$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa File: 957476a5-697f-35e9-93fb-d2a0b6428b90.roa (raw, json) Hash identifier: FG5JB2PgBqZt+1c0YU+juBy5HwSWiBRpvSR3Ub2Xapo= Subject key identifier: 65:16:C0:68:DC:C8:F3:E7:5F:A2:11:0C:12:88:7A:E0:4C:88:E1:E5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972D9884978ED696C3FD000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 161.232.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d9:88:49:78:ed:69:6c:3f:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=70468016-955b-4e4b-a65c-80d8fb6480c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:87:91:8f:0a:61:a6:0f:09:8e:04:6d:8e: 20:11:a5:58:4e:63:3e:70:97:b9:d3:e4:01:b1:f0: 41:01:3b:c7:95:2d:10:3e:d7:6f:45:af:5b:1e:ee: fb:ed:f9:4b:10:ee:ed:9c:74:36:33:f1:6d:11:57: af:55:5d:58:c1:79:7b:71:56:5d:48:0b:16:c4:92: 08:60:2a:d9:27:e0:bf:3f:8e:04:bb:ea:99:87:5c: da:d2:62:ea:0c:9b:c7:fc:10:7e:34:ec:38:d1:d4: 3e:e9:89:45:ca:b0:59:65:66:15:0c:0e:e6:a4:ae: 24:f0:8e:dc:72:92:99:f5:16:42:f2:00:32:44:e6: e1:8e:4b:2b:dd:73:11:e3:f4:35:ee:6a:cf:d0:9a: b3:30:75:c8:1f:1a:8d:11:a9:ba:6c:de:81:a6:34: 80:93:e9:93:29:b8:69:be:2f:02:c9:d5:e2:ef:0c: 3f:9b:02:91:e4:58:22:76:5d:e9:4a:75:0d:a1:1d: 10:bf:a7:8b:1d:84:0b:7c:07:8a:31:8b:bd:fe:cb: 4d:f6:20:9b:43:98:f9:2d:d5:39:c3:1e:3c:0b:63: b1:41:38:fa:07:54:7c:38:98:69:2e:ae:ff:72:67: 5e:b2:c7:85:02:95:8b:96:88:3b:f0:09:bc:e1:c8: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:C0:68:DC:C8:F3:E7:5F:A2:11:0C:12:88:7A:E0:4C:88:E1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/957476a5-697f-35e9-93fb-d2a0b6428b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e8:5f:d1:f2:7e:1e:12:be:66:40:ac:29:c2:7e:1e:59:a0: e6:eb:9b:50:ea:4b:a9:24:29:3a:a8:b9:ba:2f:8f:ac:d2:91: 35:07:5f:70:01:88:d0:d2:0c:84:94:99:fe:fa:e8:5f:33:2e: 32:24:99:a8:cb:85:d7:50:12:6f:fe:43:99:2b:08:62:f3:4e: 75:df:1e:72:83:b7:d9:3b:2d:55:0b:f5:a6:54:78:28:14:29: 10:3f:04:09:c8:be:60:51:cd:b7:ad:ec:4d:1d:59:0d:74:21: 19:ec:42:77:36:87:11:39:e7:b1:b3:c8:b4:bc:b4:69:8b:ce: 8a:ee:53:51:27:73:d4:2f:e1:35:28:f5:62:9b:29:cf:a2:3b: 22:73:a3:2b:35:5a:78:5e:1b:5f:9d:eb:1a:f1:95:51:87:ae: a7:b9:8b:ba:9e:68:2c:3a:0d:eb:3e:a4:5b:2c:fb:07:2d:90: 98:41:13:3f:98:0b:1c:c9:2b:91:78:7e:cd:81:15:f5:b6:60: f5:72:90:bf:ed:f9:b5:cb:5d:30:03:57:9e:2d:d8:6d:28:69: 14:7a:41:2c:47:67:4d:42:79:49:5e:35:e4:c2:94:12:25:ff: 9f:a1:20:e5:4d:75:2d:52:52:16:fb:6b:b2:c0:a6:20:bf:ef: 6a:8b:03:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctmISXjtaWw/0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzA0NjgwMTYtOTU1Yi00ZTRiLWE2NWMtODBkOGZiNjQ4MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2HkY8KYaYPCY4EbY4gEaVYTmM+cJe50+QB sfBBATvHlS0QPtdvRa9bHu777flLEO7tnHQ2M/FtEVevVV1YwXl7cVZdSAsWxJII YCrZJ+C/P44Eu+qZh1za0mLqDJvH/BB+NOw40dQ+6YlFyrBZZWYVDA7mpK4k8I7c cpKZ9RZC8gAyRObhjksr3XMR4/Q17mrP0JqzMHXIHxqNEam6bN6BpjSAk+mTKbhp vi8CydXi7ww/mwKR5Fgidl3pSnUNoR0Qv6eLHYQLfAeKMYu9/stN9iCbQ5j5LdU5 wx48C2OxQTj6B1R8OJhpLq7/cmdesseFApWLlog78Am84ciquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUWwGjcyPPnX6IRDBKIeuBMiOHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3NDc2YTUtNjk3Zi0z NWU5LTkzZmItZDJhMGI2NDI4YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEToX9Hyfh4SvmZArCnCfh5ZoObrm1DqS6kkKTqoubovj6zSkTUHX3AB iNDSDISUmf766F8zLjIkmajLhddQEm/+Q5krCGLzTnXfHnKDt9k7LVUL9aZUeCgU KRA/BAnIvmBRzbet7E0dWQ10IRnsQnc2hxE557GzyLS8tGmLzoruU1Enc9Qv4TUo 9WKbKc+iOyJzoys1WnheG1+d6xrxlVGHrqe5i7qeaCw6Des+pFss+wctkJhBEz+Y CxzJK5F4fs2BFfW2YPVykL/t+bXLXTADV54t2G0oaRR6QSxHZ01CeUleNeTClBIl /5+hIOVNdS1SUhb7a7LApiC/72qLAx0= -----END CERTIFICATE-----Generated at Fri Sep 25 18:29:10 2026 by rpki-client