$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa File: 41066e44-9ff9-372e-ad32-8f6b89307711.roa (raw, json) Hash identifier: kYZCJrz9z1C++HAdx6XWM8FZgr+ITFWVieyWcHb4JUE= Subject key identifier: 89:92:21:BA:04:DE:31:37:D7:05:2F:C6:BB:92:A5:ED:2C:C2:48:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A591063FB02508B004340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:59:10:63:fb:02:50:8b:00:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ac0f7b8d-a32e-4c68-b2fe-a79bd38416cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:4b:7e:c2:75:f9:cc:9d:71:a6:0c:64:39: 29:af:93:22:83:01:46:23:de:17:93:44:1c:e1:72: 27:69:6c:32:7d:db:76:39:23:a4:34:c5:29:19:21: 0b:66:67:fa:8b:04:14:71:60:b8:81:e5:3b:18:84: 43:be:81:e0:2a:d7:6c:89:24:7f:ae:3e:40:a1:dc: dd:32:12:a1:0a:e4:d5:3c:af:59:26:65:bb:3d:b9: 3e:1b:45:92:23:49:b3:bf:7e:4f:a2:81:b9:3b:a5: aa:1a:16:aa:19:ff:0e:8f:8d:95:3a:01:58:92:5a: ef:91:d0:f9:a1:fa:66:e8:13:3d:35:26:d6:57:43: 78:52:4e:c2:2b:21:8b:39:1d:00:1c:16:62:41:b6: 9e:3b:1f:49:bb:22:51:81:2c:49:3c:70:08:ec:e2: 0d:79:c7:10:29:5a:76:02:10:e1:a1:10:ea:a4:e2: 91:40:1f:15:c5:cd:3e:e2:3a:e4:9b:fb:27:c8:c5: c6:ee:81:da:ed:81:fe:27:1b:06:0e:55:70:81:f8: e9:6e:1c:8c:74:c3:df:12:2a:a7:a7:8f:d2:b1:8a: 0e:66:c3:74:21:0a:41:6b:fb:5c:79:3a:0d:f7:75: 5d:b7:a8:95:d0:ee:f3:91:16:ad:00:1d:80:72:f1: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:92:21:BA:04:DE:31:37:D7:05:2F:C6:BB:92:A5:ED:2C:C2:48:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ef:10:dc:b2:43:64:58:e2:a3:58:0a:0a:e7:0e:17:c0:4b: 49:b4:ff:a6:c7:46:ce:c9:cc:de:a6:43:01:75:91:95:57:ff: 71:7d:7a:9a:9b:83:d6:4a:67:57:2b:d4:61:27:a4:d1:23:55: 19:57:b6:6b:d8:b4:65:58:bc:00:cc:14:24:ee:bc:80:ca:ef: c3:af:07:cd:d6:09:09:5b:d6:2e:17:bb:8e:64:d4:8c:7a:fd: 7c:7e:d8:ca:7f:a7:43:14:c3:80:b6:06:b1:21:7d:c4:2b:7e: 1c:98:fe:89:c0:50:af:c7:65:61:fe:18:ed:a5:49:fc:98:93: 81:39:bc:ed:eb:e2:56:d2:7a:0c:d0:fd:7d:a5:f1:12:14:37: da:0d:65:b0:6c:c1:fc:cb:c6:64:54:be:ea:c9:42:e1:a3:85: 09:94:d6:be:06:be:e5:80:55:f3:b5:45:fb:a7:3e:d0:41:b8: e1:8d:85:37:c2:61:47:0d:73:b2:95:e1:16:54:a7:76:e5:3d: e3:4b:f6:b4:a2:56:ac:8a:0a:31:fb:d5:ee:db:6b:b4:2b:25: b5:e7:94:d8:2d:c7:ab:90:c7:da:57:37:bf:9f:d2:1d:f7:cf: 38:f9:6b:c8:94:6a:5c:b4:87:3e:ae:d1:e2:ea:a8:67:6f:be: 7d:7b:3e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelkQY/sCUIsAQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWMwZjdiOGQtYTMyZS00YzY4LWIyZmUtYTc5YmQzODQxNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhphLfsJ1+cydcaYMZDkpr5MigwFGI94Xk0Qc 4XInaWwyfdt2OSOkNMUpGSELZmf6iwQUcWC4geU7GIRDvoHgKtdsiSR/rj5Aodzd MhKhCuTVPK9ZJmW7Pbk+G0WSI0mzv35PooG5O6WqGhaqGf8Oj42VOgFYklrvkdD5 ofpm6BM9NSbWV0N4Uk7CKyGLOR0AHBZiQbaeOx9JuyJRgSxJPHAI7OINeccQKVp2 AhDhoRDqpOKRQB8Vxc0+4jrkm/snyMXG7oHa7YH+JxsGDlVwgfjpbhyMdMPfEiqn p4/SsYoOZsN0IQpBa/tceToN93Vdt6iV0O7zkRatAB2AcvGhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImSIboE3jE31wUvxruSpe0swkj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDEwNjZlNDQtOWZmOS0z NzJlLWFkMzItOGY2Yjg5MzA3NzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbvENyyQ2RY4qNYCgrnDhfAS0m0/6bHRs7JzN6mQwF1kZVX/3F9epqb g9ZKZ1cr1GEnpNEjVRlXtmvYtGVYvADMFCTuvIDK78OvB83WCQlb1i4Xu45k1Ix6 /Xx+2Mp/p0MUw4C2BrEhfcQrfhyY/onAUK/HZWH+GO2lSfyYk4E5vO3r4lbSegzQ /X2l8RIUN9oNZbBswfzLxmRUvurJQuGjhQmU1r4GvuWAVfO1RfunPtBBuOGNhTfC YUcNc7KV4RZUp3blPeNL9rSiVqyKCjH71e7ba7QrJbXnlNgtx6uQx9pXN7+f0h33 zzj5a8iUaly0hz6u0eLqqGdvvn17PjI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:04 2026 by rpki-client