$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4f6218-bb3f-347e-a7d1-bfa56f49d88b.roa File: 0c4f6218-bb3f-347e-a7d1-bfa56f49d88b.roa (raw, json) Hash identifier: EUIyDuDdGWFzmw+gJDwlpnTzsicvWTbaXlXuqJVDQLg= Subject key identifier: 24:75:D9:4B:7D:74:8B:CC:82:1F:4D:61:42:99:33:58:6C:3B:F7:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974A824C64D902198153640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4f6218-bb3f-347e-a7d1-bfa56f49d88b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a8:24:c6:4d:90:21:98:15:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07604ab1-55b6-48a3-bbce-c9074511e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:c4:a4:dd:b4:36:8c:53:2e:72:6e:b6:22: fd:f7:43:da:f0:d2:64:06:8a:21:da:27:88:af:6d: b6:5c:08:28:f7:43:33:ab:45:fe:63:b0:de:95:c9: fa:e2:85:b7:5b:ab:57:5b:e0:05:20:32:9a:b7:fb: 8a:41:ab:cc:ae:32:e9:26:94:a8:2c:9a:00:13:89: b5:29:50:ac:9c:19:06:f7:1d:97:70:ff:c2:0a:39: 61:3e:2e:68:91:0b:5e:19:50:6c:4b:77:6f:cb:21: c2:88:ba:86:6c:02:f8:32:cf:9a:ad:70:25:35:a4: d6:95:a3:12:3c:bf:41:39:2d:d1:d7:83:41:a5:e1: 8b:9f:ac:81:76:6d:ba:5e:81:26:87:da:e4:b1:d7: 17:da:a4:84:b0:7c:0c:5e:21:e3:03:83:ee:12:be: 14:46:dd:d6:f0:06:f8:ba:8b:9e:ab:ca:d7:f1:89: e7:39:69:2d:78:87:d0:2d:05:7d:2d:85:1c:00:b9: 3b:b5:9c:11:6e:85:76:9a:0d:7f:a4:d3:36:bd:07: 9f:58:7d:ec:e6:8d:04:b0:5b:7e:4f:03:0e:bb:90: 18:0d:98:b7:1a:10:11:82:bc:5f:6c:c4:66:98:1a: 81:8b:71:84:46:8a:e3:6c:58:c3:1e:05:dc:19:be: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:D9:4B:7D:74:8B:CC:82:1F:4D:61:42:99:33:58:6C:3B:F7:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4f6218-bb3f-347e-a7d1-bfa56f49d88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e2:39:bb:da:5e:13:f0:78:2e:1a:93:4a:4a:9b:56:85:b3: 60:40:35:0c:cf:d6:52:e4:b3:b5:f8:5f:fb:06:f8:72:b1:b8: 4a:37:a7:90:4b:a9:04:77:28:ce:22:d4:b7:84:52:13:00:e3: 35:55:c6:79:64:9b:76:4a:4c:1c:96:48:ad:9d:4e:5b:c9:19: bd:02:9f:ee:57:ad:69:f4:63:d4:36:32:d4:db:63:52:47:31: 47:4c:aa:1a:1d:29:06:b8:11:38:40:24:b1:43:a2:32:67:ce: e0:81:85:ae:3b:9f:83:b5:9e:17:35:14:da:38:5a:ef:9c:3e: e6:96:73:65:c5:05:db:52:55:1f:aa:42:58:9f:43:04:dc:dd: e0:5a:53:59:fb:34:a6:5c:e8:59:23:9a:20:a4:f2:3d:6a:88: 08:d3:7c:28:b9:a4:69:71:fb:b0:10:2c:5e:e9:b0:e3:41:32: 7e:65:c0:35:40:25:a1:09:46:ac:ae:43:74:4f:e1:11:28:c2: dd:c3:a2:46:84:85:1e:2c:4e:e3:93:48:37:88:5c:2b:fb:95: 00:ed:55:35:ed:53:b0:ae:66:2d:55:34:94:5b:de:68:e1:dd: b6:26:82:ad:6c:95:3d:13:15:74:be:2c:80:59:12:83:2a:ee: 76:50:b1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKgkxk2QIZgVNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDc2MDRhYjEtNTViNi00OGEzLWJiY2UtYzkwNzQ1MTFlNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxPEpN20NoxTLnJutiL990Pa8NJkBooh2ieI r222XAgo90Mzq0X+Y7Delcn64oW3W6tXW+AFIDKat/uKQavMrjLpJpSoLJoAE4m1 KVCsnBkG9x2XcP/CCjlhPi5okQteGVBsS3dvyyHCiLqGbAL4Ms+arXAlNaTWlaMS PL9BOS3R14NBpeGLn6yBdm26XoEmh9rksdcX2qSEsHwMXiHjA4PuEr4URt3W8Ab4 uoueq8rX8YnnOWkteIfQLQV9LYUcALk7tZwRboV2mg1/pNM2vQefWH3s5o0EsFt+ TwMOu5AYDZi3GhARgrxfbMRmmBqBi3GERorjbFjDHgXcGb6eEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR12Ut9dIvMgh9NYUKZM1hsO/d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGM0ZjYyMTgtYmIzZi0z NDdlLWE3ZDEtYmZhNTZmNDlkODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjiObvaXhPweC4ak0pKm1aFs2BANQzP1lLks7X4X/sG+HKxuEo3p5BL qQR3KM4i1LeEUhMA4zVVxnlkm3ZKTByWSK2dTlvJGb0Cn+5XrWn0Y9Q2MtTbY1JH MUdMqhodKQa4EThAJLFDojJnzuCBha47n4O1nhc1FNo4Wu+cPuaWc2XFBdtSVR+q QlifQwTc3eBaU1n7NKZc6FkjmiCk8j1qiAjTfCi5pGlx+7AQLF7psONBMn5lwDVA JaEJRqyuQ3RP4REowt3DokaEhR4sTuOTSDeIXCv7lQDtVTXtU7CuZi1VNJRb3mjh 3bYmgq1slT0TFXS+LIBZEoMq7nZQsVg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:20:04 2026 by rpki-client