$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa File: 117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa (raw, json) Hash identifier: UYoFeQhLCqnXL7boE7TwyS8VzVHnDlneFhl53xryXfk= Subject key identifier: 80:FF:92:4C:FB:1C:96:7A:4A:95:55:D8:19:8E:FD:B1:62:2A:DB:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4D867F98AC56C1B3BC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4d:86:7f:98:ac:56:c1:b3:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5fa943bc-4983-42b0-a57f-ecccfd3a4472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:7b:10:72:af:e8:ab:0a:78:7d:4c:eb:5a: 89:40:af:14:d2:da:fa:37:32:b0:0e:ff:9e:f4:4a: 0c:cb:f3:cf:b1:0c:30:95:16:ad:77:6e:12:6f:8f: a5:4b:c8:78:67:7d:cc:3e:5f:d6:3e:53:87:88:27: 9c:ff:97:8d:94:d3:07:46:80:6b:78:8e:43:07:9d: db:08:73:77:b8:ab:75:5e:82:c7:c9:59:26:ac:2b: 08:73:1c:99:ad:de:1a:b5:04:cb:dc:95:eb:69:a4: f1:cc:f2:aa:27:7e:1d:75:49:64:d1:3f:d4:64:dd: 18:13:b4:7c:19:d7:26:7d:1f:51:8f:da:f9:9e:05: dd:c6:f9:b3:cd:4e:ab:19:41:44:92:f4:9c:a8:0f: f8:e2:47:ca:45:ff:a7:d3:fd:50:1e:f6:41:78:8d: 84:e3:fc:9f:8c:a9:08:db:9d:74:c5:7c:0d:59:4c: 00:a9:53:1e:13:f3:83:6e:34:70:ab:54:58:d2:a5: 14:54:0a:a2:f2:af:8e:f3:4f:0e:b7:ef:7a:5d:ed: 50:09:27:86:7e:fc:81:4a:97:61:50:86:a7:60:3c: 83:68:16:de:5c:14:f5:ed:d1:2f:0e:9f:68:3f:e8: 67:86:be:e0:99:02:e3:34:12:8f:00:7a:3e:61:c8: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:92:4C:FB:1C:96:7A:4A:95:55:D8:19:8E:FD:B1:62:2A:DB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:ab:a0:53:f3:de:59:4c:19:20:34:f3:22:46:40:0c:7c: 02:bc:8e:6a:6a:c9:47:59:37:07:b5:10:4a:45:42:56:ba:c1: e8:98:84:2a:48:6f:20:55:17:8e:29:de:7c:8e:5d:d3:72:cb: 05:69:1c:24:27:1b:dd:48:50:d3:11:51:37:69:36:11:dc:50: 83:e2:77:ab:f3:18:d6:ad:62:1e:87:d6:ce:79:a3:a0:07:e6: dc:82:5c:91:d1:cd:81:d9:2d:f9:80:09:5d:33:32:48:2c:bd: 27:59:78:3c:db:fd:06:a2:32:77:3d:7f:7c:4f:2c:52:f6:96: 61:9d:93:11:60:fc:49:40:3b:70:9a:0b:94:68:d1:7e:5e:4c: 8b:8e:72:67:66:99:f0:9b:ad:22:c6:e3:77:67:74:62:55:8f: 0e:9e:db:6b:c9:9e:20:54:42:91:14:0c:ca:4d:80:f7:82:f8: 2d:f5:b7:21:24:f3:63:a7:c0:ad:3b:18:a5:45:f3:ef:6b:38: 90:28:d1:7c:b1:a4:22:85:74:4e:1b:71:03:8c:fa:bb:7c:f4: a5:ce:4b:bf:7a:60:fe:f8:22:f9:89:d7:22:f4:69:ff:0e:0d: 34:40:71:09:40:c6:d2:cf:d5:1b:4a:8b:25:0f:52:d1:2c:66: da:b9:44:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jek2Gf5isVsGzvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWZhOTQzYmMtNDk4My00MmIwLWE1N2YtZWNjY2ZkM2E0NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJ7EHKv6KsKeH1M61qJQK8U0tr6NzKwDv+e 9EoMy/PPsQwwlRatd24Sb4+lS8h4Z33MPl/WPlOHiCec/5eNlNMHRoBreI5DB53b CHN3uKt1XoLHyVkmrCsIcxyZrd4atQTL3JXraaTxzPKqJ34ddUlk0T/UZN0YE7R8 GdcmfR9Rj9r5ngXdxvmzzU6rGUFEkvScqA/44kfKRf+n0/1QHvZBeI2E4/yfjKkI 2510xXwNWUwAqVMeE/ODbjRwq1RY0qUUVAqi8q+O808Ot+96Xe1QCSeGfvyBSpdh UIanYDyDaBbeXBT17dEvDp9oP+hnhr7gmQLjNBKPAHo+Ycg2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID/kkz7HJZ6SpVV2BmO/bFiKttHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTE3YTg0N2ItNTgzNS0z Y2VjLWJkMGItMWE5NWE1YzRjNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSq6BT895ZTBkgNPMiRkAMfAK8jmpqyUdZNwe1EEpFQla6weiYhCpI byBVF44p3nyOXdNyywVpHCQnG91IUNMRUTdpNhHcUIPid6vzGNatYh6H1s55o6AH 5tyCXJHRzYHZLfmACV0zMkgsvSdZeDzb/QaiMnc9f3xPLFL2lmGdkxFg/ElAO3Ca C5Ro0X5eTIuOcmdmmfCbrSLG43dndGJVjw6e22vJniBUQpEUDMpNgPeC+C31tyEk 82OnwK07GKVF8+9rOJAo0XyxpCKFdE4bcQOM+rt89KXOS796YP74IvmJ1yL0af8O DTRAcQlAxtLP1RtKiyUPUtEsZtq5RD8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:34 2026 by rpki-client