$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa File: eaf44f97-1815-370f-85ae-5c98c59072b6.roa (raw, json) Hash identifier: yGXZzjt9Nc5uQ8kUHUK5qRy/xc1M50VVL1trRvA7wyU= Subject key identifier: BF:77:4D:64:9B:C2:0E:E0:7E:38:F5:8B:AD:A5:68:96:18:27:2F:A5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4987395D4B9244D2AF55F600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:39:5d:4b:92:44:d2:af:55:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7cefd834-7137-4a04-b305-3181307669a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:53:ae:c2:ae:a0:60:05:76:d2:f9:f4:34: 91:27:b5:85:6f:73:23:32:35:d6:1c:24:2b:7f:4b: 1f:d9:e4:df:4a:1e:70:a1:fa:89:e6:59:74:5a:c9: 8b:39:17:5d:ac:d2:59:cd:5f:1b:92:a9:62:49:4c: b7:36:84:f6:26:f6:5b:cc:b1:1e:ce:ab:68:90:99: 78:df:18:73:8f:df:f3:28:b2:f9:c1:d9:05:dd:1b: 97:36:56:ca:8a:de:7e:66:42:03:84:88:e4:c4:7a: c2:c3:d7:a6:bc:9d:a2:cf:20:a3:96:b0:dc:f1:f0: 24:55:39:e0:be:d7:6c:19:88:0c:19:fc:0a:71:51: d9:60:c6:80:49:69:2b:85:80:39:63:44:53:7f:6c: f8:36:12:86:05:0b:77:9f:f3:d5:0e:3c:a8:3b:2b: cf:3b:86:8d:8a:30:60:6d:ff:e4:38:89:5e:85:0f: 29:11:b0:eb:51:6b:a5:7e:ef:6a:d0:fe:60:5c:bd: 61:99:51:3d:ee:f2:0f:25:35:4a:19:e0:ba:98:c0: 97:9e:68:81:29:6c:e3:9d:f8:1d:6c:91:14:53:78: 64:96:01:a6:9d:b3:c7:2b:4e:64:b9:e0:d8:d8:d7: 58:6a:9e:a4:53:a2:36:32:43:f1:1e:8c:a8:75:d4: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:77:4D:64:9B:C2:0E:E0:7E:38:F5:8B:AD:A5:68:96:18:27:2F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eaf44f97-1815-370f-85ae-5c98c59072b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:47:37:8b:54:05:9a:2b:0d:d4:0d:6d:6d:17:ff:63:27:be: 6b:95:c9:be:8e:f4:95:34:91:46:61:2a:31:d0:8f:28:3c:ca: 24:f6:36:99:6e:d7:43:95:dd:27:b2:b4:bf:65:38:4d:9d:1f: be:33:91:fd:12:44:16:17:ae:58:91:92:9f:d9:00:d6:58:33: ce:35:dc:08:13:db:2c:fd:09:59:1c:a5:7c:41:e9:16:64:1b: 96:f7:18:d2:e2:3f:f6:6b:14:e5:4b:0b:da:cc:41:bb:ea:f1: d4:58:76:50:9b:96:6a:e4:60:5d:55:e7:a8:54:ac:b1:b3:ed: 7f:cc:89:22:72:5c:97:da:b2:2b:40:66:b0:22:a7:b8:7c:79: 62:1f:dd:76:de:06:1f:35:44:eb:7c:4c:cd:49:b5:25:be:53: 7c:ff:bf:75:ba:d0:5f:69:ba:f5:2b:3c:09:58:8f:c7:4d:e1: b3:84:52:12:a3:90:9d:6d:0b:e8:b4:ac:d7:b7:7e:9a:9a:5a: 89:4a:e0:68:5d:3a:78:d0:bf:a4:5b:eb:27:ef:33:d6:ce:17: 3b:0a:14:b3:a5:7c:87:71:c7:a4:2e:65:10:8f:4b:51:fe:d0: 37:f9:a3:26:11:b8:69:a1:76:0b:e4:3c:20:28:d3:f8:3b:76: da:bb:53:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhzldS5JE0q9V9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2NlZmQ4MzQtNzEzNy00YTA0LWIzMDUtMzE4MTMwNzY2OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha5TrsKuoGAFdtL59DSRJ7WFb3MjMjXWHCQr f0sf2eTfSh5wofqJ5ll0WsmLORddrNJZzV8bkqliSUy3NoT2JvZbzLEezqtokJl4 3xhzj9/zKLL5wdkF3RuXNlbKit5+ZkIDhIjkxHrCw9emvJ2izyCjlrDc8fAkVTng vtdsGYgMGfwKcVHZYMaASWkrhYA5Y0RTf2z4NhKGBQt3n/PVDjyoOyvPO4aNijBg bf/kOIlehQ8pEbDrUWulfu9q0P5gXL1hmVE97vIPJTVKGeC6mMCXnmiBKWzjnfgd bJEUU3hklgGmnbPHK05kueDY2NdYap6kU6I2MkPxHoyoddSlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL93TWSbwg7gfjj1i62laJYYJy+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWFmNDRmOTctMTgxNS0z NzBmLTg1YWUtNWM5OGM1OTA3MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVHN4tUBZorDdQNbW0X/2MnvmuVyb6O9JU0kUZhKjHQjyg8yiT2Nplu 10OV3SeytL9lOE2dH74zkf0SRBYXrliRkp/ZANZYM8413AgT2yz9CVkcpXxB6RZk G5b3GNLiP/ZrFOVLC9rMQbvq8dRYdlCblmrkYF1V56hUrLGz7X/MiSJyXJfasitA ZrAip7h8eWIf3XbeBh81ROt8TM1JtSW+U3z/v3W60F9puvUrPAlYj8dN4bOEUhKj kJ1tC+i0rNe3fpqaWolK4GhdOnjQv6Rb6yfvM9bOFzsKFLOlfIdxx6QuZRCPS1H+ 0Df5oyYRuGmhdgvkPCAo0/g7dtq7U10= -----END CERTIFICATE-----Generated at Sat Sep 26 07:09:43 2026 by rpki-client