$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa File: 60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa (raw, json) Hash identifier: Fo+xRAIVmS3++2nAarajDlZaimZsBBwv/6Gu05tfpr8= Subject key identifier: C6:DE:3C:37:BC:FF:D2:59:76:C9:F0:60:9D:FF:2E:1B:0E:77:D0:0E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F1CEF9F7362A67887818 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f1:ce:f9:f7:36:2a:67:88:78:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bc984daf-e34f-417f-af15-3009ce336553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e5:4e:ec:91:27:61:78:34:c7:50:3e:ae:37: 22:5a:ac:7c:f1:79:4a:f0:27:32:4d:db:ef:09:ae: 70:ea:1b:1f:be:af:fd:12:38:92:f9:db:d0:30:5d: 43:40:7b:55:b8:0a:f0:bd:2e:58:be:57:39:c9:47: bb:24:0d:30:61:ad:5d:1d:19:a8:20:80:15:99:a1: b0:7d:16:01:46:e6:e5:94:a1:32:2c:88:ac:bf:52: 96:0b:66:e8:c8:bb:e7:ae:f3:65:89:bb:c6:12:03: 7b:34:e9:86:d3:55:e3:89:f4:7f:d8:25:14:ae:4c: 2e:1f:57:a5:4b:66:f7:23:cd:44:7b:b3:33:37:2c: d2:cf:5e:94:68:4b:16:79:1c:9d:38:48:09:bc:78: ec:7b:f0:a8:fa:fa:9d:18:33:b2:88:32:63:22:cf: 95:c7:a0:4d:50:98:0d:be:67:0a:b2:bd:60:cb:28: 22:35:e7:68:59:dd:ae:94:9a:33:04:3f:f9:cd:32: 1d:4b:b5:0d:2e:e5:5d:91:d1:42:57:f8:ca:5e:7d: 78:0f:e4:52:c5:69:4b:87:fa:c2:98:4c:77:9c:e1: b5:2d:18:cb:57:36:f9:3b:38:80:e1:41:7a:48:b3: ec:d2:c3:3b:e9:c9:d1:07:a4:be:63:ff:4b:b4:c3: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:3C:37:BC:FF:D2:59:76:C9:F0:60:9D:FF:2E:1B:0E:77:D0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60fd85c2-d2dd-3b52-8d73-7566f332b9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6b:16:67:e1:f6:69:b8:c0:ac:52:b8:6f:fb:d9:8e:54:d4: 04:cd:72:66:d2:b7:0e:c1:79:31:7a:1e:65:8b:7e:e0:c6:69: f5:c5:17:86:09:1a:86:cd:3d:bb:2a:c8:a7:02:e0:34:d6:91: be:de:1b:51:14:c9:06:ea:58:b8:92:52:f0:d2:2a:57:f8:ec: 30:3c:f0:5e:3a:c6:58:3c:01:49:b0:1f:88:f9:8b:a8:2f:90: 99:bb:30:f7:fd:68:35:32:c1:19:24:b7:1b:7a:6d:0f:ed:91: 15:ef:74:a7:0b:78:07:7e:a1:58:e1:ef:c2:2c:f4:8c:92:0e: 96:79:0b:b9:86:34:24:fd:29:cb:de:f4:06:d5:3e:76:59:b2: eb:35:4d:e4:cc:6c:43:c8:39:3d:4c:c5:5c:4d:42:07:37:1b: b4:06:3a:93:32:4d:06:89:7e:c2:2e:56:7d:d7:9a:00:99:bb: 36:45:ad:cc:4f:06:27:37:2e:e2:7d:b5:6f:d9:07:34:65:59: 41:63:94:fd:e8:e0:cd:fa:61:3d:69:16:a1:cf:ee:2c:43:dc: ce:26:71:28:ec:28:50:f2:cb:d6:bd:00:6e:1f:da:62:b9:63: d0:f4:bf:af:04:c4:4a:29:53:0e:57:09:31:31:a3:40:2d:a0: f8:07:8c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefHO+fc2KmeIeBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmM5ODRkYWYtZTM0Zi00MTdmLWFmMTUtMzAwOWNlMzM2NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OVO7JEnYXg0x1A+rjciWqx88XlK8CcyTdvv Ca5w6hsfvq/9EjiS+dvQMF1DQHtVuArwvS5Yvlc5yUe7JA0wYa1dHRmoIIAVmaGw fRYBRubllKEyLIisv1KWC2boyLvnrvNlibvGEgN7NOmG01XjifR/2CUUrkwuH1el S2b3I81Ee7MzNyzSz16UaEsWeRydOEgJvHjse/Co+vqdGDOyiDJjIs+Vx6BNUJgN vmcKsr1gyygiNedoWd2ulJozBD/5zTIdS7UNLuVdkdFCV/jKXn14D+RSxWlLh/rC mEx3nOG1LRjLVzb5OziA4UF6SLPs0sM76cnRB6S+Y/9LtMMBhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbePDe8/9JZdsnwYJ3/LhsOd9AOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBmZDg1YzItZDJkZC0z YjUyLThkNzMtNzU2NmYzMzJiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKprFmfh9mm4wKxSuG/72Y5U1ATNcmbStw7BeTF6HmWLfuDGafXFF4YJ GobNPbsqyKcC4DTWkb7eG1EUyQbqWLiSUvDSKlf47DA88F46xlg8AUmwH4j5i6gv kJm7MPf9aDUywRkktxt6bQ/tkRXvdKcLeAd+oVjh78Is9IySDpZ5C7mGNCT9Kcve 9AbVPnZZsus1TeTMbEPIOT1MxVxNQgc3G7QGOpMyTQaJfsIuVn3XmgCZuzZFrcxP Bic3LuJ9tW/ZBzRlWUFjlP3o4M36YT1pFqHP7ixD3M4mcSjsKFDyy9a9AG4f2mK5 Y9D0v68ExEopUw5XCTExo0AtoPgHjP4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:55 2026 by rpki-client