$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fc050b1-abc3-3ea7-8460-d6009c644941.roa File: 5fc050b1-abc3-3ea7-8460-d6009c644941.roa (raw, json) Hash identifier: qCvnLyv7NqcBCpmOtjs30LmlBC51jdXwYiSWWuyFYaU= Subject key identifier: 0A:DD:20:38:5F:A7:F6:81:5B:38:8C:8E:A1:29:EA:36:4F:73:5F:1B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A27A9B7B2B5C91D496D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fc050b1-abc3-3ea7-8460-d6009c644941.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:27:a9:b7:b2:b5:c9:1d:49:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1f6c8ff3-cb8d-427c-89c6-b549386750f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:03:5c:db:f6:b8:85:c9:08:35:34:b3:00: 09:2c:e6:e1:ab:39:9e:a9:44:d3:c0:14:01:8d:36: 7b:bb:03:0a:bc:59:29:5f:b7:1d:17:6e:fa:39:52: 06:92:61:74:80:1f:fd:68:3b:a0:58:dc:6b:3b:85: 19:fe:3a:34:37:5b:a0:8c:b2:52:f2:d0:ec:48:9f: 64:e8:31:bb:5e:8b:71:34:3c:f7:e5:9e:60:04:2e: 11:92:65:73:d6:98:03:a3:d9:51:fa:2a:7a:60:c8: 1b:06:96:81:43:7f:dc:be:43:b4:f1:1d:d6:fb:1e: 8c:35:fa:84:62:eb:ce:b8:cf:58:23:52:65:42:02: 30:73:bf:4a:58:dc:c7:b5:8c:a3:e5:b2:8f:ea:1d: df:8f:18:52:2e:17:c2:4a:25:05:3b:0d:b0:08:a2: a6:c7:e7:6c:10:5a:2a:5e:2c:9e:2e:4a:8b:f0:bf: d9:ff:44:28:9d:ae:ee:c2:f2:29:7f:87:ce:45:f0: 0c:64:3a:50:52:54:dd:96:44:0a:72:93:a2:0e:3e: fb:a6:2b:f5:bd:19:89:47:48:57:6f:fc:66:08:c3: 98:ab:19:c8:73:47:89:f3:24:d3:58:10:b1:ac:06: 8a:6a:8b:f8:a0:16:22:9f:b2:67:22:3c:cc:27:ba: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:20:38:5F:A7:F6:81:5B:38:8C:8E:A1:29:EA:36:4F:73:5F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fc050b1-abc3-3ea7-8460-d6009c644941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8a:7d:60:cd:70:47:5f:27:45:cd:ff:ad:95:71:94:39:ee: ea:87:b2:5f:c6:7f:03:01:39:de:d6:e2:e6:c2:4a:ad:09:67: 52:a1:d9:29:93:77:2f:e6:b2:08:b0:0a:8c:83:19:d8:64:51: 4a:ea:8b:69:26:a6:36:7c:c5:dc:8e:f2:28:a8:cf:5b:e4:de: 53:e9:fb:51:9e:30:de:05:85:b3:2f:1e:ed:1f:d4:21:d3:dd: ea:0b:ab:69:22:57:50:8d:ff:d4:07:92:16:56:2b:76:b2:42: 9d:6b:76:55:0a:01:71:56:b4:65:e6:91:46:eb:c8:86:1f:28: 74:04:f2:48:1b:7d:1e:54:e0:4c:fa:0a:58:62:7f:5a:72:9a: b3:2e:69:e4:38:d7:16:e0:ab:da:d3:4f:b7:e0:f1:20:d8:40: 79:18:de:2b:8b:7d:db:4a:fe:2c:6c:d3:59:2b:97:1a:f3:52: 3c:70:58:ff:4d:00:63:13:66:c6:b8:7b:da:7e:33:fb:22:ef: a6:e2:2f:1c:2a:75:b0:e4:47:93:90:30:f5:57:9d:54:7f:0e: 72:ec:22:fc:ee:51:f3:0d:6f:60:d1:51:fa:8d:23:de:7e:ff: ec:7a:b6:ec:c7:a1:6f:f7:69:f9:57:4b:80:b0:9b:27:91:a8: 19:82:84:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiept7K1yR1JbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWY2YzhmZjMtY2I4ZC00MjdjLTg5YzYtYjU0OTM4Njc1MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlMDXNv2uIXJCDU0swAJLObhqzmeqUTTwBQB jTZ7uwMKvFkpX7cdF276OVIGkmF0gB/9aDugWNxrO4UZ/jo0N1ugjLJS8tDsSJ9k 6DG7XotxNDz35Z5gBC4RkmVz1pgDo9lR+ip6YMgbBpaBQ3/cvkO08R3W+x6MNfqE YuvOuM9YI1JlQgIwc79KWNzHtYyj5bKP6h3fjxhSLhfCSiUFOw2wCKKmx+dsEFoq XiyeLkqL8L/Z/0Qona7uwvIpf4fORfAMZDpQUlTdlkQKcpOiDj77piv1vRmJR0hX b/xmCMOYqxnIc0eJ8yTTWBCxrAaKaov4oBYin7JnIjzMJ7rfXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArdIDhfp/aBWziMjqEp6jZPc18bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWZjMDUwYjEtYWJjMy0z ZWE3LTg0NjAtZDYwMDljNjQ0OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSKfWDNcEdfJ0XN/62VcZQ57uqHsl/GfwMBOd7W4ubCSq0JZ1Kh2SmT dy/msgiwCoyDGdhkUUrqi2kmpjZ8xdyO8iioz1vk3lPp+1GeMN4FhbMvHu0f1CHT 3eoLq2kiV1CN/9QHkhZWK3ayQp1rdlUKAXFWtGXmkUbryIYfKHQE8kgbfR5U4Ez6 Clhif1pymrMuaeQ41xbgq9rTT7fg8SDYQHkY3iuLfdtK/ixs01krlxrzUjxwWP9N AGMTZsa4e9p+M/si76biLxwqdbDkR5OQMPVXnVR/DnLsIvzuUfMNb2DRUfqNI95+ /+x6tuzHoW/3aflXS4CwmyeRqBmChNU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:27 2026 by rpki-client