$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa File: 157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa (raw, json) Hash identifier: ZsAhIZgL9OveEouh8hUUy6RhPOnKtraChzYZDR85qDo= Subject key identifier: 2E:AF:74:AD:DC:AE:A8:C7:0D:A4:5D:FB:D5:6D:46:B2:8C:18:4F:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2B60096A4360999A2500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2b:60:09:6a:43:60:99:9a:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b1f5872e-4d0e-4610-882b-6af4ca2d2239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:33:20:2d:8a:8e:0c:5e:f4:9d:e3:37:78: 13:59:a3:ba:35:01:3f:dd:bc:5c:ce:a7:92:b9:8d: 41:b6:5c:c1:d1:34:49:e9:c4:5e:87:4b:d7:83:42: db:3e:d1:90:b0:46:09:29:f9:6b:2a:2b:a0:89:3c: e9:41:4e:ae:ef:bf:f5:17:d2:59:92:95:99:77:c4: eb:f7:bb:0f:4a:65:34:22:6d:5d:f9:9e:be:2c:2c: df:62:e0:81:61:ca:4b:04:69:9b:a7:87:71:03:55: 1b:e8:4e:84:7b:17:90:28:a8:fc:c3:58:fa:ab:eb: a8:7f:08:1e:d8:5b:82:9e:72:78:f9:db:ae:c7:06: f7:80:25:84:5f:ed:8d:65:fb:1a:b3:37:f7:71:72: 3f:04:ce:5a:d9:58:fe:c3:f2:21:86:e0:dd:1b:1d: ef:bb:6c:bf:7e:92:48:b9:7e:c0:d6:81:5d:60:b1: 6c:67:c9:92:be:45:3e:c5:f9:54:69:f5:3d:bd:87: 76:e1:f1:89:82:77:3f:fa:13:54:e1:96:27:cd:dc: f6:43:d6:df:fb:0f:b8:ea:3e:19:ee:20:9f:6c:89: ea:b1:bd:be:26:d8:5d:c5:f8:9a:96:ce:91:f6:a4: d3:74:6c:51:72:5a:da:33:32:e1:8d:f4:ca:72:bb: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AF:74:AD:DC:AE:A8:C7:0D:A4:5D:FB:D5:6D:46:B2:8C:18:4F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8a:e1:33:62:75:30:ed:31:9e:97:41:18:82:04:35:23:e4: 0d:a9:df:c6:d4:d9:87:92:70:23:79:8a:eb:74:86:e5:6f:2f: 11:d5:cd:ca:7d:64:83:62:3f:f8:4f:73:f8:42:ac:61:67:e6: df:87:c4:d9:e3:52:f3:b0:c4:56:4a:59:ff:11:ae:fd:a1:eb: cc:1c:8d:09:8c:e0:06:4d:d5:b3:c6:65:9e:c8:01:60:16:b6: 3b:64:e3:1c:e7:8b:e2:be:f1:64:24:6d:13:16:94:a8:87:64: 97:09:ce:e5:88:ac:84:1c:50:fc:46:0b:17:87:47:c1:ca:48: 40:fe:d5:74:ef:13:2e:11:da:b6:38:da:92:53:ba:25:26:2f: 37:fb:f4:85:ca:31:e6:e1:b1:fb:04:c8:5b:52:6b:20:e1:4f: f4:62:1b:a3:4a:80:58:c1:08:6a:8c:12:d2:80:2a:3c:77:11: d2:f8:69:7b:13:52:3e:b2:6f:01:df:c1:39:7d:88:4a:e1:2f: a0:39:25:5d:9c:b1:a6:6c:e6:8f:95:c3:ad:0c:72:eb:7f:30: a9:d5:b5:c2:6c:9e:16:21:b6:09:b8:27:51:83:23:f6:aa:67: 3e:3d:97:35:dd:83:c1:ae:4d:cc:e7:2d:18:19:71:a4:04:7d: df:f4:b2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeitgCWpDYJmaJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjFmNTg3MmUtNGQwZS00NjEwLTg4MmItNmFmNGNhMmQyMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg4zIC2Kjgxe9J3jN3gTWaO6NQE/3bxczqeS uY1BtlzB0TRJ6cReh0vXg0LbPtGQsEYJKflrKiugiTzpQU6u77/1F9JZkpWZd8Tr 97sPSmU0Im1d+Z6+LCzfYuCBYcpLBGmbp4dxA1Ub6E6EexeQKKj8w1j6q+uofwge 2FuCnnJ4+duuxwb3gCWEX+2NZfsaszf3cXI/BM5a2Vj+w/IhhuDdGx3vu2y/fpJI uX7A1oFdYLFsZ8mSvkU+xflUafU9vYd24fGJgnc/+hNU4ZYnzdz2Q9bf+w+46j4Z 7iCfbInqsb2+Jthdxfials6R9qTTdGxRclraMzLhjfTKcrvSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6vdK3crqjHDaRd+9VtRrKMGE9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTU3ZDQ4ODMtNGNjMS0z NjU1LThiMzYtY2MwZTJhYWE0NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaK4TNidTDtMZ6XQRiCBDUj5A2p38bU2YeScCN5iut0huVvLxHVzcp9 ZINiP/hPc/hCrGFn5t+HxNnjUvOwxFZKWf8Rrv2h68wcjQmM4AZN1bPGZZ7IAWAW tjtk4xzni+K+8WQkbRMWlKiHZJcJzuWIrIQcUPxGCxeHR8HKSED+1XTvEy4R2rY4 2pJTuiUmLzf79IXKMebhsfsEyFtSayDhT/RiG6NKgFjBCGqMEtKAKjx3EdL4aXsT Uj6ybwHfwTl9iErhL6A5JV2csaZs5o+Vw60Mcut/MKnVtcJsnhYhtgm4J1GDI/aq Zz49lzXdg8GuTcznLRgZcaQEfd/0stM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:46 2026 by rpki-client