82:a3:06: a8:f3:b6:38:24:e2:0b:4a:3a:fb:74:e0:3a:d3:27:1c:e2:d1: 04:d7:a5:d8:a6:47:50:77:95:9b:96:e2:b8:d8:c0:7b:12:ba: 7f:31:0e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiLAwas1UrCyicEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFhNmUwYmYtNWQwZC00MTM2LThhNWItZjcyYzc1ZDZlODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt3IraUcdS0mMSv1pvu7iibxCtw3MbyxnOpc d6lb61gD40wGQNbSwsflBXHUoUJkLzFq/MpJowY/Qdox04amVYla807H2icPCdRr h7OiuYsEFNsWShzLqoxMiznrfFzgk0xKJp3wVO8sXza72EbHyFlsyzLuhRU3Npin NiyNOiZMWnY8mXdINM4lPsEP/gZ09Ud6pAv/sSlnEBjgUgCAwiKuxHm9HWVnbzlJ 5ui2R3n15k6Fij8jtMiag/ozttdVPRgIAHjNYd8YP+2uYRSIVloi8W4nN7qoie1q n7D8iS1VRHpPr0iSwc6NW1ipjDv9uJVW2ORC3SI1BjNW31gVJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrzGLbIU9gRi1K9NxLmW+O1nqRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzUzMTMzMzYtNmU5Mi0z NjBmLWExYTAtNGEyYTUwNDVhZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSSVIe5vpGfT+ghfP/m0gWAibU5dnsY7tp56MukRnKBePTBYzcu8ZHD QktlSAs9SOitD85rLZfbbArh4qFrfNmNE6bUilu+z26Z0gTg3ODdNpKVCLOl6UHp SysaCAYihRcJvvljigrdB4wsV2voHseKFyOUdrdvt3UhbUZma4UNUABO47jW3Hmk MG01wPyp2BCBpzZGMGPJmOD7bwc/3zek6Gv6Bb9o+JoJGzLgZRuYgu/VLLlg0Auh OTbFdsjWSj+r+bTvMU0/BVvwqUnj9waWReNYCIKjBqjztjgk4gtKOvt04DrTJxzi 0QTXpdimR1B3lZuW4rjYwHsSun8xDmY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:17:05 2026 by rpki-client