$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa File: 2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa (raw, json) Hash identifier: 5ehSmWe5ANPPATuJVS/9GyWO/jo8UQJUXln9fHTm43k= Subject key identifier: 80:CA:36:0C:49:3B:CB:15:FD:74:58:E4:CA:4E:CC:B1:02:F0:03:ED Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A502A81B15825FCD5B300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:50:2a:81:b1:58:25:fc:d5:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8fed3a05-2fa2-4fba-9116-91880f0855f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:fc:b1:22:3a:73:2c:7e:d6:2b:d0:7f:3e: a1:a2:4a:52:60:15:5f:bc:4c:a3:ce:be:f9:d1:0c: d6:5a:e7:38:12:86:55:0b:db:f4:57:da:d7:ad:37: 10:48:b6:1d:0b:f3:27:db:3a:9a:1c:7c:e3:48:a7: ba:fe:96:af:59:a4:61:97:7f:c8:61:e3:6b:f8:d6: 2a:df:da:0a:ca:63:3c:71:74:5f:3c:5f:f3:9d:a0: da:e6:90:2f:ae:33:dc:d1:3c:72:cc:de:fe:99:33: d4:6b:18:d6:4b:3c:0e:de:b3:91:9c:4b:82:72:9e: ba:fd:01:e3:1a:98:bc:2d:88:21:90:5d:79:5e:0c: 1c:0a:9e:a2:2b:49:2f:e8:cf:4a:49:72:79:f5:7a: 41:54:78:2d:94:30:c5:10:22:bb:81:15:1d:ec:b9: d7:c6:40:9d:61:8b:ad:db:87:99:c8:4e:63:bd:c6: 58:0a:c4:75:ee:d3:e0:d4:af:8b:7d:9f:70:33:25: 35:35:b4:cb:87:6b:e4:27:96:ed:6b:ac:a9:d6:a7: 65:d7:71:f1:d2:97:e1:e4:1d:25:54:a3:90:fd:d9: 15:46:12:b7:46:7b:0e:30:1a:cc:37:98:41:37:84: ee:b8:96:5b:ed:72:42:07:90:5f:79:6a:1e:d3:6f: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CA:36:0C:49:3B:CB:15:FD:74:58:E4:CA:4E:CC:B1:02:F0:03:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:01:39:dd:9e:9a:1f:d7:e4:37:1a:17:4d:ee:c6:a3:89: f0:dc:df:5c:ee:06:53:be:83:34:83:9f:9c:10:01:1b:d8:3c: 95:2b:af:bc:6c:98:44:b8:94:95:5b:a7:39:0a:69:59:57:1d: ac:1e:eb:1f:a9:a8:77:b1:2f:2b:74:40:5e:ea:ed:b9:25:8f: 61:df:ce:a7:27:54:2e:78:f7:f5:77:0f:db:d9:bf:fe:6a:fa: e3:ff:65:16:17:84:6e:30:bb:c0:84:81:45:6e:1a:72:d5:a2: e5:01:04:42:51:d3:10:dd:fe:85:11:04:7a:84:91:73:05:97: 5c:f9:53:b2:f5:4f:e0:9c:65:5b:5e:fa:46:3d:a4:38:6e:a6: 01:10:75:bd:9a:ec:8c:81:be:71:94:87:25:6a:85:d7:cf:ce: 2c:9c:c2:22:c0:59:76:4a:42:7c:14:f7:f6:a8:79:5b:f2:15: 98:49:ca:51:d9:88:ee:69:aa:3c:d9:50:0a:3b:e2:98:e5:ab: 6c:b4:8d:c2:7b:3c:e2:01:28:99:aa:cd:f7:b0:c3:5a:99:26: ee:13:56:06:48:d7:55:94:eb:0e:9f:9e:25:32:28:66:44:b0: 5c:c9:3c:d4:99:7c:95:cf:99:13:73:26:5d:56:0a:75:09:a0: 73:05:bc:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelAqgbFYJfzVswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGZlZDNhMDUtMmZhMi00ZmJhLTkxMTYtOTE4ODBmMDg1NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvn8sSI6cyx+1ivQfz6hokpSYBVfvEyjzr75 0QzWWuc4EoZVC9v0V9rXrTcQSLYdC/Mn2zqaHHzjSKe6/pavWaRhl3/IYeNr+NYq 39oKymM8cXRfPF/znaDa5pAvrjPc0TxyzN7+mTPUaxjWSzwO3rORnEuCcp66/QHj Gpi8LYghkF15XgwcCp6iK0kv6M9KSXJ59XpBVHgtlDDFECK7gRUd7LnXxkCdYYut 24eZyE5jvcZYCsR17tPg1K+LfZ9wMyU1NbTLh2vkJ5bta6yp1qdl13Hx0pfh5B0l VKOQ/dkVRhK3RnsOMBrMN5hBN4TuuJZb7XJCB5BfeWoe02/AVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDKNgxJO8sV/XRY5MpOzLEC8APtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmUzNWIzMTUtNmMzMS0z NWQ1LThiMDMtY2VmM2ZlMGY2NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXATndnpof1+Q3GhdN7sajifDc31zuBlO+gzSDn5wQARvYPJUrr7xs mES4lJVbpzkKaVlXHawe6x+pqHexLyt0QF7q7bklj2HfzqcnVC549/V3D9vZv/5q +uP/ZRYXhG4wu8CEgUVuGnLVouUBBEJR0xDd/oURBHqEkXMFl1z5U7L1T+CcZVte +kY9pDhupgEQdb2a7IyBvnGUhyVqhdfPziycwiLAWXZKQnwU9/aoeVvyFZhJylHZ iO5pqjzZUAo74pjlq2y0jcJ7POIBKJmqzfeww1qZJu4TVgZI11WU6w6fniUyKGZE sFzJPNSZfJXPmRNzJl1WCnUJoHMFvIc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:46 2026 by rpki-client