$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa File: fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa (raw, json) Hash identifier: cHZnRevPRpp17bP7y/NSvNIXWtL1sUGh0NjG8FNQOu8= Subject key identifier: 89:07:51:DF:97:9A:CA:AE:70:75:87:38:FB:66:DD:8E:E8:65:52:D4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C63833570DB604B106D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 161.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:63:83:35:70:db:60:4b:10:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8e85e2cf-b62e-4cde-9faf-6f5b550e674e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:e0:ed:02:1f:a4:48:3b:49:a5:8e:7c:4d: 8c:1f:e7:6a:db:9b:85:16:4e:1b:7a:60:51:df:04: 68:c1:20:92:bc:a4:52:ba:49:95:d8:78:48:c2:fa: ff:9e:b9:aa:40:47:7c:47:40:bf:5c:51:11:cb:fd: 49:fc:32:7b:c3:83:00:d8:e1:9f:bc:8c:2f:7c:36: 94:af:c7:81:a5:a1:27:46:fa:50:bc:f4:5d:bd:d3: cd:2b:90:c1:06:cd:1e:d6:e1:05:99:ff:9b:2b:4b: 52:74:ea:be:36:10:87:ee:f9:b2:88:16:f1:56:4c: 55:58:1a:94:fa:7e:51:88:00:b1:05:9a:1f:31:e6: 5b:14:8b:47:1f:4b:70:5c:e9:d4:70:9d:41:c9:80: 05:3b:8d:e3:2b:d3:0b:7c:eb:66:45:fb:d0:78:be: c4:f7:fe:ad:df:6d:bc:ff:3c:fb:37:03:e8:73:8b: fc:da:a2:c9:ae:d1:3c:a5:37:e1:77:84:a2:e6:68: 23:8f:b4:5b:9a:b3:2d:1c:62:e7:26:38:61:6c:62: b4:b9:25:d1:27:63:e0:12:d1:ce:c7:83:fa:63:4a: 13:7c:10:77:80:72:3e:86:97:6b:9d:7f:2e:2f:5c: 18:bb:1a:fa:59:8a:cf:31:77:d1:9b:4d:36:88:42: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:07:51:DF:97:9A:CA:AE:70:75:87:38:FB:66:DD:8E:E8:65:52:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8b:cb:32:3a:f7:6a:28:c7:14:db:9e:1c:45:51:d6:e9:07: df:a1:c7:b9:0f:de:e9:34:26:05:e7:3b:bb:6e:e1:55:8f:a1: cd:99:30:1c:93:b2:89:c2:e1:5b:3a:ec:5d:38:4c:ed:44:8a: 2c:00:3f:bd:80:f7:ab:6a:d0:d6:71:c1:62:18:5f:83:50:85: 68:9b:bf:d1:2e:19:96:3c:f3:fc:a5:9e:ac:fb:a5:83:34:4a: 89:e2:37:04:b4:cc:fd:59:20:cd:a1:11:85:b0:34:36:85:1a: 8c:7e:f4:db:fc:ee:f5:55:a4:c8:70:c1:2a:f2:67:2d:90:2d: fe:1a:d9:e2:7b:68:eb:63:c9:08:c9:ef:56:15:a8:42:83:c7: 00:d4:11:26:2c:d0:da:db:48:cd:fe:f1:5c:02:07:db:a6:bd: c7:37:bf:9d:c9:94:cb:3a:da:45:1c:3d:5d:d6:92:31:1b:f1: 2f:e2:b9:4d:2e:53:0c:71:38:30:5d:a1:df:79:76:14:3e:40: a8:5e:8c:a9:af:af:6d:11:56:f0:e1:43:34:0c:90:af:b9:f0: 24:c1:e4:56:c3:cf:13:a9:f2:57:44:b6:0c:1a:db:73:88:eb: 4f:b2:63:26:45:59:b1:75:b1:83:4b:20:81:56:97:1a:37:c7: c8:e0:d3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnGODNXDbYEsQbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGU4NWUyY2YtYjYyZS00Y2RlLTlmYWYtNmY1YjU1MGU2NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qrg7QIfpEg7SaWOfE2MH+dq25uFFk4bemBR 3wRowSCSvKRSukmV2HhIwvr/nrmqQEd8R0C/XFERy/1J/DJ7w4MA2OGfvIwvfDaU r8eBpaEnRvpQvPRdvdPNK5DBBs0e1uEFmf+bK0tSdOq+NhCH7vmyiBbxVkxVWBqU +n5RiACxBZofMeZbFItHH0twXOnUcJ1ByYAFO43jK9MLfOtmRfvQeL7E9/6t3228 /zz7NwPoc4v82qLJrtE8pTfhd4Si5mgjj7RbmrMtHGLnJjhhbGK0uSXRJ2PgEtHO x4P6Y0oTfBB3gHI+hpdrnX8uL1wYuxr6WYrPMXfRm002iEJo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkHUd+XmsqucHWHOPtm3Y7oZVLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ1NzljZDMtMzcxZi0z ZDVlLWI3YzctYzRjNjYxM2MyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWLyzI692ooxxTbnhxFUdbpB9+hx7kP3uk0JgXnO7tu4VWPoc2ZMByT sonC4Vs67F04TO1EiiwAP72A96tq0NZxwWIYX4NQhWibv9EuGZY88/ylnqz7pYM0 SoniNwS0zP1ZIM2hEYWwNDaFGox+9Nv87vVVpMhwwSryZy2QLf4a2eJ7aOtjyQjJ 71YVqEKDxwDUESYs0NrbSM3+8VwCB9umvcc3v53JlMs62kUcPV3WkjEb8S/iuU0u UwxxODBdod95dhQ+QKhejKmvr20RVvDhQzQMkK+58CTB5FbDzxOp8ldEtgwa23OI 60+yYyZFWbF1sYNLIIFWlxo3x8jg08Q= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:51 2026 by rpki-client