$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa File: d0171cfd-5287-3188-9058-b7a33b87fbe7.roa (raw, json) Hash identifier: WslxWFntBbQ1atp74rZkb3a9320/2n5sdgiIFs2wVnY= Subject key identifier: 8E:D6:FA:31:1C:5C:AB:BD:F1:99:26:94:56:1D:D2:39:31:53:82:48 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A59894AC1FB93D3B45000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:59:89:4a:c1:fb:93:d3:b4:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1c3ee8e5-1af7-4cc4-935e-55d95e2658e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:f6:fb:ab:ef:af:95:41:3a:97:1d:52:3e: 7e:3b:6f:6e:98:3c:e2:4f:54:f5:ea:bd:77:e9:94: 2d:e6:29:fb:77:58:c5:07:db:8e:48:d3:e3:52:12: 83:8f:76:1e:ca:12:ee:9c:54:68:de:7d:ea:b8:e9: 23:b7:f6:92:de:3d:d7:ea:35:0e:7b:32:54:8f:49: fe:66:91:1a:1c:48:85:d2:60:b1:93:e1:35:fc:5c: c2:80:a5:ef:b4:41:ad:19:aa:76:54:ec:da:de:e6: 1f:60:58:98:45:52:32:c4:01:13:c8:b8:fa:02:14: 81:b3:14:8d:dd:25:0a:a3:ff:f0:4b:b5:5f:e3:db: 7b:05:12:ef:db:74:48:b6:2c:b1:89:e7:2a:fc:90: 77:02:04:ce:75:cf:c4:f1:27:86:7f:b4:52:fd:9b: c8:21:4e:d7:07:83:af:b3:18:20:36:79:40:e2:42: 00:29:1e:29:14:be:de:f3:a4:0f:43:2a:90:a6:4a: f2:4b:b6:6c:cb:f9:cf:88:ad:d8:ec:5e:07:7d:86: e6:f3:bc:87:49:09:fe:87:2e:56:95:78:87:6f:7b: 33:bb:f2:cd:11:f0:81:f6:c9:63:48:5a:39:21:b2: 64:22:a1:56:e3:7d:6b:ef:40:9d:56:37:c5:b4:f9: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:FA:31:1C:5C:AB:BD:F1:99:26:94:56:1D:D2:39:31:53:82:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0171cfd-5287-3188-9058-b7a33b87fbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3c:17:3f:e0:87:f5:a5:dd:48:31:51:34:22:64:33:d8:3a: d3:05:eb:6c:4d:c1:e7:fe:e5:70:e8:17:91:36:3c:bd:3c:b6: 5d:96:1e:30:73:0a:0a:85:78:92:d6:77:d4:2f:cc:06:15:b2: 27:3f:65:0e:53:7f:d9:22:48:dc:dd:53:78:67:fe:5d:57:4b: 15:e7:49:12:44:35:40:a9:c4:dc:dd:b9:f8:09:ac:5f:50:c4: 97:15:e4:a1:ac:d4:71:42:59:71:be:b0:dd:2c:d1:13:6c:54: 08:53:98:21:f9:04:47:c0:7f:ca:f1:d0:3e:7f:d8:69:d7:9d: 85:a2:ae:85:54:5b:42:e5:b8:8e:84:8a:12:61:74:3e:a4:ba: 0a:a5:5e:12:e7:01:09:76:eb:0b:78:e8:5c:d4:d6:55:f3:f9: 1f:75:88:92:88:d2:8b:6e:3f:74:c1:db:14:6b:6e:15:5c:62: d9:03:e4:35:0b:2e:b4:f4:45:9a:ac:31:cd:94:4e:b5:92:cf: b5:19:a3:2d:e0:f2:6a:40:67:7c:75:87:1c:71:cb:7f:f0:3a: 41:cf:51:ce:e2:99:8f:27:51:e2:c4:75:a6:07:28:1c:81:2d: cd:56:50:a1:df:7c:a8:15:5e:40:92:19:fa:17:5b:86:a7:c9: e3:b4:fa:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelmJSsH7k9O0UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWMzZWU4ZTUtMWFmNy00Y2M0LTkzNWUtNTVkOTVlMjY1OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNH2+6vvr5VBOpcdUj5+O29umDziT1T16r13 6ZQt5in7d1jFB9uOSNPjUhKDj3YeyhLunFRo3n3quOkjt/aS3j3X6jUOezJUj0n+ ZpEaHEiF0mCxk+E1/FzCgKXvtEGtGap2VOza3uYfYFiYRVIyxAETyLj6AhSBsxSN 3SUKo//wS7Vf49t7BRLv23RItiyxiecq/JB3AgTOdc/E8SeGf7RS/ZvIIU7XB4Ov sxggNnlA4kIAKR4pFL7e86QPQyqQpkryS7Zsy/nPiK3Y7F4HfYbm87yHSQn+hy5W lXiHb3szu/LNEfCB9sljSFo5IbJkIqFW431r70CdVjfFtPkdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7W+jEcXKu98ZkmlFYd0jkxU4JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDAxNzFjZmQtNTI4Ny0z MTg4LTkwNTgtYjdhMzNiODdmYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg8Fz/gh/Wl3UgxUTQiZDPYOtMF62xNwef+5XDoF5E2PL08tl2WHjBz CgqFeJLWd9QvzAYVsic/ZQ5Tf9kiSNzdU3hn/l1XSxXnSRJENUCpxNzdufgJrF9Q xJcV5KGs1HFCWXG+sN0s0RNsVAhTmCH5BEfAf8rx0D5/2GnXnYWiroVUW0LluI6E ihJhdD6kugqlXhLnAQl26wt46FzU1lXz+R91iJKI0otuP3TB2xRrbhVcYtkD5DUL LrT0RZqsMc2UTrWSz7UZoy3g8mpAZ3x1hxxxy3/wOkHPUc7imY8nUeLEdaYHKByB Lc1WUKHffKgVXkCSGfoXW4anyeO0+l0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:47 2026 by rpki-client