$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa File: faae56c8-7856-3d07-9163-8b7f3a9069cc.roa (raw, json) Hash identifier: umeiqGp6kHlsc79I4wHAv9FPkY8bcCVwfJoBwRg1rY8= Subject key identifier: 61:41:37:00:B8:B4:9B:97:9C:D7:DA:E2:D9:BB:74:CC:45:4B:FD:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A27974DFF31588657A700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:27:97:4d:ff:31:58:86:57:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=07cfc33a-580e-44d7-a9b8-6de5adbcaa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:fd:70:fb:76:79:c7:f7:ab:de:1a:1e:7a: 50:d6:7c:34:7d:c2:77:50:b3:42:c0:e4:62:cb:1d: 79:3d:aa:22:56:7e:3b:cf:84:5d:72:e4:bd:ba:2b: e0:f2:94:74:fb:c5:fd:8a:06:cb:a5:65:76:6c:b8: b1:38:32:6a:b3:2b:05:78:5d:48:d8:4c:d4:0f:d3: d0:bc:e0:ef:df:eb:79:cd:36:b1:36:86:c2:68:dd: 6b:28:f0:34:bd:f1:7f:61:29:87:47:68:8a:30:1a: 13:83:2f:a8:9f:ac:b9:5f:f2:8e:6b:e7:1d:56:27: f4:1a:71:ec:39:5a:a2:ae:f9:68:d1:01:be:16:a1: 4a:ea:bd:84:3f:61:67:63:65:43:cf:14:45:7d:4a: e4:b8:78:9a:d2:88:bf:31:c2:f0:46:89:03:45:ce: 13:c8:46:d2:dc:71:f4:91:ef:b8:9f:ab:b9:2c:50: 42:cd:53:f5:f2:70:31:3b:64:f4:a6:3f:63:56:f8: 9b:e2:a2:31:47:a5:7d:2f:ba:2b:70:fb:81:4d:8b: 2d:e0:b3:e7:b3:28:cd:ff:47:09:e6:78:c9:d1:50: 0b:1c:5c:24:13:28:7b:51:86:a2:ee:02:eb:5e:63: 8c:be:ed:dd:e4:e9:d3:35:71:97:39:2e:1e:89:d1: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:41:37:00:B8:B4:9B:97:9C:D7:DA:E2:D9:BB:74:CC:45:4B:FD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faae56c8-7856-3d07-9163-8b7f3a9069cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:17:98:5f:db:53:2f:dc:44:6b:d6:fd:e4:39:7e:a2:6e:52: 72:76:47:a3:e8:c8:44:54:99:68:6b:42:32:52:47:5e:1b:15: f7:04:a9:a5:ca:84:3b:c9:f4:a1:7a:b3:c8:9a:8e:7c:62:e0: bb:fd:1b:b6:c5:e7:95:6d:f6:bd:2a:cc:2f:76:92:a3:73:c9: be:1d:27:a0:04:52:88:be:12:e1:da:68:5c:16:47:37:01:5a: d5:04:5a:ee:5f:fd:f3:27:41:6b:94:7d:0d:c8:fc:8a:a9:40: e5:a7:02:3a:18:77:64:6e:ef:60:53:f8:7c:fd:16:ba:06:87: 9a:a1:19:a1:ab:a9:16:f0:91:93:4c:f4:1e:22:5f:c4:87:1c: 0c:10:01:cc:34:bc:b7:8b:e3:8d:93:e0:ac:26:2b:d6:22:a5: 6d:05:8a:1a:4c:13:48:a4:d1:f0:8d:b9:d4:43:3c:31:97:4f: 27:24:f3:f2:04:78:a6:87:4c:21:93:1e:ce:2c:8a:6f:eb:cc: fb:fb:43:7b:9b:95:fc:f1:a8:d6:2d:82:b0:ac:ee:9d:49:28: 57:07:64:d6:3f:cf:5d:df:e5:b1:7a:0c:69:e3:a0:7d:c5:b0: 25:88:77:fa:db:a0:47:a5:65:12:3a:19:b3:18:d5:19:54:f6: ed:69:97:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeieXTf8xWIZXpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDdjZmMzM2EtNTgwZS00NGQ3LWE5YjgtNmRlNWFkYmNhYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vz9cPt2ecf3q94aHnpQ1nw0fcJ3ULNCwORi yx15PaoiVn47z4RdcuS9uivg8pR0+8X9igbLpWV2bLixODJqsysFeF1I2EzUD9PQ vODv3+t5zTaxNobCaN1rKPA0vfF/YSmHR2iKMBoTgy+on6y5X/KOa+cdVif0GnHs OVqirvlo0QG+FqFK6r2EP2FnY2VDzxRFfUrkuHia0oi/McLwRokDRc4TyEbS3HH0 ke+4n6u5LFBCzVP18nAxO2T0pj9jVvib4qIxR6V9L7orcPuBTYst4LPnsyjN/0cJ 5njJ0VALHFwkEyh7UYai7gLrXmOMvu3d5OnTNXGXOS4eidHE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFBNwC4tJuXnNfa4tm7dMxFS/3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFhZTU2YzgtNzg1Ni0z ZDA3LTkxNjMtOGI3ZjNhOTA2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8XmF/bUy/cRGvW/eQ5fqJuUnJ2R6PoyERUmWhrQjJSR14bFfcEqaXK hDvJ9KF6s8iajnxi4Lv9G7bF55Vt9r0qzC92kqNzyb4dJ6AEUoi+EuHaaFwWRzcB WtUEWu5f/fMnQWuUfQ3I/IqpQOWnAjoYd2Ru72BT+Hz9FroGh5qhGaGrqRbwkZNM 9B4iX8SHHAwQAcw0vLeL442T4KwmK9YipW0FihpME0ik0fCNudRDPDGXTyck8/IE eKaHTCGTHs4sim/rzPv7Q3ublfzxqNYtgrCs7p1JKFcHZNY/z13f5bF6DGnjoH3F sCWId/rboEelZRI6GbMY1RlU9u1pl8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:21 2026 by rpki-client