$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa File: d4cd4395-df66-327b-a2b7-1802e16dab55.roa (raw, json) Hash identifier: gn4F5s5TkndcmC5ubtNjKyjbcOoXRlHbQGT8/8fsySA= Subject key identifier: A1:52:FB:92:CE:FC:9F:89:89:DF:FD:61:59:AA:98:42:14:D9:8F:B2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3B014384AB29B908AFC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:01:43:84:ab:29:b9:08:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=38f85cf4-a722-4c55-b9a8-c61862072e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:8d:06:92:b0:8d:c9:1b:09:18:12:dd:94: 84:d5:cd:df:67:3a:1c:11:42:88:7c:10:93:61:a9: c8:9c:10:e1:bf:95:47:c6:74:9b:28:3d:f7:7e:69: 12:51:32:11:6f:32:25:e8:7e:6a:37:9d:34:04:ef: 1c:fc:c9:4a:be:fd:04:73:cb:85:ad:69:31:eb:16: c5:1a:fd:f0:f2:68:a1:45:ee:ac:8e:cb:4a:eb:c5: 2e:55:d0:b7:86:b2:4d:82:50:78:b1:20:27:42:40: 7c:26:24:fa:24:a3:02:03:7c:88:56:47:0e:53:bf: ae:46:66:be:1c:52:7f:c8:57:5f:0c:96:1e:fd:c2: 27:5a:96:65:ce:b6:13:2a:f1:3d:03:67:ef:55:2f: 04:12:b7:91:3f:37:f3:2c:ec:d3:a3:cb:1f:ab:5b: fb:1c:7e:1d:89:8e:85:83:73:e6:17:ef:34:76:5e: fc:aa:75:c3:9a:c9:a1:9c:54:18:b8:b2:6e:42:63: 44:a2:a8:af:cf:9c:69:34:16:ce:b9:81:1e:46:49: 1f:19:40:7e:68:8e:f4:22:96:eb:b2:0a:75:ae:dd: fc:71:09:f6:16:e3:58:0c:88:36:a1:b9:27:c4:1d: 05:28:b6:7b:30:fe:63:d9:a9:da:5a:0b:2b:a7:b3: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:FB:92:CE:FC:9F:89:89:DF:FD:61:59:AA:98:42:14:D9:8F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4cd4395-df66-327b-a2b7-1802e16dab55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f2:d6:70:8e:74:8a:d0:ae:4e:98:35:2f:00:84:3a:1e:1e: 5d:8b:d5:f5:0a:07:49:13:4e:99:b9:4f:6c:0c:d4:de:27:37: 80:9b:0f:d8:05:17:7c:3f:31:9b:b6:81:ad:93:ff:6e:83:2d: e8:47:2f:95:ad:de:38:75:09:8a:e8:fe:f3:68:d7:48:f9:6c: be:3f:45:a0:f5:fe:ee:a0:e9:6a:49:0b:d7:dc:e8:40:a3:d1: cb:5c:05:a1:9a:55:37:85:ad:f5:4d:88:8b:cd:0d:fb:0a:a2: b4:b4:60:87:8f:21:32:23:15:22:ac:b6:df:b7:ac:57:ea:1c: b4:08:4d:52:03:98:96:a4:72:47:34:65:ce:f9:da:61:1f:ff: 33:46:75:4a:8e:d7:f6:ba:15:0d:60:38:89:82:fc:5d:40:5f: 74:dc:9e:dd:de:5d:57:0c:cf:a4:60:6a:a1:7b:dd:d9:fb:5b: a7:78:26:2a:1b:5f:69:1d:5b:43:8a:b7:54:84:ca:14:63:77: 4e:85:55:11:34:37:26:f2:cb:72:43:ff:6f:09:c6:b7:85:ab: 07:30:75:1e:51:70:81:81:4c:c2:5c:e4:b8:cf:61:6c:d3:28: f4:0d:03:06:3d:63:d9:29:98:b8:f0:fe:52:2b:f9:15:5b:c0: ec:6a:4f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejsBQ4SrKbkIr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzhmODVjZjQtYTcyMi00YzU1LWI5YTgtYzYxODYyMDcyZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/GNBpKwjckbCRgS3ZSE1c3fZzocEUKIfBCT YanInBDhv5VHxnSbKD33fmkSUTIRbzIl6H5qN500BO8c/MlKvv0Ec8uFrWkx6xbF Gv3w8mihRe6sjstK68UuVdC3hrJNglB4sSAnQkB8JiT6JKMCA3yIVkcOU7+uRma+ HFJ/yFdfDJYe/cInWpZlzrYTKvE9A2fvVS8EEreRPzfzLOzTo8sfq1v7HH4diY6F g3PmF+80dl78qnXDmsmhnFQYuLJuQmNEoqivz5xpNBbOuYEeRkkfGUB+aI70Ipbr sgp1rt38cQn2FuNYDIg2obknxB0FKLZ7MP5j2anaWgsrp7MInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFS+5LO/J+Jid/9YVmqmEIU2Y+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDRjZDQzOTUtZGY2Ni0z MjdiLWEyYjctMTgwMmUxNmRhYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjy1nCOdIrQrk6YNS8AhDoeHl2L1fUKB0kTTpm5T2wM1N4nN4CbD9gF F3w/MZu2ga2T/26DLehHL5Wt3jh1CYro/vNo10j5bL4/RaD1/u6g6WpJC9fc6ECj 0ctcBaGaVTeFrfVNiIvNDfsKorS0YIePITIjFSKstt+3rFfqHLQITVIDmJakckc0 Zc752mEf/zNGdUqO1/a6FQ1gOImC/F1AX3Tcnt3eXVcMz6RgaqF73dn7W6d4Jiob X2kdW0OKt1SEyhRjd06FVRE0Nybyy3JD/28JxreFqwcwdR5RcIGBTMJc5LjPYWzT KPQNAwY9Y9kpmLjw/lIr+RVbwOxqT+8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:27 2026 by rpki-client