$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa File: 17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa (raw, json) Hash identifier: Uk2AS0gkNf4mvWtAHDVWRrihsdkquEH6YvzV7h7nJqk= Subject key identifier: B1:1F:CA:27:0A:89:E4:EE:8D:7A:28:FE:C7:14:6D:8E:DF:4C:70:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A275DCDF3E6EF5596C4E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:27:5d:cd:f3:e6:ef:55:96:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4ca70fe8-a4bd-40cc-9bef-43d221984e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:65:92:7c:cd:f4:44:4d:1c:02:74:95:7b: 46:ae:d8:37:4b:f6:b3:25:24:f0:01:d9:5e:44:89: a1:8e:8f:ec:9b:25:76:26:23:24:b1:15:83:b0:a7: 0e:96:2d:87:c7:5f:73:9b:2f:95:ab:ee:ad:6f:7e: a4:8a:72:c1:2b:07:d9:07:cd:cc:8f:4a:b1:12:8c: 46:6d:5d:6c:57:eb:51:8b:13:48:64:2a:a7:64:69: e2:96:1b:f5:4b:0d:38:2d:c4:8d:50:53:b4:ff:25: 07:25:3b:1f:0d:e5:97:21:b1:f9:c3:74:97:53:6a: 32:7e:27:2e:a2:2c:59:27:ee:62:d3:63:91:ac:da: 9d:df:65:db:59:d3:b3:c0:a4:f4:e7:41:15:88:a8: 85:7c:6c:aa:c9:fd:39:f2:ab:63:bd:ce:9b:fa:82: a2:ec:2e:07:29:9b:92:8b:32:e7:cd:34:8b:29:6e: bb:43:c1:8a:75:2e:70:6a:fd:e3:f3:07:38:67:0c: fc:d2:ef:f3:c4:57:ff:a7:67:90:0b:19:ab:dc:70: 3e:2f:78:2e:16:b7:10:15:27:66:2d:a6:04:a9:40: 93:16:7f:81:ca:9d:66:72:d4:6a:6c:a0:d2:a0:8a: fa:7a:89:51:ff:2f:b9:d1:ec:ce:c1:0a:bb:8d:73: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:CA:27:0A:89:E4:EE:8D:7A:28:FE:C7:14:6D:8E:DF:4C:70:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8e:2b:d9:b3:1f:6a:6f:e1:79:8a:bc:18:36:39:ac:ca:02: f0:f7:3f:43:71:1f:fd:25:cd:de:70:4b:a8:9c:c5:36:57:b5: fd:7c:29:50:67:91:55:f4:5e:47:dc:23:e1:ea:53:d5:a9:dc: e3:31:68:26:1f:d0:9d:e6:aa:8b:d6:f5:e3:15:a6:95:f8:f7: 4d:df:3c:f0:5d:07:b5:ed:69:70:7c:b4:8b:bd:96:01:c2:da: 5f:18:22:67:b8:5a:6e:d7:bd:47:05:f5:f4:73:c9:12:9a:ef: ec:4c:24:c2:3f:47:3b:70:54:c3:8b:bd:c0:bd:06:c1:07:40: ba:5f:6c:2f:a3:f8:a1:90:49:85:5d:62:b3:6c:1c:1c:fc:df: 22:7c:6a:1b:f0:2d:4e:2d:0e:ad:7a:cf:a4:2e:ea:a1:c6:7a: 2e:c2:26:52:a2:b8:20:ec:ef:c6:59:f5:b9:34:79:63:e9:ed: 43:56:f3:eb:c7:3a:93:4f:fc:ac:7d:89:1b:8b:88:34:1e:5d: 4f:cb:46:1e:27:17:91:67:a6:21:47:22:23:28:dc:b3:8c:e8: 32:22:01:3f:05:b5:a7:10:c9:23:e5:f0:6b:7d:6d:cb:1a:21: c5:77:03:47:10:96:29:c3:a5:8f:ed:be:e4:6f:ad:f7:5b:c9: 0f:d0:0d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiddzfPm71WWxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGNhNzBmZTgtYTRiZC00MGNjLTliZWYtNDNkMjIxOTg0ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIhlknzN9ERNHAJ0lXtGrtg3S/azJSTwAdle RImhjo/smyV2JiMksRWDsKcOli2Hx19zmy+Vq+6tb36kinLBKwfZB83Mj0qxEoxG bV1sV+tRixNIZCqnZGnilhv1Sw04LcSNUFO0/yUHJTsfDeWXIbH5w3SXU2oyficu oixZJ+5i02ORrNqd32XbWdOzwKT050EViKiFfGyqyf058qtjvc6b+oKi7C4HKZuS izLnzTSLKW67Q8GKdS5wav3j8wc4Zwz80u/zxFf/p2eQCxmr3HA+L3guFrcQFSdm LaYEqUCTFn+Byp1mctRqbKDSoIr6eolR/y+50ezOwQq7jXMX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEfyicKieTujXoo/scUbY7fTHBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTdkZGIxNWYtMmMyZi0z MDg2LThjZWItOWQzMGRkMWRhMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGOK9mzH2pv4XmKvBg2OazKAvD3P0NxH/0lzd5wS6icxTZXtf18KVBn kVX0XkfcI+HqU9Wp3OMxaCYf0J3mqovW9eMVppX4903fPPBdB7XtaXB8tIu9lgHC 2l8YIme4Wm7XvUcF9fRzyRKa7+xMJMI/RztwVMOLvcC9BsEHQLpfbC+j+KGQSYVd YrNsHBz83yJ8ahvwLU4tDq16z6Qu6qHGei7CJlKiuCDs78ZZ9bk0eWPp7UNW8+vH OpNP/Kx9iRuLiDQeXU/LRh4nF5FnpiFHIiMo3LOM6DIiAT8FtacQySPl8Gt9bcsa IcV3A0cQlinDpY/tvuRvrfdbyQ/QDW8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:00 2026 by rpki-client