$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa File: d2974c0b-793f-3052-907e-201dffbd31d6.roa (raw, json) Hash identifier: UT9ioYa7m4OcLuZXJp8fiLbOuCexKq+bjN1rtSQ+/x0= Subject key identifier: 88:DC:CA:65:78:E1:CD:D9:43:A3:EA:A7:07:6B:67:C4:2C:6A:F0:BC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A58ED2E5B9ED744D64900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:58:ed:2e:5b:9e:d7:44:d6:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ff812bbc-1071-49bc-b83d-74815122defb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:22:5d:02:e4:f7:1f:32:0b:17:0d:e7:bb: dd:b2:a2:71:ff:9a:fd:10:12:6d:a6:67:87:03:28: a7:71:21:c1:fd:2a:a1:ff:ab:20:d4:66:03:28:3d: a1:69:2d:d8:05:22:e3:8e:6b:20:36:d9:04:af:f6: e7:db:e3:10:29:0e:52:84:45:d2:f0:ab:7b:04:6a: 99:81:01:8b:16:68:8f:e2:ef:c5:3e:b2:4a:95:71: e5:d8:37:5e:3f:97:f8:02:30:16:2c:7f:24:2b:0f: ac:30:4a:3a:c1:ee:ec:5f:9a:ae:aa:43:6f:3c:b0: 55:7c:05:2a:b2:c3:04:bb:f0:50:41:4e:54:c0:ab: 6f:81:24:fb:41:66:63:05:b5:1e:44:03:c5:d5:90: 8f:36:ee:53:14:8b:de:74:5b:15:ca:d0:25:5a:4f: c6:37:a8:11:fb:7e:26:b2:2d:76:9a:b3:49:a7:ff: 66:1e:c7:e8:2b:cf:43:82:d9:19:9c:ee:cc:8f:db: 68:06:c9:73:4b:12:fe:f7:2f:bb:bc:12:4f:1a:10: 25:ac:05:35:43:49:84:1d:5f:ef:86:18:42:eb:31: e7:b8:ac:38:8b:50:79:21:a5:6c:0f:c5:5a:33:36: 80:4d:ba:93:b6:8e:45:a5:4f:06:15:41:97:66:60: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:CA:65:78:E1:CD:D9:43:A3:EA:A7:07:6B:67:C4:2C:6A:F0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:25:f0:83:81:23:42:a3:f9:7c:d4:32:31:1e:dc:30:43:8f: 02:d4:b2:4a:8f:12:81:e8:ee:f7:20:dc:ee:c9:10:d2:98:b4: 77:cf:3a:70:fd:ab:b6:c1:3f:f9:25:cb:98:a4:67:3b:eb:86: be:c6:85:7e:71:de:f6:23:eb:3b:9d:3d:9e:2e:8c:1e:5c:dc: af:69:4c:8d:61:62:68:55:e1:06:ad:5b:ea:3d:23:b0:41:37: 63:7e:76:bc:bd:46:91:14:1f:a5:d5:dc:43:84:0f:a9:27:e0: df:77:dd:c8:5f:e1:b3:36:18:32:ff:ed:0a:80:49:df:d7:fb: 57:99:c0:48:30:29:8b:d7:c5:58:c4:ac:21:4f:df:9c:ce:ff: 4d:51:c4:08:aa:77:87:0b:a0:af:21:8f:5e:71:d9:9d:f2:fa: 7f:4e:c8:53:e0:21:24:fd:88:9a:7c:ec:63:ab:65:23:9f:2d: 5a:0c:85:13:32:89:92:41:be:85:e2:98:4f:92:ab:64:5b:29: d4:b2:b6:08:a4:62:13:49:65:6c:e9:27:64:52:07:5b:ac:30: 92:e3:20:aa:d4:94:d9:1b:11:58:f9:e8:14:24:0f:bb:24:ca: 87:d3:65:5d:95:b4:00:ed:0a:b5:4c:d6:e6:0a:3d:b6:a8:55: b8:e0:ea:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeljtLlue10TWSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmY4MTJiYmMtMTA3MS00OWJjLWI4M2QtNzQ4MTUxMjJkZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoiXQLk9x8yCxcN57vdsqJx/5r9EBJtpmeH AyincSHB/Sqh/6sg1GYDKD2haS3YBSLjjmsgNtkEr/bn2+MQKQ5ShEXS8Kt7BGqZ gQGLFmiP4u/FPrJKlXHl2DdeP5f4AjAWLH8kKw+sMEo6we7sX5quqkNvPLBVfAUq ssMEu/BQQU5UwKtvgST7QWZjBbUeRAPF1ZCPNu5TFIvedFsVytAlWk/GN6gR+34m si12mrNJp/9mHsfoK89DgtkZnO7Mj9toBslzSxL+9y+7vBJPGhAlrAU1Q0mEHV/v hhhC6zHnuKw4i1B5IaVsD8VaMzaATbqTto5FpU8GFUGXZmAEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjcymV44c3ZQ6PqpwdrZ8QsavC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDI5NzRjMGItNzkzZi0z MDUyLTkwN2UtMjAxZGZmYmQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkl8IOBI0Kj+XzUMjEe3DBDjwLUskqPEoHo7vcg3O7JENKYtHfPOnD9 q7bBP/kly5ikZzvrhr7GhX5x3vYj6zudPZ4ujB5c3K9pTI1hYmhV4QatW+o9I7BB N2N+dry9RpEUH6XV3EOED6kn4N933chf4bM2GDL/7QqASd/X+1eZwEgwKYvXxVjE rCFP35zO/01RxAiqd4cLoK8hj15x2Z3y+n9OyFPgIST9iJp87GOrZSOfLVoMhRMy iZJBvoXimE+Sq2RbKdSytgikYhNJZWzpJ2RSB1usMJLjIKrUlNkbEVj56BQkD7sk yofTZV2VtADtCrVM1uYKPbaoVbjg6is= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:27 2026 by rpki-client