$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa File: 475e940c-ab94-3d7b-86ac-1c3426452993.roa (raw, json) Hash identifier: 2LkjmeX88oJlU3qtXXAmnEaS30IlBaArMrmJgx1yH/o= Subject key identifier: 45:6B:1C:0F:D2:57:4D:4F:F0:28:2E:05:A7:0A:77:48:5A:69:55:B8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A6539231A26403A288A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 161.232.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:65:39:23:1a:26:40:3a:28:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e3db390e-7d63-4b43-90fc-3bf877a46ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:17:6e:cc:0b:1e:93:d0:67:28:e9:87:10: ae:2a:85:43:63:ab:95:6d:a3:f4:29:0e:be:bd:61: 7a:ce:03:8f:3c:a9:00:db:4f:09:f1:cb:75:5a:23: e5:e8:76:17:82:63:d1:d2:68:08:fb:74:c2:68:32: 77:2e:69:90:a3:76:2d:f2:3e:c4:01:90:51:91:ba: d1:96:1a:0b:65:8e:e9:b0:3c:ad:0a:26:06:f3:34: ba:ed:6c:03:b7:f8:57:7a:7f:39:f1:35:aa:3e:da: b8:86:fb:fd:28:7d:e6:37:bb:68:0d:b8:ce:68:94: 54:83:88:aa:8b:3b:7d:18:09:51:bd:6a:16:df:fa: 39:44:9a:3c:f4:f0:f4:5f:ab:90:3c:6a:2b:be:22: fa:df:3f:65:12:c1:ed:f1:b1:63:32:b6:6c:05:f9: 1e:ce:0a:1d:36:be:ff:a5:f1:4c:86:cc:92:a7:42: 28:22:9a:0c:5f:8e:8a:c0:49:fa:91:4e:c9:37:97: 33:cc:22:5b:1a:c5:2f:56:6c:fe:89:72:3d:c0:cc: ce:61:03:dd:9a:c2:ee:b8:55:4c:ef:4f:fe:e9:bb: 9c:7a:41:bb:ee:77:8e:10:75:62:2f:2d:ca:df:cb: 2f:8a:dc:3e:19:b7:a0:05:da:dd:19:e9:3d:4f:39: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6B:1C:0F:D2:57:4D:4F:F0:28:2E:05:A7:0A:77:48:5A:69:55:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:03:01:63:bc:32:50:cc:f4:20:ac:85:6f:59:9a:3c:e2:bb: 0a:d7:9c:52:b5:8a:54:0d:0f:02:ee:f6:09:3a:b9:fe:8b:9e: 08:13:fb:8e:e0:5b:93:4e:e1:cc:8a:c5:42:7f:00:59:41:7f: 8e:5a:c6:bd:16:72:d2:66:8e:75:4d:6f:db:16:46:71:2c:0f: 21:a0:d9:6f:6c:2e:29:90:c6:36:62:69:1a:a1:9d:87:e2:a5: 0d:73:94:8d:5b:e2:97:6d:f3:6e:70:a0:9a:d5:3a:05:de:b6: 69:f3:16:28:3e:46:a0:be:a8:1b:1e:e1:ac:60:83:d5:d5:e9: 39:15:13:60:51:dd:1a:99:0d:fc:68:73:fd:d3:17:04:92:0a: b0:59:a1:79:2e:fb:ae:43:20:c0:20:ce:b4:28:83:78:25:46: ba:bf:74:02:2b:9d:c8:93:58:a3:81:9a:7a:8b:d5:05:f2:1e: 4c:4a:f2:89:b8:fc:19:6d:df:f8:af:57:eb:68:f5:7e:93:f8: bd:1d:02:94:66:60:5a:72:e2:97:c3:64:9f:86:31:56:67:2c: b4:ee:82:ab:f5:01:a5:02:5d:69:d4:37:7c:a7:80:76:94:3d: 22:a1:66:e2:7a:be:56:16:b3:45:93:30:fc:2b:0c:fd:a8:0a: c1:f3:6f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemU5IxomQDooikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTNkYjM5MGUtN2Q2My00YjQzLTkwZmMtM2JmODc3YTQ2YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sEXbswLHpPQZyjphxCuKoVDY6uVbaP0KQ6+ vWF6zgOPPKkA208J8ct1WiPl6HYXgmPR0mgI+3TCaDJ3LmmQo3Yt8j7EAZBRkbrR lhoLZY7psDytCiYG8zS67WwDt/hXen858TWqPtq4hvv9KH3mN7toDbjOaJRUg4iq izt9GAlRvWoW3/o5RJo89PD0X6uQPGorviL63z9lEsHt8bFjMrZsBfkezgodNr7/ pfFMhsySp0IoIpoMX46KwEn6kU7JN5czzCJbGsUvVmz+iXI9wMzOYQPdmsLuuFVM 70/+6bucekG77neOEHViLy3K38svitw+GbegBdrdGek9Tzn1aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVrHA/SV01P8CguBacKd0haaVW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDc1ZTk0MGMtYWI5NC0z ZDdiLTg2YWMtMWMzNDI2NDUyOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkDAWO8MlDM9CCshW9ZmjziuwrXnFK1ilQNDwLu9gk6uf6LnggT+47g W5NO4cyKxUJ/AFlBf45axr0WctJmjnVNb9sWRnEsDyGg2W9sLimQxjZiaRqhnYfi pQ1zlI1b4pdt825woJrVOgXetmnzFig+RqC+qBse4axgg9XV6TkVE2BR3RqZDfxo c/3TFwSSCrBZoXku+65DIMAgzrQog3glRrq/dAIrnciTWKOBmnqL1QXyHkxK8om4 /Blt3/ivV+to9X6T+L0dApRmYFpy4pfDZJ+GMVZnLLTugqv1AaUCXWnUN3yngHaU PSKhZuJ6vlYWs0WTMPwrDP2oCsHzb0k= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:12 2026 by rpki-client