$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa File: 16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa (raw, json) Hash identifier: eGRoh0su+i0yKXuZsMN5YpnZOpzm2sgFn46K3oE2o08= Subject key identifier: 2A:33:0F:57:3F:EE:C4:77:A0:2B:50:C7:AC:BD:9D:CB:D9:13:FA:59 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584D0D426CE06BD4C6BA41250400 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 396479 IP address blocks: 161.38.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6c:e0:6b:d4:c6:ba:41:25:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=25107d62-d21d-4f03-a286-b2796abb0a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:22:58:44:6a:dc:73:04:0a:a0:e9:e1:1e: 81:c9:6c:5e:de:10:71:11:ac:f8:56:83:66:a8:dd: 00:4e:58:29:f2:2d:c3:b5:92:8b:64:8a:61:d8:44: 68:8a:8c:0d:e6:18:8a:74:ad:16:dd:50:d5:22:50: 1b:06:3f:4d:6e:08:7b:44:69:81:e5:59:ad:54:f3: f8:62:61:15:b3:56:96:49:83:1c:70:3d:04:bf:55: b8:f1:53:80:78:52:da:4d:2d:15:01:91:e2:67:06: c6:d5:db:99:53:d7:3c:9c:f0:c6:da:c9:33:0f:68: 2c:c0:30:ed:04:7a:62:ce:00:12:0e:86:58:00:33: d9:42:33:85:e8:7b:0d:47:2d:45:35:e8:e2:48:ab: f3:5a:39:8b:15:e2:dc:5b:c4:7f:4a:37:ad:38:13: a4:4b:47:09:c3:99:38:f2:21:a8:f4:d4:c9:f4:29: b8:4d:a8:8d:be:82:d0:72:4a:3e:db:61:3a:7b:14: 96:00:29:b0:58:d6:53:7a:7d:2d:35:f7:2c:b3:c9: 76:b6:9b:69:9a:45:cf:f2:f8:cb:5b:b6:ea:3e:fc: 3e:ec:e7:ea:d4:24:28:14:d8:1b:91:88:ff:19:22: 19:25:d0:34:51:88:de:92:7f:26:16:7e:40:82:86: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:0F:57:3F:EE:C4:77:A0:2B:50:C7:AC:BD:9D:CB:D9:13:FA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0a:52:52:2e:af:5a:cf:c5:d2:25:0c:86:d6:4d:f2:a9:f2: 1c:42:d3:77:69:ec:ee:45:2a:b6:38:f8:4e:e7:71:c6:73:02: 0c:58:56:f1:f0:d0:45:62:d3:1f:62:7d:13:78:8c:b3:54:d8: fd:d6:e3:00:3a:e0:f2:e3:69:3c:97:f1:55:f7:2e:a2:f7:eb: 68:cd:e6:d5:1c:01:a0:8c:a5:6c:97:e5:53:21:36:f3:bc:92: 7a:a2:32:ed:0b:27:22:26:34:ce:0a:1d:95:7e:96:bd:70:92: 19:a4:c2:40:72:1b:d9:93:1e:1e:70:f9:c4:6d:72:62:ce:c7: 37:71:b6:ac:5d:8e:82:77:94:25:e4:fa:d7:a6:0b:72:5e:cf: 3c:58:64:e4:53:2d:3d:70:a8:9c:77:32:54:9d:21:b1:6f:db: 65:ca:c5:52:16:29:3b:44:3f:bb:98:19:0e:c7:28:d6:1e:83: 35:6d:29:5e:1c:b7:fe:07:bc:81:f3:14:0c:01:6f:67:ce:60: b1:2f:ec:13:95:0a:8c:89:8a:38:52:13:ea:69:df:98:62:7d: 66:68:3e:2a:66:82:33:cd:3b:58:a1:90:50:e4:60:3a:6f:5d: 77:b2:dd:1f:f6:25:e5:e9:01:d5:68:fc:8f:e5:18:12:b3:b8: f8:51:ce:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmzga9TGukElBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MjUxMDdkNjItZDIxZC00ZjAzLWEyODYtYjI3OTZhYmIwYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwiWERq3HMECqDp4R6ByWxe3hBxEaz4VoNm qN0ATlgp8i3DtZKLZIph2ERoiowN5hiKdK0W3VDVIlAbBj9Nbgh7RGmB5VmtVPP4 YmEVs1aWSYMccD0Ev1W48VOAeFLaTS0VAZHiZwbG1duZU9c8nPDG2skzD2gswDDt BHpizgASDoZYADPZQjOF6HsNRy1FNejiSKvzWjmLFeLcW8R/SjetOBOkS0cJw5k4 8iGo9NTJ9Cm4TaiNvoLQcko+22E6exSWACmwWNZTen0tNfcss8l2tptpmkXP8vjL W7bqPvw+7Ofq1CQoFNgbkYj/GSIZJdA0UYjekn8mFn5Agob3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCozD1c/7sR3oCtQx6y9ncvZE/pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvMTZjOWFhNGUtYjViNS0z YTE4LTg4YTQtMWZjNGQ3YWU2MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwKUlIur1rPxdIlDIbWTfKp8hxC03dp7O5FKrY4+E7nccZzAgxYVvHw 0EVi0x9ifRN4jLNU2P3W4wA64PLjaTyX8VX3LqL362jN5tUcAaCMpWyX5VMhNvO8 knqiMu0LJyImNM4KHZV+lr1wkhmkwkByG9mTHh5w+cRtcmLOxzdxtqxdjoJ3lCXk +temC3JezzxYZORTLT1wqJx3MlSdIbFv22XKxVIWKTtEP7uYGQ7HKNYegzVtKV4c t/4HvIHzFAwBb2fOYLEv7BOVCoyJijhSE+pp35hifWZoPipmgjPNO1ihkFDkYDpv XXey3R/2JeXpAdVo/I/lGBKzuPhRzvo= -----END CERTIFICATE-----Generated at Tue Mar 24 10:24:15 2026 by rpki-client