$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa File: 3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa (raw, json) Hash identifier: coQVImHJLfKdHC395xHehhSdQcaqOdUnAP5pkQprE+4= Subject key identifier: 92:9A:E1:F6:6F:C5:79:F9:C6:85:6E:9B:C4:68:37:5C:9A:5E:93:27 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A478850EE187AC1CCE420 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:47:88:50:ee:18:7a:c1:cc:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0d022cd1-c82b-41d9-8964-aff7e3c72099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:96:ee:6b:26:08:d9:11:38:ee:0a:f7:78: 77:58:16:da:15:14:ce:4e:b1:ff:ad:b6:2e:49:1f: 24:26:23:1b:b7:09:b3:ab:3a:1a:00:ca:32:a6:5e: c0:ba:b8:8f:e4:97:03:9f:d3:7b:7a:7e:d3:ba:ea: 0e:dd:8c:2a:10:73:ec:20:95:2e:b6:bf:cd:fe:01: 43:50:cb:fc:65:3f:3c:cf:06:25:3a:bb:be:df:57: cf:f6:f3:33:b6:7f:a4:ec:ac:0b:47:4b:1d:97:be: 92:44:aa:ce:c7:3a:5c:e1:a5:fc:99:44:9e:b0:37: 25:18:f1:da:f5:73:a6:35:7a:fa:db:a7:5a:a4:d3: b1:2d:ec:38:72:58:57:d8:b8:2a:46:ab:66:c9:96: 2a:6f:c4:59:16:59:9a:e6:c7:11:c9:fe:82:a5:cc: 67:24:b7:76:d0:f2:d8:ef:99:a4:2a:6b:ef:d4:20: 5a:e4:9c:14:4b:7e:54:e5:ee:ee:87:32:2c:97:1f: 0a:d8:3e:1a:56:92:e5:56:75:79:d3:ea:86:03:d3: 66:75:36:75:9e:52:37:34:05:40:fd:e1:72:91:8c: f8:2b:52:4c:35:34:12:0e:88:15:74:0b:9c:6a:d3: 95:f8:d7:85:02:fc:e9:98:d4:35:41:40:22:50:7a: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:E1:F6:6F:C5:79:F9:C6:85:6E:9B:C4:68:37:5C:9A:5E:93:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3fba5f67-fc7d-305d-b4ef-bb74add96e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:d8:f0:ac:14:db:5a:8a:2e:c6:96:b2:14:dc:1d:14:d2:28: 9d:30:73:e6:6f:59:aa:d3:45:59:a7:55:b8:9c:09:6d:e9:23: 8c:0a:a2:a7:bc:51:a5:ed:a8:51:52:1d:d5:96:a6:18:11:74: 78:49:5c:42:d9:80:a3:47:28:10:e8:67:c5:a3:6e:df:cc:92: 08:fb:75:5b:e5:3b:a5:ef:ea:ed:d3:fa:27:03:f4:ad:96:94: f5:d4:01:bb:83:a0:9b:b5:0c:44:dc:18:d5:18:77:19:16:0d: 52:02:9b:91:4f:a8:e3:20:f5:3c:2a:73:21:27:c9:74:ed:c9: c4:6f:a3:93:f8:4c:3b:77:d3:b8:ee:0e:26:14:fc:ff:af:51: 9e:fd:09:f9:24:59:8f:37:5a:44:27:ea:a6:60:68:39:d3:be: c8:f3:cd:7d:15:fb:a6:03:b4:51:35:c1:9c:0a:1d:34:fd:17: fa:c2:40:ce:8f:40:59:d9:f8:37:7e:ee:8d:f7:ba:c3:04:75: 13:f5:75:ae:53:87:f1:9d:ba:8b:5c:5a:3a:b6:43:9e:cc:43: e2:b8:c9:d2:8f:8b:2f:e3:7e:ca:59:33:ff:59:67:20:7d:04: f2:87:9c:9f:09:d6:b0:8a:76:62:ba:68:a6:bb:f7:2a:11:fa: 10:df:22:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekeIUO4YesHM5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MGQwMjJjZDEtYzgyYi00MWQ5LTg5NjQtYWZmN2UzYzcyMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuiW7msmCNkROO4K93h3WBbaFRTOTrH/rbYu SR8kJiMbtwmzqzoaAMoypl7AuriP5JcDn9N7en7TuuoO3YwqEHPsIJUutr/N/gFD UMv8ZT88zwYlOru+31fP9vMztn+k7KwLR0sdl76SRKrOxzpc4aX8mUSesDclGPHa 9XOmNXr626dapNOxLew4clhX2LgqRqtmyZYqb8RZFlma5scRyf6CpcxnJLd20PLY 75mkKmvv1CBa5JwUS35U5e7uhzIslx8K2D4aVpLlVnV50+qGA9NmdTZ1nlI3NAVA /eFykYz4K1JMNTQSDogVdAucatOV+NeFAvzpmNQ1QUAiUHpV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKa4fZvxXn5xoVum8RoN1yaXpMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2ZiYTVmNjctZmM3ZC0z MDVkLWI0ZWYtYmI3NGFkZDk2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDY8KwU21qKLsaWshTcHRTSKJ0wc+ZvWarTRVmnVbicCW3pI4wKoqe8 UaXtqFFSHdWWphgRdHhJXELZgKNHKBDoZ8Wjbt/Mkgj7dVvlO6Xv6u3T+icD9K2W lPXUAbuDoJu1DETcGNUYdxkWDVICm5FPqOMg9TwqcyEnyXTtycRvo5P4TDt307ju DiYU/P+vUZ79CfkkWY83WkQn6qZgaDnTvsjzzX0V+6YDtFE1wZwKHTT9F/rCQM6P QFnZ+Dd+7o33usMEdRP1da5Th/GduotcWjq2Q57MQ+K4ydKPiy/jfspZM/9ZZyB9 BPKHnJ8J1rCKdmK6aKa79yoR+hDfIqQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:30 2026 by rpki-client