$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa File: fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa (raw, json) Hash identifier: 79QSKAewaxEcQBmY+hqjwgPNQ6l/X6emZJKsPpTtZdw= Subject key identifier: A0:F2:CA:81:19:07:14:C1:A7:F0:33:FA:0C:34:C8:C7:3F:6C:F6:A9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A36FA2C57254364BC6D20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:36:fa:2c:57:25:43:64:bc:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=10140827-c96f-4ead-8ddc-2431b6023233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:7d:b0:1f:30:72:b0:d2:ab:3a:61:45:3a: 57:c9:5b:8d:a6:33:c2:da:f9:4e:8c:3c:95:b3:4d: f7:18:47:2f:e0:1f:66:59:89:b3:6e:59:79:ee:2e: 2f:8c:be:f0:9a:bf:05:6d:60:95:69:c8:10:54:df: 41:67:b5:62:ce:4a:35:fc:66:21:4f:85:81:33:28: 02:dc:a3:47:1d:0e:7f:c2:df:5f:5e:25:a5:bb:c1: c0:c6:50:33:99:97:57:c5:60:f4:58:13:04:6f:49: a6:e2:0d:ce:7f:30:4b:c1:3f:03:c8:c0:b0:61:24: 96:2f:3a:ee:af:28:d5:56:9f:ea:a4:c2:2a:fb:ba: e1:de:11:a5:8e:dd:20:ac:b9:03:dd:90:a1:7e:c5: eb:48:96:2b:ee:ce:63:3f:bb:30:9e:aa:ea:7c:47: 57:eb:8d:48:d8:4a:c6:d7:42:ab:a8:d6:ae:59:4d: 0d:e8:a4:1a:05:3f:64:8b:78:73:0f:b8:ee:50:21: 9a:00:b5:a1:21:65:82:96:68:f8:78:53:4e:c7:dd: 5d:c9:13:83:06:a6:23:8d:51:7f:70:1d:90:13:12: b9:f3:31:e1:56:93:0a:93:88:b8:1f:2c:fa:e7:53: 2a:6a:9e:0c:dd:e3:7f:15:b2:7e:c2:ab:68:c7:ef: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:CA:81:19:07:14:C1:A7:F0:33:FA:0C:34:C8:C7:3F:6C:F6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fd579cd3-371f-3d5e-b7c7-c4c6613c2f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bf:31:e0:5f:47:c3:a5:d5:b9:0f:4f:42:24:68:0d:75:e5: e0:bc:94:6a:6d:bd:bb:fd:32:14:73:2d:4b:95:bd:79:20:57: a7:39:76:4a:ee:af:8f:cf:b2:eb:6e:88:c2:72:45:8e:11:07: 2e:69:91:43:b5:39:41:21:e4:da:9c:db:41:e6:a2:61:6a:c3: 94:94:f8:b3:a3:6b:c9:17:43:d0:01:a1:88:1e:d8:9c:85:07: 86:74:3f:3f:c0:09:26:60:bb:36:5a:78:4d:42:c6:94:a6:32: 8f:70:e3:56:3e:c5:78:47:00:96:ea:9b:7b:67:3a:82:4b:73: 14:f6:fe:55:52:00:c2:45:1a:c0:f3:5e:2a:ae:cd:70:35:ca: e0:f1:0e:96:df:7f:b1:d2:21:52:e9:02:f8:b1:0c:ca:89:2d: 65:c8:cb:de:5f:b1:61:84:af:d4:88:6d:74:6c:18:66:c7:8b: 3b:f9:8a:b8:e3:26:f9:fe:d1:42:dc:f5:8e:97:da:0d:bb:cf: 6a:25:ee:95:ee:5e:b1:e5:e6:82:25:ef:20:69:87:4a:8f:a8: 6f:9a:7d:98:4f:fb:84:20:ab:15:8f:13:d3:33:f7:9d:db:7e: 7f:3b:9c:cc:99:8f:f7:22:de:5e:a2:8b:f3:50:30:0c:e3:b0: 25:04:57:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejb6LFclQ2S8bSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTAxNDA4MjctYzk2Zi00ZWFkLThkZGMtMjQzMWI2MDIzMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBB9sB8wcrDSqzphRTpXyVuNpjPC2vlOjDyV s033GEcv4B9mWYmzbll57i4vjL7wmr8FbWCVacgQVN9BZ7Vizko1/GYhT4WBMygC 3KNHHQ5/wt9fXiWlu8HAxlAzmZdXxWD0WBMEb0mm4g3OfzBLwT8DyMCwYSSWLzru ryjVVp/qpMIq+7rh3hGljt0grLkD3ZChfsXrSJYr7s5jP7swnqrqfEdX641I2ErG 10KrqNauWU0N6KQaBT9ki3hzD7juUCGaALWhIWWClmj4eFNOx91dyRODBqYjjVF/ cB2QExK58zHhVpMKk4i4Hyz651Mqap4M3eN/FbJ+wqtox+84iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDyyoEZBxTBp/Az+gw0yMc/bPapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmQ1NzljZDMtMzcxZi0z ZDVlLWI3YzctYzRjNjYxM2MyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa/MeBfR8Ol1bkPT0IkaA115eC8lGptvbv9MhRzLUuVvXkgV6c5dkru r4/PsutuiMJyRY4RBy5pkUO1OUEh5Nqc20HmomFqw5SU+LOja8kXQ9ABoYge2JyF B4Z0Pz/ACSZguzZaeE1CxpSmMo9w41Y+xXhHAJbqm3tnOoJLcxT2/lVSAMJFGsDz XiquzXA1yuDxDpbff7HSIVLpAvixDMqJLWXIy95fsWGEr9SIbXRsGGbHizv5irjj Jvn+0ULc9Y6X2g27z2ol7pXuXrHl5oIl7yBph0qPqG+afZhP+4QgqxWPE9Mz953b fn87nMyZj/ci3l6ii/NQMAzjsCUEVwI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:49 2026 by rpki-client