$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa File: d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json) Hash identifier: kzVuyXAe6CARVxdwKQhtNv7uQAtJVkhtNx8FrwqT328= Subject key identifier: 6A:CE:25:5B:C4:5C:38:08:CA:E0:E9:C4:C3:BD:9D:2F:B0:C5:DA:4F Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584D0D426CF01ACC1262B533CCA0 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 396479 IP address blocks: 161.38.192.0/22 maxlen: 24 161.38.196.0/22 maxlen: 24 161.38.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6c:f0:1a:cc:12:62:b5:33:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=7a09c52f-8454-446d-9e0c-37f9ac1c577a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:90:47:2c:51:d0:96:af:d9:e6:a9:e2:ec: c6:4e:07:92:b9:ed:cc:6b:1a:76:fa:a4:04:b6:87: 1f:0a:7f:f2:0a:67:d8:56:3d:9d:3e:e7:a6:6a:cb: 15:00:d5:41:60:98:50:e9:75:a2:8c:35:c1:17:f6: d3:c6:c0:21:e2:70:d0:dd:d1:55:2b:9d:f6:d2:83: fc:ac:aa:ec:ea:74:59:62:50:fa:7d:fc:cf:69:c2: ef:46:63:bf:d2:04:c5:2d:1c:13:72:6d:0f:cb:2d: 12:57:58:ea:42:1f:8f:97:4f:97:c4:9b:b2:00:31: ea:8d:a3:08:bd:c1:85:86:c3:43:e4:08:28:fd:1f: 4f:ec:b9:2f:1c:ed:07:7e:d0:9d:5b:f5:b8:6c:9c: e5:3f:dd:cc:d8:11:7a:d9:f0:a0:88:55:e4:18:e9: 99:64:1b:ba:c4:be:e0:f8:1f:d5:30:79:d7:49:9e: 8e:5d:ea:03:a7:ce:bf:9f:e1:2f:fc:1a:f6:c6:43: dc:48:fc:b6:3d:9e:61:a4:1e:f1:d3:a8:35:34:1d: 94:21:f0:df:97:e1:c1:bc:e5:54:92:f6:ca:fa:b6: c6:21:a3:e0:e6:f0:47:e2:a6:d1:5b:66:df:d7:82: f4:04:1a:ae:36:5c:f1:e9:a1:60:c8:5d:07:bb:f2: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CE:25:5B:C4:5C:38:08:CA:E0:E9:C4:C3:BD:9D:2F:B0:C5:DA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0-161.38.203.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ea:3f:f8:d5:fc:4c:a6:e2:61:ff:b6:be:38:e1:d2:60:96: 3d:52:8d:4a:76:08:03:a8:c0:90:db:3a:28:98:68:c1:9e:8e: 32:19:e0:71:e4:20:d4:2f:41:03:32:c5:4b:57:09:f8:ee:b0: b3:f1:41:a4:07:5c:68:72:52:93:3e:58:29:67:3d:0f:8b:2e: 2a:90:94:2e:01:48:c0:17:77:64:4b:57:38:e2:74:d6:aa:8f: 6b:dd:58:58:fe:d3:7c:83:01:ef:8a:1a:af:61:8d:ea:07:52: 45:b3:b1:82:62:e4:35:dd:31:e4:b8:00:56:d1:22:b7:1c:e3: ef:eb:e6:e5:eb:ca:c2:16:1b:1a:6c:fb:96:fb:77:fd:c0:1f: 44:b9:46:52:c1:af:44:bc:0d:c6:29:47:6b:4e:92:b4:e0:62: 80:53:cc:6a:dc:3d:f8:c2:9e:22:65:82:8f:d5:72:ad:43:dc: d7:37:97:66:c8:53:09:8f:b2:f6:ba:bf:fb:72:c6:37:d2:b6: ff:f0:6f:9c:73:78:66:2b:3c:16:8b:ec:94:28:0d:d1:eb:81: fe:06:71:24:6f:e6:95:b9:47:b9:17:d6:a4:6b:c4:09:c7:3c: 73:5a:e5:ea:ec:b3:c4:ab:ab:8d:00:be:31:86:39:53:88:20: 4e:45:ea:7c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0NQmzwGswSYrUzzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2EwOWM1MmYtODQ1NC00NDZkLTllMGMtMzdmOWFjMWM1NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9iQRyxR0Jav2eap4uzGTgeSue3Maxp2+qQE tocfCn/yCmfYVj2dPuemassVANVBYJhQ6XWijDXBF/bTxsAh4nDQ3dFVK5320oP8 rKrs6nRZYlD6ffzPacLvRmO/0gTFLRwTcm0Pyy0SV1jqQh+Pl0+XxJuyADHqjaMI vcGFhsND5Ago/R9P7LkvHO0HftCdW/W4bJzlP93M2BF62fCgiFXkGOmZZBu6xL7g +B/VMHnXSZ6OXeoDp86/n+Ev/Br2xkPcSPy2PZ5hpB7x06g1NB2UIfDfl+HBvOVU kvbK+rbGIaPg5vBH4qbRW2bf14L0BBquNlzx6aFgyF0Hu/JrewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGrOJVvEXDgIyuDpxMO9nS+wxdpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZDhjNGI5YjQtZDY0ZS0z YWY3LTk1YTctYjY0MWEyNTg0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAahJsAD BAKhJsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPeo/+NX8TKbiYf+2vjjh0mCWPVKNSnYIA6jAkNs6KJho wZ6OMhngceQg1C9BAzLFS1cJ+O6ws/FBpAdcaHJSkz5YKWc9D4suKpCULgFIwBd3 ZEtXOOJ01qqPa91YWP7TfIMB74oar2GN6gdSRbOxgmLkNd0x5LgAVtEitxzj7+vm 5evKwhYbGmz7lvt3/cAfRLlGUsGvRLwNxilHa06StOBigFPMatw9+MKeImWCj9Vy rUPc1zeXZshTCY+y9rq/+3LGN9K2//BvnHN4Zis8FovslCgN0euB/gZxJG/mlblH uRfWpGvECcc8c1rl6uyzxKurjQC+MYY5U4ggTkXqfA== -----END CERTIFICATE-----Generated at Tue Mar 24 10:20:17 2026 by rpki-client