$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa File: e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa (raw, json) Hash identifier: odhgxIuZbBPooA4xCqxDn68x34O8KAaqZQpSmOliu6Y= Subject key identifier: 1A:C3:99:9C:40:EF:61:D7:3E:7C:20:07:47:8D:18:9F:86:A3:A5:D1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F7C026E821242EEEFD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f7:c0:26:e8:21:24:2e:ee:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9d24e606-777e-4321-bbf0-6a97a8e2e2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:76:89:71:c1:0f:e5:1b:b0:1c:6a:27:29: 0b:ff:9c:b0:ac:48:5e:c4:c1:07:68:ee:c6:e9:94: ec:ec:2c:05:35:2f:8d:1e:90:22:35:bf:5b:34:0a: 15:4c:62:fa:32:70:c7:17:05:5e:43:0c:a5:f4:c3: b9:a8:8c:5f:4c:bf:86:f0:ea:c0:4a:35:d7:6c:2c: cd:11:df:04:ea:a5:16:1b:df:d5:ea:41:79:78:f6: 04:43:6c:f8:f1:6c:c6:73:63:4b:61:1e:08:e3:45: bb:ed:90:b7:da:5e:48:33:84:98:d4:3c:3b:ae:52: d8:af:00:aa:12:78:0e:47:95:75:15:a1:8f:3a:2e: 0e:d4:f3:d0:03:62:7b:0e:aa:b3:1c:c5:00:e1:64: 7b:c1:0a:34:96:26:c5:15:9d:ee:24:98:9c:f8:79: f4:77:6d:5c:da:9f:0b:c9:e1:3e:0b:25:9a:2e:5d: 37:a9:de:39:39:0c:bc:95:1d:de:dd:53:9f:ba:c7: cb:57:42:b1:fe:50:8b:a1:f2:d0:88:23:c1:de:27: ab:f0:59:e4:ad:da:76:a1:fe:ef:41:8b:cf:0b:22: 67:1a:e5:45:f3:4d:50:9f:d0:0f:89:b0:11:cd:ce: cc:4e:a1:9c:79:f8:53:0d:d5:e7:e3:eb:b1:c2:50: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:99:9C:40:EF:61:D7:3E:7C:20:07:47:8D:18:9F:86:A3:A5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5e49e9d-9fe5-3333-b06d-a45def500a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:74:7e:a9:c3:3e:15:c8:65:d2:a8:8c:51:6b:f2:b5:f4:9a: 43:a8:93:a2:8a:21:39:6d:6c:03:7f:f2:1d:62:c8:b6:9b:31: 18:60:d4:d3:72:28:36:8d:0a:ad:c7:83:fe:50:e6:08:87:84: e4:c8:88:43:72:94:b9:39:ce:99:e4:fc:51:31:cf:58:82:b6: 4b:68:05:36:fe:d5:48:00:0c:10:c9:d2:0b:1c:8b:43:ac:86: be:80:b2:3d:21:58:4e:c2:0a:a3:66:ca:7f:2c:a5:29:a8:4a: 5b:c1:f4:82:da:22:70:b2:09:9e:5d:f6:a5:b2:95:9b:fe:8d: 71:b0:f5:42:3b:10:10:18:ee:c6:32:13:0d:6c:89:62:25:e5: 62:cb:69:8c:ca:c0:2a:65:f7:87:62:80:37:9f:71:c3:21:fb: 9c:b4:58:ff:06:c2:af:2d:37:c5:3c:0a:0f:3f:c2:f9:ed:d0: 51:cb:4b:f7:34:68:7a:73:1e:71:f3:c3:0e:70:37:f7:47:17: 7d:71:3d:01:09:28:91:a6:88:73:1d:3b:10:a4:4a:24:57:01: e6:9f:17:9d:15:5f:1f:4e:d8:e2:3d:11:cf:fb:d0:67:bc:76: ca:62:02:7c:3a:85:15:64:a6:4c:49:88:b4:7c:63:9c:d7:fd: fa:f2:22:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeffAJughJC7u/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWQyNGU2MDYtNzc3ZS00MzIxLWJiZjAtNmE5N2E4ZTJlMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0F2iXHBD+UbsBxqJykL/5ywrEhexMEHaO7G 6ZTs7CwFNS+NHpAiNb9bNAoVTGL6MnDHFwVeQwyl9MO5qIxfTL+G8OrASjXXbCzN Ed8E6qUWG9/V6kF5ePYEQ2z48WzGc2NLYR4I40W77ZC32l5IM4SY1Dw7rlLYrwCq EngOR5V1FaGPOi4O1PPQA2J7DqqzHMUA4WR7wQo0libFFZ3uJJic+Hn0d21c2p8L yeE+CyWaLl03qd45OQy8lR3e3VOfusfLV0Kx/lCLofLQiCPB3ier8Fnkrdp2of7v QYvPCyJnGuVF801Qn9APibARzc7MTqGcefhTDdXn4+uxwlBzawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrDmZxA72HXPnwgB0eNGJ+Go6XRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVlNDllOWQtOWZlNS0z MzMzLWIwNmQtYTQ1ZGVmNTAwYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC90fqnDPhXIZdKojFFr8rX0mkOok6KKITltbAN/8h1iyLabMRhg1NNy KDaNCq3Hg/5Q5giHhOTIiENylLk5zpnk/FExz1iCtktoBTb+1UgADBDJ0gsci0Os hr6Asj0hWE7CCqNmyn8spSmoSlvB9ILaInCyCZ5d9qWylZv+jXGw9UI7EBAY7sYy Ew1siWIl5WLLaYzKwCpl94digDefccMh+5y0WP8Gwq8tN8U8Cg8/wvnt0FHLS/c0 aHpzHnHzww5wN/dHF31xPQEJKJGmiHMdOxCkSiRXAeafF50VXx9O2OI9Ec/70Ge8 dspiAnw6hRVkpkxJiLR8Y5zX/fryIpQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:52 2026 by rpki-client