$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa File: da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa (raw, json) Hash identifier: acxBUC95htw0REUyDyFTApIIy/QJkYS+zmddLecPZCc= Subject key identifier: AD:04:D7:B8:05:06:54:DA:03:0F:39:98:C6:E1:77:63:ED:38:FB:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3764FFED401D4ED9E400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:37:64:ff:ed:40:1d:4e:d9:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9d298d07-7d2a-4941-b7ec-e41c0b85cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:06:8d:48:9c:3f:97:a1:c3:41:7f:c9:70: e5:ff:91:52:a2:69:87:6e:76:13:29:e9:89:60:7b: d3:76:f0:3c:c3:82:f3:2f:44:a1:8e:22:ab:18:24: fe:d2:24:ed:8a:3a:e6:69:26:a0:6f:f6:c0:5f:32: f4:cf:66:3b:e2:3e:b3:04:46:d0:74:49:f3:a4:e6: 41:9c:9c:b8:73:a0:8d:55:27:99:d9:b1:03:7e:48: 32:a7:de:cb:4f:8c:fe:44:46:ac:51:5d:80:21:6c: b8:88:2f:93:c2:bf:ff:5b:91:69:3e:58:3f:87:42: 6d:b6:15:19:4f:fb:15:ff:f7:eb:ad:b8:aa:a0:19: b8:47:2a:f2:83:6d:fb:a7:c3:3f:50:33:0f:25:a4: eb:dc:03:a6:82:cf:61:5a:b5:fc:59:8e:8b:4f:8c: a4:8d:29:a4:05:81:ef:80:41:7e:f1:e5:58:ae:70: 4b:52:48:42:3d:87:1e:0d:55:b6:3e:52:6d:f5:47: 77:3b:83:f4:b9:ae:61:35:d2:25:2f:3a:c5:83:89: 53:6d:b7:50:81:e6:4d:06:10:00:b0:d5:d7:80:0d: b9:3d:09:99:39:2f:62:9d:7d:51:2d:3a:4b:0b:d3: 61:6e:2d:d9:fd:46:fd:eb:d6:ef:59:0f:f7:5c:11: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:04:D7:B8:05:06:54:DA:03:0F:39:98:C6:E1:77:63:ED:38:FB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:93:91:ac:62:aa:f2:92:43:f8:b7:0a:84:54:70:6f:ea:44: 9c:55:53:d2:5d:c6:3b:93:d5:06:f7:eb:39:7a:3e:c4:e5:27: 91:77:1f:c3:4b:0f:25:1f:db:d4:39:00:ca:af:7c:b3:11:65: 23:3b:50:8b:77:04:5c:73:7b:b9:50:e9:31:c3:d9:be:74:6b: eb:a2:eb:be:3e:47:08:31:38:da:49:bb:85:ab:33:f1:a9:b7: 0a:48:a3:1b:00:55:fc:34:66:0e:50:2b:6c:56:6a:37:c7:c4: 12:41:6c:3e:86:45:b0:fb:1b:6f:86:67:00:27:5a:7e:10:95: 05:c8:df:12:88:fd:09:6b:60:b6:aa:a6:ac:9c:11:91:bf:a6: 95:d5:b4:f8:ea:c4:1c:25:88:23:cf:be:84:fd:6e:4d:9e:bf: 2d:cc:34:66:14:46:83:8d:41:2d:21:c7:cb:da:21:48:ed:5f: 2a:07:8e:cd:b7:21:59:1a:46:9c:a8:a7:54:2d:2a:93:e1:05: 8c:a7:50:ae:3f:2a:f0:0a:db:f9:31:f4:cb:7e:38:9a:59:6d: 33:4c:08:35:10:26:97:08:7f:2f:e5:33:8d:36:a3:82:9d:e0: 16:ed:d1:bc:a0:9b:38:cb:bb:72:3d:08:9f:28:fe:55:28:7a: 01:0d:71:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejdk/+1AHU7Z5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWQyOThkMDctN2QyYS00OTQxLWI3ZWMtZTQxYzBiODVjYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgGjUicP5ehw0F/yXDl/5FSommHbnYTKemJ YHvTdvA8w4LzL0ShjiKrGCT+0iTtijrmaSagb/bAXzL0z2Y74j6zBEbQdEnzpOZB nJy4c6CNVSeZ2bEDfkgyp97LT4z+REasUV2AIWy4iC+Twr//W5FpPlg/h0JtthUZ T/sV//frrbiqoBm4Ryryg237p8M/UDMPJaTr3AOmgs9hWrX8WY6LT4ykjSmkBYHv gEF+8eVYrnBLUkhCPYceDVW2PlJt9Ud3O4P0ua5hNdIlLzrFg4lTbbdQgeZNBhAA sNXXgA25PQmZOS9inX1RLTpLC9Nhbi3Z/Ub969bvWQ/3XBHFFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0E17gFBlTaAw85mMbhd2PtOPsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGE0MDE0YTktOWFiMC0z YWI3LWEyN2QtNDhhM2MzOWY5NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6TkaxiqvKSQ/i3CoRUcG/qRJxVU9JdxjuT1Qb36zl6PsTlJ5F3H8NL DyUf29Q5AMqvfLMRZSM7UIt3BFxze7lQ6THD2b50a+ui674+RwgxONpJu4WrM/Gp twpIoxsAVfw0Zg5QK2xWajfHxBJBbD6GRbD7G2+GZwAnWn4QlQXI3xKI/QlrYLaq pqycEZG/ppXVtPjqxBwliCPPvoT9bk2evy3MNGYURoONQS0hx8vaIUjtXyoHjs23 IVkaRpyop1QtKpPhBYynUK4/KvAK2/kx9Mt+OJpZbTNMCDUQJpcIfy/lM402o4Kd 4Bbt0bygmzjLu3I9CJ8o/lUoegENcfE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:47 2026 by rpki-client