$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa File: e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa (raw, json) Hash identifier: XUcSjo2k0BTpqSECQ53+DgEXmgH6rSWU/u6LY53tTPM= Subject key identifier: AA:86:57:D6:33:10:89:A3:55:0E:46:10:13:19:AA:6A:13:28:EE:CD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435E8B564231E3A90FFF980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 161.232.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:e8:b5:64:23:1e:3a:90:ff:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=5b538fe9-e767-4ab7-a872-846603bb93e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:6a:c8:38:56:2f:ed:3c:fa:cf:17:2b:76: 09:0b:a0:40:12:76:2f:ff:13:d7:b2:f4:86:f6:fc: cd:80:6f:e4:f4:31:10:ff:8a:2d:30:ec:61:c9:a7: 99:b5:8c:34:26:ba:a8:9b:88:d7:49:cc:75:aa:ac: 45:48:de:1e:de:72:bf:02:9a:f7:74:f3:d1:30:d7: 38:45:3a:49:a0:b5:94:cf:e9:b5:23:ac:ae:ad:cc: bd:e4:d7:a7:85:1a:65:ca:4f:28:3b:40:c8:f9:a9: d2:c3:db:f7:24:de:eb:43:ca:df:5e:d9:5a:44:97: e9:ad:4f:d0:4e:c5:17:ab:e7:34:bc:69:00:dd:59: 4d:5c:44:9f:fe:74:48:f7:f3:a1:68:51:48:6e:49: 6a:9f:b5:44:37:05:c7:0f:6e:bf:61:57:ab:1d:b9: ba:08:7a:0c:08:7f:8c:7f:fe:14:ef:98:3a:da:e3: a9:f8:3a:56:10:c7:05:9d:cd:f4:18:61:82:99:52: 35:1d:10:68:53:35:4a:4a:ea:cb:28:fe:13:df:6f: 12:86:d9:31:a4:6b:02:ed:1a:bd:57:c9:2c:ef:aa: 9b:fb:9c:e6:1f:4b:ec:fb:95:dd:0a:84:df:84:24: 19:39:73:5b:21:ab:3f:c9:d8:c5:92:2e:79:85:22: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:57:D6:33:10:89:A3:55:0E:46:10:13:19:AA:6A:13:28:EE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5adaf7d-d750-35a4-bbcd-e9a5f0853f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:af:4f:f7:4d:c7:43:7f:42:5d:a4:62:ea:23:8c:43:5f:ba: 42:d2:8c:93:6c:a2:10:41:dc:04:88:ec:67:c9:fe:60:6e:0c: f4:c7:88:fb:a4:7a:0b:ce:1f:26:6f:09:8a:4f:1f:30:00:d9: 1f:8b:d4:19:74:1c:b8:0a:80:35:68:98:8b:ce:af:77:c2:ae: b5:26:99:ec:55:ef:19:06:e4:bf:69:31:5c:56:31:7c:1e:b2: 9f:5c:3e:86:19:9b:09:6a:aa:77:6d:81:ed:6b:9c:f6:6a:b3: 97:64:e6:fc:83:03:d1:6e:70:bd:70:4b:91:e1:77:f3:1f:33: c4:b7:60:a2:90:ba:15:cd:5a:86:ac:49:bd:69:42:ea:3d:c1: 2e:64:7f:35:b1:6b:93:63:fc:ff:57:56:b4:7d:ca:bf:1c:e8: fa:1f:7c:2b:8d:ab:82:a5:85:75:02:b6:26:c6:b7:cc:ce:7c: 96:92:08:c7:a2:70:96:31:fd:72:a4:d2:da:eb:d8:93:06:04: cf:61:0e:b2:63:e3:4f:a2:a1:65:a6:7a:4c:0f:9d:80:b2:65: 6e:96:bf:15:81:fa:3b:44:42:e2:b1:24:8f:f1:44:38:a5:2d: f7:61:ed:03:94:66:d7:29:1f:5b:b6:25:32:77:e4:40:28:da: fc:1a:2c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENei1ZCMeOpD/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NWI1MzhmZTktZTc2Ny00YWI3LWE4NzItODQ2NjAzYmI5M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHhqyDhWL+08+s8XK3YJC6BAEnYv/xPXsvSG 9vzNgG/k9DEQ/4otMOxhyaeZtYw0Jrqom4jXScx1qqxFSN4e3nK/Apr3dPPRMNc4 RTpJoLWUz+m1I6yurcy95NenhRplyk8oO0DI+anSw9v3JN7rQ8rfXtlaRJfprU/Q TsUXq+c0vGkA3VlNXESf/nRI9/OhaFFIbklqn7VENwXHD26/YVerHbm6CHoMCH+M f/4U75g62uOp+DpWEMcFnc30GGGCmVI1HRBoUzVKSurLKP4T328ShtkxpGsC7Rq9 V8ks76qb+5zmH0vs+5XdCoTfhCQZOXNbIas/ydjFki55hSK6ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqGV9YzEImjVQ5GEBMZqmoTKO7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVhZGFmN2QtZDc1MC0z NWE0LWJiY2QtZTlhNWYwODUzZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6vT/dNx0N/Ql2kYuojjENfukLSjJNsohBB3ASI7GfJ/mBuDPTHiPuk egvOHyZvCYpPHzAA2R+L1Bl0HLgKgDVomIvOr3fCrrUmmexV7xkG5L9pMVxWMXwe sp9cPoYZmwlqqndtge1rnPZqs5dk5vyDA9FucL1wS5Hhd/MfM8S3YKKQuhXNWoas Sb1pQuo9wS5kfzWxa5Nj/P9XVrR9yr8c6PoffCuNq4KlhXUCtibGt8zOfJaSCMei cJYx/XKk0trr2JMGBM9hDrJj40+ioWWmekwPnYCyZW6WvxWB+jtEQuKxJI/xRDil Lfdh7QOUZtcpH1u2JTJ35EAo2vwaLG0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:58:50 2026 by rpki-client