$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa File: d2974c0b-793f-3052-907e-201dffbd31d6.roa (raw, json) Hash identifier: CqlwBJvRW9ODFpGx0mMSg7jKBUNY/FnTV7K9ryXgvq4= Subject key identifier: D2:BB:BF:37:F1:19:BE:3B:A0:07:E9:6A:9F:C0:23:77:64:75:C8:BF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CBC0CFE1C5F3DFDBAB000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:bc:0c:fe:1c:5f:3d:fd:ba:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ce554dd6-3a8c-42d0-8914-8a61548dc972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:f9:3d:14:2a:aa:63:22:2e:10:b1:7a:2d: 4b:31:a7:4b:f9:c1:c6:85:7e:1b:39:97:87:f8:b2: 30:0d:85:00:32:e4:29:9c:aa:b5:fc:a0:21:5e:dd: 96:ee:f9:c6:71:60:76:36:72:0d:a3:8a:b8:50:e3: 28:59:50:4e:9b:e5:d0:63:dc:7c:8b:42:3b:00:76: 77:d2:40:6e:d9:29:2f:43:cb:61:e3:da:fe:40:26: 68:36:78:22:80:53:dc:f5:57:5a:78:33:1a:9a:f7: 19:d4:ea:40:3e:58:e9:79:4c:13:56:03:5f:f2:c1: d6:de:1d:e6:f1:6b:f1:ad:df:ef:5a:60:03:83:e9: f7:80:b0:59:4d:f7:2d:8b:56:23:f7:71:6d:16:2f: 02:06:ea:7e:79:12:90:14:7e:e7:18:f1:c6:df:49: 0e:d6:d7:c6:9f:86:05:6b:46:01:12:9e:90:46:b9: c1:31:15:de:13:1a:5d:f8:4c:21:dc:c0:7e:bb:db: 22:1b:b7:50:18:7d:5f:1f:bf:2c:8a:f6:ec:bc:75: 5a:6a:01:c4:5e:3e:2a:71:c6:91:17:01:24:65:25: 6f:5f:4e:35:93:fb:17:a8:12:c0:eb:f9:e6:76:11: 93:d7:ae:26:a2:b6:ab:4e:15:9b:34:86:6e:41:0f: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:BF:37:F1:19:BE:3B:A0:07:E9:6A:9F:C0:23:77:64:75:C8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:dc:96:60:65:99:81:29:e5:2d:54:a5:a6:7b:4b:85:9a:03: 76:cb:c2:24:63:5a:1f:35:4c:07:45:59:82:ec:ad:e6:21:c4: cd:fb:a7:24:90:3e:39:ef:8e:79:2b:eb:63:c9:27:f5:9b:08: 23:1b:30:cf:d4:05:0e:09:0a:55:6a:c2:91:d2:51:86:7d:a8: 8a:bf:d3:29:aa:9f:1e:22:f6:3d:b4:b7:1f:95:ec:b9:73:b0: 60:2d:cb:f4:30:72:95:73:94:c9:58:0e:24:4f:28:a6:a8:13: c2:dd:68:d3:46:d5:05:7a:5b:8c:d2:86:cd:44:2d:20:92:95: 5e:6e:49:1c:a9:7a:35:03:b1:8b:2d:97:1e:5c:23:c4:d8:5c: 4a:db:57:c4:a8:7b:d3:00:29:56:65:22:80:a7:24:37:38:92: 6d:99:07:53:81:5e:b3:99:09:f3:79:da:d2:bb:ba:a7:59:f2: a5:c3:86:cb:a6:92:a4:d1:50:65:2a:d4:49:01:d8:b7:40:6e: 17:83:6f:f1:f6:b3:8b:67:8c:b8:94:f6:f5:9e:78:c5:d1:bf: ac:82:f6:a1:78:02:dc:21:55:0d:ff:47:20:f8:89:21:89:dc: 2d:60:99:38:bd:04:0d:6c:8e:66:52:ab:a2:b3:02:34:2d:7e: d8:e1:4c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnLwM/hxfPf26sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2U1NTRkZDYtM2E4Yy00MmQwLTg5MTQtOGE2MTU0OGRjOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyX5PRQqqmMiLhCxei1LMadL+cHGhX4bOZeH +LIwDYUAMuQpnKq1/KAhXt2W7vnGcWB2NnINo4q4UOMoWVBOm+XQY9x8i0I7AHZ3 0kBu2SkvQ8th49r+QCZoNngigFPc9VdaeDMamvcZ1OpAPljpeUwTVgNf8sHW3h3m 8Wvxrd/vWmADg+n3gLBZTfcti1Yj93FtFi8CBup+eRKQFH7nGPHG30kO1tfGn4YF a0YBEp6QRrnBMRXeExpd+Ewh3MB+u9siG7dQGH1fH78sivbsvHVaagHEXj4qccaR FwEkZSVvX041k/sXqBLA6/nmdhGT164morarThWbNIZuQQ/wuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK7vzfxGb47oAfpap/AI3dkdci/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDI5NzRjMGItNzkzZi0z MDUyLTkwN2UtMjAxZGZmYmQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXclmBlmYEp5S1UpaZ7S4WaA3bLwiRjWh81TAdFWYLsreYhxM37pySQ Pjnvjnkr62PJJ/WbCCMbMM/UBQ4JClVqwpHSUYZ9qIq/0ymqnx4i9j20tx+V7Llz sGAty/QwcpVzlMlYDiRPKKaoE8LdaNNG1QV6W4zShs1ELSCSlV5uSRypejUDsYst lx5cI8TYXErbV8Soe9MAKVZlIoCnJDc4km2ZB1OBXrOZCfN52tK7uqdZ8qXDhsum kqTRUGUq1EkB2LdAbheDb/H2s4tnjLiU9vWeeMXRv6yC9qF4AtwhVQ3/RyD4iSGJ 3C1gmTi9BA1sjmZSq6KzAjQtftjhTLY= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:26 2026 by rpki-client