$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa File: 1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa (raw, json) Hash identifier: zKC2lgg7GxPRc1Kn6BMyYvLbp4wuC+xZYAteNCJpwHU= Subject key identifier: D9:30:17:B2:0E:D6:AD:DB:BF:85:ED:19:72:E2:B7:E0:51:40:10:2D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A540FF6802A2F3A866A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:54:0f:f6:80:2a:2f:3a:86:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=96ef607e-e12a-4c3e-a2e9-c5e7639a4229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:3d:9f:83:1e:a6:6c:ea:e8:be:45:42:e8: 62:76:49:e8:ec:98:90:a2:5c:d7:d6:35:83:6a:6f: dd:a5:26:e0:5e:05:fb:5b:77:d5:87:33:34:82:9b: 76:3c:55:03:bb:b0:7f:a6:77:6a:05:84:a4:99:1a: e6:60:1a:fe:17:ca:b3:8b:68:59:05:cc:1c:8b:15: ee:95:9b:c9:9e:f3:39:e0:28:70:9a:1b:e2:44:6d: fb:c3:ec:c5:c9:53:0c:a0:79:89:10:c4:f6:f1:12: c6:bc:54:16:ad:0d:69:01:28:1e:a5:05:57:29:1a: ba:cf:92:d8:0c:60:6b:10:3e:85:51:4c:d7:7a:d8: 81:32:15:d7:90:59:b8:20:f6:d9:e8:72:90:ed:b6: e6:86:ae:64:8e:fb:27:3c:74:a8:36:2d:37:7a:18: e2:93:26:40:d9:25:49:12:93:f7:62:0d:fa:39:0d: e9:95:20:fd:be:25:08:ee:e6:91:f6:58:48:b0:ad: 1f:d2:c6:20:02:f1:5f:9a:e7:9f:3f:35:cc:de:55: e4:78:f5:35:a9:82:fe:b9:02:8b:08:5b:18:49:e1: 34:6b:e4:d9:a4:9d:20:4d:c6:05:44:f1:96:4a:63: 07:6d:f5:8c:b7:81:c3:0c:75:3a:fd:f7:21:dc:1f: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:30:17:B2:0E:D6:AD:DB:BF:85:ED:19:72:E2:B7:E0:51:40:10:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1fa39f2b-80bf-3e3d-8aa3-630f1820c835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d4:a8:34:0e:a2:29:ca:45:d2:58:ce:8a:7b:d2:7f:40:77: 44:ff:18:42:6d:36:e3:79:30:59:e7:39:42:c6:bb:c6:08:4c: 1d:85:97:21:c4:f7:f8:7b:85:ca:f3:f0:79:ee:39:b2:78:05: 3b:d1:ad:d3:92:06:3a:53:bb:99:7d:8e:a0:9d:06:ac:96:0b: 01:f6:cb:73:63:93:6e:f9:e5:1d:95:95:de:8a:df:b8:e9:e8: 65:03:e1:17:3b:18:69:91:3d:ff:e5:68:eb:67:0f:c9:85:11: 59:b2:3d:b8:a8:13:2b:53:0b:2a:ae:4f:4d:de:03:2f:ab:77: d9:6d:58:fc:38:07:9b:bf:14:e0:c4:a0:2a:bd:2f:2d:f7:1b: 05:66:c0:4f:b5:c4:56:ae:f3:f0:43:d8:0b:93:b7:fc:54:34: 4f:b7:be:c2:47:b4:8c:45:9f:c0:80:ce:d2:e2:c5:98:0f:db: 8f:74:45:0b:1d:29:d4:50:58:6a:21:2c:fa:d6:a8:c3:3d:89: 3c:b5:d7:38:d1:2f:82:6e:0b:08:74:e0:bb:af:24:8e:f8:34: dd:99:9a:70:39:f6:64:13:b4:06:ad:f9:bd:db:f1:75:8b:be: 3a:34:51:ff:a8:21:86:e2:c3:34:62:fd:3c:ba:71:c0:ef:c9: 54:b0:b6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelQP9oAqLzqGagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTZlZjYwN2UtZTEyYS00YzNlLWEyZTktYzVlNzYzOWE0MjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdQ9n4Mepmzq6L5FQuhidkno7JiQolzX1jWD am/dpSbgXgX7W3fVhzM0gpt2PFUDu7B/pndqBYSkmRrmYBr+F8qzi2hZBcwcixXu lZvJnvM54ChwmhviRG37w+zFyVMMoHmJEMT28RLGvFQWrQ1pASgepQVXKRq6z5LY DGBrED6FUUzXetiBMhXXkFm4IPbZ6HKQ7bbmhq5kjvsnPHSoNi03ehjikyZA2SVJ EpP3Yg36OQ3plSD9viUI7uaR9lhIsK0f0sYgAvFfmuefPzXM3lXkePU1qYL+uQKL CFsYSeE0a+TZpJ0gTcYFRPGWSmMHbfWMt4HDDHU6/fch3B9m6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkwF7IO1q3bv4XtGXLit+BRQBAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWZhMzlmMmItODBiZi0z ZTNkLThhYTMtNjMwZjE4MjBjODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjUqDQOoinKRdJYzop70n9Ad0T/GEJtNuN5MFnnOULGu8YITB2FlyHE 9/h7hcrz8HnuObJ4BTvRrdOSBjpTu5l9jqCdBqyWCwH2y3Njk2755R2Vld6K37jp 6GUD4Rc7GGmRPf/laOtnD8mFEVmyPbioEytTCyquT03eAy+rd9ltWPw4B5u/FODE oCq9Ly33GwVmwE+1xFau8/BD2AuTt/xUNE+3vsJHtIxFn8CAztLixZgP2490RQsd KdRQWGohLPrWqMM9iTy11zjRL4JuCwh04LuvJI74NN2ZmnA59mQTtAat+b3b8XWL vjo0Uf+oIYbiwzRi/Ty6ccDvyVSwtuw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:50 2026 by rpki-client