$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa File: 3bfa061b-e17c-3190-b642-67068e27e58e.roa (raw, json) Hash identifier: gQRQpkfRqUoaPzCy/YWLldiyMF/2S+6nMc2SxIfYlmk= Subject key identifier: 00:8D:C9:AC:B0:3C:69:D8:34:EF:B1:97:B7:7A:E4:00:9F:BF:B9:88 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584E5619EBF338FC1F7B749F0880 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 3356 IP address blocks: 161.129.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:eb:f3:38:fc:1f:7b:74:9f:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=911a04e1-1296-45ac-b665-10be98f751c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:5c:96:cb:91:8c:34:c5:e4:22:4c:08:06: 1d:ed:21:52:19:33:b1:9b:60:ac:fe:23:45:df:8a: 50:61:3f:d2:65:81:41:2f:8e:fc:84:2d:25:7b:a7: 6d:75:71:a8:a4:bf:d1:5a:8e:23:ee:a6:b7:4c:36: 17:a0:43:8f:d1:f3:8b:3c:82:37:a2:7b:5a:a6:26: d2:1a:2f:f4:53:09:e2:b1:e3:bc:64:c1:aa:56:38: 92:50:ee:42:f0:c5:8d:5a:22:1a:b9:f4:ed:76:ca: 7d:5d:f1:8e:29:3a:76:cc:6b:0e:95:7f:3a:9a:7a: b5:c2:8b:af:ad:a2:24:b9:c7:34:99:81:df:46:93: 18:a4:e4:78:10:cd:17:9c:99:40:52:8b:48:29:5d: 81:b5:24:32:68:dc:17:d1:c1:d0:1e:30:55:6e:cc: 07:fd:24:6d:df:09:c7:41:39:db:73:c0:72:36:94: 8c:9e:2d:14:95:20:c9:f0:2e:18:1b:d5:63:57:24: e9:8e:5e:6e:09:97:18:a6:12:93:b2:ef:c2:8f:57: a4:04:89:9d:d4:1a:e7:d3:a5:48:ce:57:8a:80:f4: 9f:94:c2:59:20:e8:14:10:58:f0:0d:43:84:4e:b5: 0d:47:8b:8a:3d:87:65:e8:d2:04:69:3c:e3:29:3d: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:C9:AC:B0:3C:69:D8:34:EF:B1:97:B7:7A:E4:00:9F:BF:B9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:40:d1:32:68:04:46:95:25:41:58:f8:e6:25:8c:a6:13:5d: 2b:b6:65:07:f8:35:0d:f2:a1:af:12:d3:20:bd:c3:23:4a:ca: b1:3a:d9:12:31:60:2e:0b:08:59:45:aa:6a:eb:43:0d:f2:6b: f2:37:da:3a:f2:ce:03:2a:11:e5:ee:b1:9c:47:5a:7c:d0:8e: 46:e4:bf:dd:57:96:ab:70:d0:97:65:27:55:44:7f:27:54:66: 31:9b:da:22:1c:21:ec:61:e8:35:eb:72:39:ed:d6:17:5b:66: f1:37:e2:ff:32:50:28:d9:74:82:e2:09:e5:a9:96:d5:49:2f: 29:4b:4c:8f:5e:08:19:24:29:b0:73:f8:b2:e0:63:15:4f:c6: d6:84:4b:4a:f1:8b:85:c0:67:cb:2a:2e:7b:04:f6:1e:ff:33: e8:32:87:dd:7f:a6:7c:6a:60:21:bf:e5:d0:af:9e:f0:6a:0f: 4b:35:7a:72:1a:0a:b1:c0:f2:ee:57:1c:18:fe:0c:58:c8:8a: 64:e1:c2:59:aa:61:de:16:ee:a8:76:c9:b8:bd:ed:34:db:e8: 4e:70:68:7c:3d:ab:06:6f:4e:aa:8d:18:6f:59:96:df:48:de: 80:9b:d5:93:26:23:74:70:6c:12:3d:04:0a:93:44:6a:b6:de: 98:0f:fc:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGevzOPwfe3SfCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk OTExYTA0ZTEtMTI5Ni00NWFjLWI2NjUtMTBiZTk4Zjc1MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB5clsuRjDTF5CJMCAYd7SFSGTOxm2Cs/iNF 34pQYT/SZYFBL478hC0le6dtdXGopL/RWo4j7qa3TDYXoEOP0fOLPII3ontapibS Gi/0UwniseO8ZMGqVjiSUO5C8MWNWiIaufTtdsp9XfGOKTp2zGsOlX86mnq1wouv raIkucc0mYHfRpMYpOR4EM0XnJlAUotIKV2BtSQyaNwX0cHQHjBVbswH/SRt3wnH QTnbc8ByNpSMni0UlSDJ8C4YG9VjVyTpjl5uCZcYphKTsu/Cj1ekBImd1Brn06VI zleKgPSflMJZIOgUEFjwDUOETrUNR4uKPYdl6NIEaTzjKT31YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACNyaywPGnYNO+xl7d65ACfv7mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvM2JmYTA2MWItZTE3Yy0z MTkwLWI2NDItNjcwNjhlMjdlNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRA0TJoBEaVJUFY+OYljKYTXSu2ZQf4NQ3yoa8S0yC9wyNKyrE62RIx YC4LCFlFqmrrQw3ya/I32jryzgMqEeXusZxHWnzQjkbkv91Xlqtw0JdlJ1VEfydU ZjGb2iIcIexh6DXrcjnt1hdbZvE34v8yUCjZdILiCeWpltVJLylLTI9eCBkkKbBz +LLgYxVPxtaES0rxi4XAZ8sqLnsE9h7/M+gyh91/pnxqYCG/5dCvnvBqD0s1enIa CrHA8u5XHBj+DFjIimThwlmqYd4W7qh2ybi97TTb6E5waHw9qwZvTqqNGG9Zlt9I 3oCb1ZMmI3RwbBI9BAqTRGq23pgP/M8= -----END CERTIFICATE-----Generated at Tue Jul 21 20:04:33 2026 by rpki-client