$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa File: 6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa (raw, json) Hash identifier: VycdPYs3KrepxzMIbQBoMNBPDY3lrcQwyTz/O8gMG+o= Subject key identifier: 3B:FB:1B:74:C9:20:26:16:0D:0D:42:88:1A:69:50:B3:C4:08:26:15 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0874351F1A06BE1A2420 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:08:74:35:1f:1a:06:be:1a:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6cf7e717-9673-4c94-a96f-4837f2960f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:9e:e6:61:48:52:51:e4:80:2d:08:e1:d0: f8:60:c6:b0:62:3d:27:1a:96:29:b3:06:71:22:a7: dc:68:64:1e:75:41:4c:ff:48:d6:6c:7c:df:1a:24: 51:b1:01:fd:73:70:30:8e:df:34:b7:44:e9:6d:d8: 53:30:ce:46:c4:02:dc:b1:49:2c:7a:c6:29:a1:2f: 33:9e:99:f4:af:91:3e:04:1d:a7:5f:0d:e1:9b:75: 4c:50:9f:65:eb:4d:0b:38:62:81:3b:12:f8:24:8c: 3e:34:c5:09:c8:bc:ba:66:79:11:6f:a5:00:38:7f: d6:d3:45:52:80:79:93:55:d4:95:86:22:4d:62:bd: 6a:56:61:bd:4a:1e:19:48:29:b5:d2:d1:cc:37:5f: 28:75:39:17:fc:d1:0e:ee:67:82:29:d5:74:cd:b3: 4f:ea:db:4f:8f:cf:10:e9:a4:94:75:cc:cb:ea:c6: a4:b9:cb:2e:f3:1e:1c:40:82:23:44:70:07:ed:bc: 1a:da:73:c2:04:44:c9:c1:0e:fc:1e:a5:0c:5d:f4: 6a:f9:32:a6:87:4e:e5:f2:2e:73:b4:a2:40:55:35: af:82:3d:8a:7a:38:84:41:87:94:35:a9:51:b6:22: 46:21:3c:8f:9e:07:4f:6f:72:4e:7c:d2:c3:75:36: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FB:1B:74:C9:20:26:16:0D:0D:42:88:1A:69:50:B3:C4:08:26:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6f38331a-18d5-3b48-bd9f-9719b09bc1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:83:a5:5a:58:b6:ef:97:cc:f4:bc:86:c1:71:27:52:56:47: 29:f7:cb:08:99:c4:6d:c2:15:a6:b9:bf:7a:ae:f0:18:97:55: 90:20:44:38:55:c6:61:16:ab:52:87:75:90:09:58:99:cd:43: 1a:63:a3:2f:05:3d:5b:38:18:9b:24:ca:24:3c:90:d8:6a:85: 35:20:c1:6f:2d:8e:f3:91:ce:59:f3:9a:42:90:9e:e0:78:cf: 64:e2:a8:8e:bf:24:6f:0b:a1:b3:ac:a2:04:d8:d4:25:38:07: 21:2f:a6:0b:da:e0:a5:e3:a4:8e:d9:79:a9:7b:cf:03:3d:a6: bb:30:3b:42:a1:f9:fd:25:a1:17:67:65:49:f1:69:83:8a:58: c6:42:9e:33:ce:fa:66:c8:e3:65:9f:56:55:6f:e5:53:63:75: 6e:70:8c:45:74:4a:4a:80:57:19:ca:43:19:13:ad:dd:ac:e7: 83:ef:da:47:6b:7a:b4:8f:40:7d:15:34:ae:fe:45:22:ca:20: 43:be:af:4e:56:15:82:40:23:88:79:99:7d:68:da:94:f4:13: e7:ab:d7:33:cc:54:42:77:30:40:f7:2a:22:e8:ce:5d:27:3e: f0:0e:b6:60:be:e1:82:77:5f:eb:ab:52:6c:57:f9:ae:2d:df: 2e:1c:d0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegh0NR8aBr4aJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmNmN2U3MTctOTY3My00Yzk0LWE5NmYtNDgzN2YyOTYwZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZOe5mFIUlHkgC0I4dD4YMawYj0nGpYpswZx IqfcaGQedUFM/0jWbHzfGiRRsQH9c3Awjt80t0TpbdhTMM5GxALcsUksesYpoS8z npn0r5E+BB2nXw3hm3VMUJ9l600LOGKBOxL4JIw+NMUJyLy6ZnkRb6UAOH/W00VS gHmTVdSVhiJNYr1qVmG9Sh4ZSCm10tHMN18odTkX/NEO7meCKdV0zbNP6ttPj88Q 6aSUdczL6sakucsu8x4cQIIjRHAH7bwa2nPCBETJwQ78HqUMXfRq+TKmh07l8i5z tKJAVTWvgj2KejiEQYeUNalRtiJGITyPngdPb3JOfNLDdTb0aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv7G3TJICYWDQ1CiBppULPECCYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmYzODMzMWEtMThkNS0z YjQ4LWJkOWYtOTcxOWIwOWJjMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyDpVpYtu+XzPS8hsFxJ1JWRyn3ywiZxG3CFaa5v3qu8BiXVZAgRDhV xmEWq1KHdZAJWJnNQxpjoy8FPVs4GJskyiQ8kNhqhTUgwW8tjvORzlnzmkKQnuB4 z2TiqI6/JG8LobOsogTY1CU4ByEvpgva4KXjpI7Zeal7zwM9prswO0Kh+f0loRdn ZUnxaYOKWMZCnjPO+mbI42WfVlVv5VNjdW5wjEV0SkqAVxnKQxkTrd2s54Pv2kdr erSPQH0VNK7+RSLKIEO+r05WFYJAI4h5mX1o2pT0E+er1zPMVEJ3MED3KiLozl0n PvAOtmC+4YJ3X+urUmxX+a4t3y4c0NE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:24 2026 by rpki-client