$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa File: b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa (raw, json) Hash identifier: a4T3DstXgrvWZ7Np9ScdJbRI2P6IX6ip+/w88+D8kgo= Subject key identifier: A1:39:D1:BD:95:43:4F:FD:FA:CD:FE:5F:AF:8B:36:3D:5D:F4:DE:0E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A6EC35069930C05855900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6e:c3:50:69:93:0c:05:85:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c00f447a-0501-47b7-bf34-36ff1cc7aceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:7d:02:e1:da:8a:13:aa:70:53:ff:86:3a: e6:9e:33:1e:44:b9:0e:d2:62:14:9c:d7:27:66:b5: 24:98:fb:4e:86:ac:5a:26:e0:a3:cd:6d:88:eb:b8: 47:3c:86:07:66:24:59:22:4a:36:2f:ad:db:6a:4e: 09:83:8f:0b:2a:fb:66:72:ff:63:65:08:cb:7c:07: 3f:5e:89:5b:93:f4:b7:f3:74:85:e4:eb:ba:b5:c3: 16:ca:01:2c:38:1c:0f:5f:2a:37:e1:d3:96:db:82: de:f9:78:c8:9a:07:ce:bb:e2:21:6f:b1:9b:6f:a1: 67:58:25:13:d0:60:28:74:b3:56:e9:72:90:0a:ca: b4:a6:51:67:6a:d6:98:e8:d2:89:8e:62:1d:ba:97: 79:ba:f7:c8:95:dc:bd:62:61:fd:30:89:53:a7:49: 10:1d:15:e1:59:29:17:b1:d1:37:5a:fd:90:10:7b: 28:4c:37:40:f9:f4:d8:72:f7:a5:8d:22:e0:f5:72: 10:83:c5:17:8d:ef:a2:ee:e4:ab:72:ff:29:15:1d: fd:21:4a:7c:7e:d2:a6:d2:d9:f2:68:34:4d:44:ed: f6:a3:24:9a:85:32:d5:b8:6f:70:43:ff:95:a5:91: 42:0c:51:45:a3:89:5b:cc:4d:78:d1:95:22:d3:51: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:39:D1:BD:95:43:4F:FD:FA:CD:FE:5F:AF:8B:36:3D:5D:F4:DE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:96:b2:4a:fa:91:4b:e8:9b:d9:ed:29:04:c6:0c:fc:6e:07: b7:70:d2:57:7d:a1:45:7e:54:1f:4c:89:fa:c4:5d:7e:3c:9c: b2:aa:2c:11:7c:57:f7:e8:cb:9e:b4:52:12:ca:d2:47:65:5f: 6b:73:b0:62:8c:71:75:86:90:e6:af:5f:eb:8d:f6:21:ad:bd: 20:2c:d5:93:0b:36:0f:d2:76:c4:e0:00:84:16:2b:f0:6b:89: ec:06:07:b7:33:f1:5d:09:b6:99:d2:41:d8:1d:91:82:b0:d1: e7:0f:67:56:55:2e:89:77:d3:de:8c:14:52:d7:d1:cb:d5:3d: b4:7e:af:26:98:08:3e:0f:ec:60:9f:f8:ad:3a:3a:89:54:59: 2c:22:f3:09:20:bd:82:d0:df:ad:f7:1a:07:38:2b:58:d0:0a: 2e:ae:a6:7a:25:1e:2b:b7:3b:5f:60:e0:3c:4d:4a:a4:83:90: 63:7d:5d:a8:5d:1e:9a:6f:6e:9a:15:39:6a:77:45:da:8c:54: 17:1f:54:1c:0b:7f:c0:cb:14:85:7c:91:b1:be:f0:0a:61:5f: 85:ce:01:01:81:5b:c4:05:28:cb:ab:82:e4:85:8f:c0:5b:b3: 2f:34:0a:92:09:a0:4a:9e:ca:80:30:5d:a5:f3:4e:83:85:3b: 1b:a9:61:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jem7DUGmTDAWFWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzAwZjQ0N2EtMDUwMS00N2I3LWJmMzQtMzZmZjFjYzdhY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvl9AuHaihOqcFP/hjrmnjMeRLkO0mIUnNcn ZrUkmPtOhqxaJuCjzW2I67hHPIYHZiRZIko2L63bak4Jg48LKvtmcv9jZQjLfAc/ Xolbk/S383SF5Ou6tcMWygEsOBwPXyo34dOW24Le+XjImgfOu+Ihb7Gbb6FnWCUT 0GAodLNW6XKQCsq0plFnataY6NKJjmIdupd5uvfIldy9YmH9MIlTp0kQHRXhWSkX sdE3Wv2QEHsoTDdA+fTYcveljSLg9XIQg8UXje+i7uSrcv8pFR39IUp8ftKm0tny aDRNRO32oySahTLVuG9wQ/+VpZFCDFFFo4lbzE140ZUi01ElbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE50b2VQ0/9+s3+X6+LNj1d9N4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjJjOWIxNWMtOWQ4Mi0z ZWU1LWI2YTAtNDUwZGFhOTU4NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeWskr6kUvom9ntKQTGDPxuB7dw0ld9oUV+VB9MifrEXX48nLKqLBF8 V/foy560UhLK0kdlX2tzsGKMcXWGkOavX+uN9iGtvSAs1ZMLNg/SdsTgAIQWK/Br iewGB7cz8V0JtpnSQdgdkYKw0ecPZ1ZVLol3096MFFLX0cvVPbR+ryaYCD4P7GCf +K06OolUWSwi8wkgvYLQ3633Ggc4K1jQCi6upnolHiu3O19g4DxNSqSDkGN9Xahd HppvbpoVOWp3RdqMVBcfVBwLf8DLFIV8kbG+8AphX4XOAQGBW8QFKMurguSFj8Bb sy80CpIJoEqeyoAwXaXzToOFOxupYSo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:22 2026 by rpki-client