$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa File: 57fefa08-5438-324e-b276-9fad2175bb09.roa (raw, json) Hash identifier: xR3lnnmGa6r001PqydVkkvpL2ANYJHbhsBSR8o8TU14= Subject key identifier: 65:05:11:63:ED:DD:08:B4:E3:FB:42:06:C6:58:01:E3:77:DC:82:26 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3E7BF4585C65665A4C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3e:7b:f4:58:5c:65:66:5a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=48f7dbe5-539f-4bd2-825e-ab0926b10a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:fb:17:6b:70:52:be:e2:89:56:f7:5a:f9: 4a:da:11:f8:89:2b:55:02:19:d0:de:7e:13:13:1e: c3:ea:b7:b5:08:30:9f:4e:2e:72:81:59:0e:4f:df: 66:8a:9b:28:18:8f:d9:1b:de:e8:3b:53:03:1f:50: 44:78:92:19:96:c5:ff:74:36:81:33:33:e7:da:aa: 07:34:e6:6e:e2:89:3d:eb:8d:10:8f:79:4d:97:03: 93:57:f9:83:d3:a1:b7:50:5c:8a:86:b2:42:e9:29: c6:f6:53:97:e8:38:c1:32:f4:3c:0a:7a:e7:c9:6b: 72:d9:51:0a:32:d3:7c:8f:f6:4e:a9:8b:bf:73:73: a4:85:f4:eb:b0:39:11:e8:34:8b:49:bf:46:db:2b: 5a:12:74:7c:9f:13:df:f9:87:67:83:3b:9b:d2:1b: 0e:97:82:8e:64:3d:59:18:12:8f:99:da:9d:a6:51: 31:53:4f:75:2c:91:85:f4:8b:47:c3:a3:98:cc:91: c8:f3:b5:21:56:db:e7:bc:63:37:4a:0b:3f:58:a3: f0:a2:72:1f:1c:11:e9:ae:ff:0b:0b:a4:d1:9c:88: 48:15:0f:b7:0a:36:8f:e4:3a:82:59:ae:dd:98:1c: 76:47:ee:59:f9:49:0f:54:03:53:ed:3f:f3:ab:77: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:11:63:ED:DD:08:B4:E3:FB:42:06:C6:58:01:E3:77:DC:82:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:d0:94:d9:47:18:a7:74:8a:12:16:d3:d4:de:6c:fc:95: ef:d9:5a:6e:78:41:fc:11:55:8c:f8:c4:14:e2:84:e0:c7:88: 02:4c:14:db:cf:62:54:35:b7:f9:94:a0:4c:fb:ec:ec:8d:b0: 86:4d:7e:1c:ca:0d:a7:d8:26:a6:ed:90:3f:13:a1:b4:66:f4: 3e:17:02:24:ee:a6:27:48:a3:b0:b5:a8:17:7e:ba:a7:df:a1: 9d:38:fe:91:33:4e:f9:80:96:80:25:45:5c:63:df:3f:33:f9: 50:b0:e8:7f:eb:68:bb:c9:79:b1:e0:f9:f9:5f:4c:d1:91:1a: 1d:05:37:43:00:7d:0b:6f:20:75:65:99:92:6c:f7:d1:d9:c0: 76:5b:2d:63:37:aa:fc:03:2e:ee:af:e3:37:c4:38:ab:81:c8: 56:0a:df:dc:53:cd:96:a7:ee:7e:e0:49:9b:ef:33:95:68:d4: 85:ff:a3:b8:94:29:59:42:e3:b3:89:dd:dc:c4:c8:14:8e:70: 28:7d:8d:b8:0b:01:07:6c:ab:0c:63:0b:14:c1:6d:96:9f:b5: 8b:78:19:64:ec:20:38:27:6d:50:cf:eb:d6:96:33:08:9a:a9: 3f:58:f8:90:c5:7c:53:a2:e2:d4:3b:ba:3c:0e:b6:65:71:34: 6b:bb:b5:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej579FhcZWZaTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDhmN2RiZTUtNTM5Zi00YmQyLTgyNWUtYWIwOTI2YjEwYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkf7F2twUr7iiVb3WvlK2hH4iStVAhnQ3n4T Ex7D6re1CDCfTi5ygVkOT99mipsoGI/ZG97oO1MDH1BEeJIZlsX/dDaBMzPn2qoH NOZu4ok9640Qj3lNlwOTV/mD06G3UFyKhrJC6SnG9lOX6DjBMvQ8CnrnyWty2VEK MtN8j/ZOqYu/c3OkhfTrsDkR6DSLSb9G2ytaEnR8nxPf+Ydngzub0hsOl4KOZD1Z GBKPmdqdplExU091LJGF9ItHw6OYzJHI87UhVtvnvGM3Sgs/WKPwonIfHBHprv8L C6TRnIhIFQ+3CjaP5DqCWa7dmBx2R+5Z+UkPVANT7T/zq3enuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUFEWPt3Qi04/tCBsZYAeN33IImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTdmZWZhMDgtNTQzOC0z MjRlLWIyNzYtOWZhZDIxNzViYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzT0JTZRxindIoSFtPU3mz8le/ZWm54QfwRVYz4xBTihODHiAJMFNvP YlQ1t/mUoEz77OyNsIZNfhzKDafYJqbtkD8TobRm9D4XAiTupidIo7C1qBd+uqff oZ04/pEzTvmAloAlRVxj3z8z+VCw6H/raLvJebHg+flfTNGRGh0FN0MAfQtvIHVl mZJs99HZwHZbLWM3qvwDLu6v4zfEOKuByFYK39xTzZan7n7gSZvvM5Vo1IX/o7iU KVlC47OJ3dzEyBSOcCh9jbgLAQdsqwxjCxTBbZaftYt4GWTsIDgnbVDP69aWMwia qT9Y+JDFfFOi4tQ7ujwOtmVxNGu7te0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:44 2026 by rpki-client