$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa File: 496f17e0-3824-37af-a3f6-19223c789842.roa (raw, json) Hash identifier: wNJebDrrRtj+Kdyk2LAnhEZkwoUJ9+ocvFuiFzzrV1c= Subject key identifier: BD:38:AF:31:FD:86:66:C7:EC:C6:09:B4:3A:33:0E:62:0C:4A:6E:3A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435DC589A968A121E9A2E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 161.232.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:dc:58:9a:96:8a:12:1e:9a:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=0f031af1-33c2-45e0-81ff-2066d2bea69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:61:ab:67:aa:30:dd:eb:84:21:5b:6f:b2: 36:11:4f:cc:8d:a5:31:d7:34:d9:22:97:52:f5:64: b4:06:27:eb:26:df:c0:4e:a1:7f:b3:4c:2f:02:5b: 0b:ea:92:9a:e0:8f:56:0d:c8:26:11:a5:ea:44:e0: 89:ad:ef:c0:cc:13:28:2d:00:78:22:49:33:60:59: 41:64:b4:41:51:a7:46:58:52:4c:66:b7:e4:7f:10: e9:6a:14:46:4c:ca:30:70:89:26:b2:27:26:46:04: d2:fc:5a:dd:13:9a:3f:22:ad:d2:88:e4:58:39:e2: 09:a8:d5:65:9d:4e:33:29:38:13:43:b4:ac:03:fd: 75:21:7a:0c:c4:64:e5:83:40:f7:29:74:6d:d2:a5: 97:90:e1:c0:5c:c2:05:7f:71:a8:9c:17:c0:a5:d6: cd:03:98:b4:ee:8c:64:c3:a2:71:b2:f6:17:ce:97: 3d:51:b1:4c:03:b3:06:e9:c2:4c:7b:04:f3:00:0d: f8:13:51:96:b5:b0:9d:bc:cb:3a:8c:5d:2b:da:b3: b9:ac:90:8e:a4:a6:a9:9c:5d:6f:4c:9c:52:a9:66: 04:cc:9c:f4:fe:68:1c:05:e8:52:45:b3:39:53:4f: 71:2e:94:06:2d:07:f8:6f:87:5b:1b:f5:1e:00:ef: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:38:AF:31:FD:86:66:C7:EC:C6:09:B4:3A:33:0E:62:0C:4A:6E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/496f17e0-3824-37af-a3f6-19223c789842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ba:0f:3c:3b:cd:cf:54:01:78:4a:db:16:41:73:5d:14:9b: 88:86:3b:52:ad:37:72:15:1f:66:f4:ea:43:2f:29:97:34:fa: 30:24:dc:d4:12:2c:b4:0f:26:49:ab:ed:1e:69:cf:bf:82:b0: b4:74:3f:83:5d:13:5e:3c:80:b9:6e:be:61:ce:20:d4:70:59: 12:b8:1b:11:db:a4:97:7e:00:fc:3f:6b:56:f6:98:56:f3:db: 9e:8d:0a:7c:1b:90:7c:5e:b6:fc:07:43:52:b0:c4:65:0d:50: cc:62:91:cd:f7:c7:aa:55:89:75:9c:69:2c:4e:9b:b3:74:62: 08:c3:3b:31:09:17:18:a8:3f:04:a8:dc:d8:06:0b:95:c5:4f: 35:8b:0d:19:da:6d:f4:c5:d5:d3:76:bc:dd:6d:01:04:c0:52: f6:86:56:70:f8:f2:d8:af:53:21:f7:a7:80:9d:36:e1:9c:cc: a2:d3:0d:2a:c9:78:20:20:84:a3:b4:49:9c:8f:63:37:a3:be: fe:9b:f2:46:4c:e3:24:ef:a4:e2:3c:87:76:17:1a:9f:9e:59: d5:19:10:88:db:cd:90:10:02:e1:22:31:05:6a:8f:1a:06:9b: 40:7d:5a:c4:15:59:70:7d:7a:17:31:88:dd:b8:8a:46:92:55: b8:db:bd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdxYmpaKEh6aLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MGYwMzFhZjEtMzNjMi00NWUwLTgxZmYtMjA2NmQyYmVhNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xxhq2eqMN3rhCFbb7I2EU/MjaUx1zTZIpdS 9WS0BifrJt/ATqF/s0wvAlsL6pKa4I9WDcgmEaXqROCJre/AzBMoLQB4IkkzYFlB ZLRBUadGWFJMZrfkfxDpahRGTMowcIkmsicmRgTS/FrdE5o/Iq3SiORYOeIJqNVl nU4zKTgTQ7SsA/11IXoMxGTlg0D3KXRt0qWXkOHAXMIFf3GonBfApdbNA5i07oxk w6JxsvYXzpc9UbFMA7MG6cJMewTzAA34E1GWtbCdvMs6jF0r2rO5rJCOpKapnF1v TJxSqWYEzJz0/mgcBehSRbM5U09xLpQGLQf4b4dbG/UeAO+z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL04rzH9hmbH7MYJtDozDmIMSm46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDk2ZjE3ZTAtMzgyNC0z N2FmLWEzZjYtMTkyMjNjNzg5ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF66Dzw7zc9UAXhK2xZBc10Um4iGO1KtN3IVH2b06kMvKZc0+jAk3NQS LLQPJkmr7R5pz7+CsLR0P4NdE148gLluvmHOINRwWRK4GxHbpJd+APw/a1b2mFbz 256NCnwbkHxetvwHQ1KwxGUNUMxikc33x6pViXWcaSxOm7N0YgjDOzEJFxioPwSo 3NgGC5XFTzWLDRnabfTF1dN2vN1tAQTAUvaGVnD48tivUyH3p4CdNuGczKLTDSrJ eCAghKO0SZyPYzejvv6b8kZM4yTvpOI8h3YXGp+eWdUZEIjbzZAQAuEiMQVqjxoG m0B9WsQVWXB9ehcxiN24ikaSVbjbvdY= -----END CERTIFICATE-----Generated at Sat Jun 13 17:34:25 2026 by rpki-client