$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa File: b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa (raw, json) Hash identifier: bMDVD3XCgdgQhbzVFCIgXpEZ7haXRSqQ4D0J3XVfgCg= Subject key identifier: 65:40:1C:95:A6:77:8A:E6:EA:DC:C4:13:DA:84:05:1D:D7:33:52:C4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A405F7E5F41BABB24D380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:5f:7e:5f:41:ba:bb:24:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4b91dc19-c210-4a23-b8b9-106bd76a8cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:3c:01:e9:f5:d1:e2:81:d3:e8:1f:db:37: 36:a2:6d:4f:60:5b:fb:8e:a1:8a:81:e2:e7:2b:d7: 70:7d:2d:cf:f6:99:63:49:10:bb:c2:2f:c9:15:08: 29:4a:9c:81:09:c6:f5:c9:fd:b5:f9:2c:6e:94:f0: d7:7e:c7:61:27:78:03:4e:09:27:8d:fe:f8:e8:bd: db:70:a4:d5:72:34:82:68:6a:48:34:9f:48:ea:64: d3:a0:3c:1b:0d:b7:60:fd:52:b7:b4:bd:c1:75:19: fa:01:43:c9:01:b6:5a:67:a4:ce:a4:c0:b0:28:a9: 73:e4:c8:1c:34:f3:a1:c9:c2:16:cd:c2:0f:16:5a: b5:9f:e9:5c:d6:04:20:52:37:05:d7:2b:7d:e3:d8: 60:7f:11:ee:01:49:2d:f6:0f:5c:9c:0c:5a:f8:20: 00:3d:e0:5e:7e:8c:44:7d:1d:32:8e:5f:cf:d6:fd: 8a:6d:0b:66:aa:b0:06:70:85:02:b3:6a:cd:b2:4c: 38:fd:46:fa:99:c6:d3:b5:71:05:70:6b:a5:59:f4: 81:6b:c2:69:8a:36:d0:71:0c:27:c7:ac:0c:f7:74: 51:81:ae:79:8a:f8:5f:5f:02:be:d9:17:0e:d9:92: 33:aa:cc:bc:8f:de:f9:4e:e6:b1:7e:1f:4d:ea:6e: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:40:1C:95:A6:77:8A:E6:EA:DC:C4:13:DA:84:05:1D:D7:33:52:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44943bd-9d18-35a4-a1d7-e3301bec9a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:20:6b:6d:9f:57:57:57:38:b9:99:82:7e:91:96:6f:16: df:ef:a8:35:d6:6f:e0:53:41:8f:1d:ed:82:e1:36:53:9c:1f: 30:36:6b:8a:6c:aa:ed:e0:ba:09:ff:79:0a:fa:16:f6:f5:e1: 99:90:29:e8:d5:03:4b:ab:53:c6:8d:df:9d:e4:ae:2b:66:b9: ea:49:b5:37:41:0c:f9:0a:e2:b4:49:cb:42:2d:c8:3b:3e:69: bc:b1:9f:59:76:30:a8:8b:b5:6f:ac:2a:e1:ad:62:82:4f:fe: fa:93:d8:b8:a0:62:9a:a2:6f:2b:d8:3e:70:0f:0e:3b:cb:9c: 72:23:ac:47:07:f5:c0:9b:33:6c:cf:0c:04:ec:ad:b1:e0:62: 4f:85:a1:6c:4c:34:0f:27:69:6b:a9:5c:19:30:da:c9:66:9c: 10:e5:47:89:66:ea:59:3c:7c:67:91:19:82:be:41:2b:f0:f5: f4:6b:9c:d6:58:5c:bd:3d:52:2e:b3:86:1a:10:08:05:1e:12: 4a:35:36:f4:33:c6:a4:7a:51:af:28:5a:2e:5e:bf:ce:61:40: 30:4d:4a:cd:9b:6b:ff:d6:c0:63:8f:30:27:0a:34:5a:f0:b8: 7f:6d:0f:19:02:cc:d8:91:8f:f6:ac:47:32:04:16:54:85:45: 31:eb:39:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekBffl9Bursk04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGI5MWRjMTktYzIxMC00YTIzLWI4YjktMTA2YmQ3NmE4Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Y8Aen10eKB0+gf2zc2om1PYFv7jqGKgeLn K9dwfS3P9pljSRC7wi/JFQgpSpyBCcb1yf21+SxulPDXfsdhJ3gDTgknjf746L3b cKTVcjSCaGpINJ9I6mTToDwbDbdg/VK3tL3BdRn6AUPJAbZaZ6TOpMCwKKlz5Mgc NPOhycIWzcIPFlq1n+lc1gQgUjcF1yt949hgfxHuAUkt9g9cnAxa+CAAPeBefoxE fR0yjl/P1v2KbQtmqrAGcIUCs2rNskw4/Ub6mcbTtXEFcGulWfSBa8JpijbQcQwn x6wM93RRga55ivhfXwK+2RcO2ZIzqsy8j975Tuaxfh9N6m5EqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVAHJWmd4rm6tzEE9qEBR3XM1LEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQ0OTQzYmQtOWQxOC0z NWE0LWExZDctZTMzMDFiZWM5YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFasIGttn1dXVzi5mYJ+kZZvFt/vqDXWb+BTQY8d7YLhNlOcHzA2a4ps qu3gugn/eQr6Fvb14ZmQKejVA0urU8aN353kritmuepJtTdBDPkK4rRJy0ItyDs+ abyxn1l2MKiLtW+sKuGtYoJP/vqT2LigYpqibyvYPnAPDjvLnHIjrEcH9cCbM2zP DATsrbHgYk+FoWxMNA8naWupXBkw2slmnBDlR4lm6lk8fGeRGYK+QSvw9fRrnNZY XL09Ui6zhhoQCAUeEko1NvQzxqR6Ua8oWi5ev85hQDBNSs2ba//WwGOPMCcKNFrw uH9tDxkCzNiRj/asRzIEFlSFRTHrOSI= -----END CERTIFICATE-----Generated at Fri Mar 27 01:07:18 2026 by rpki-client