$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa File: cfb18649-d381-3b8e-8c0d-7a5962362836.roa (raw, json) Hash identifier: s3hTem/fRu9WPfce9X1Xt6JQMxZ/lr7OkTJ6VJFWNxI= Subject key identifier: 86:2C:22:4C:07:43:E3:CC:76:38:B5:9C:F4:64:DD:92:E5:5D:8E:56 Certificate issuer: /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Certificate serial: 010D0C9F4328584EABB6EDDE6D548BF425685900 Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 26077 IP address blocks: 161.38.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:ed:de:6d:54:8b:f4:25:68:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=6d1eb2c0-9623-49b9-988d-46ac36695fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:b1:5e:b7:d3:3c:eb:84:df:16:d5:65:75: fe:11:b3:4f:ab:62:12:3f:1e:d2:5f:5a:07:b1:54: da:4e:7a:66:fb:da:7c:71:44:6c:6c:c0:6a:e4:59: 53:89:0d:f6:3a:bb:aa:73:bc:04:ca:41:c2:6e:07: 5f:4d:bd:2f:35:bc:49:6e:2d:27:5e:7c:22:a9:4b: c8:e5:f2:f5:ad:37:0d:93:83:54:19:87:ff:ff:9e: 74:c5:75:d0:85:cf:e2:01:4d:eb:a2:67:70:f4:d0: 40:f4:8e:05:6d:24:9b:29:a8:e3:14:c7:fb:16:ec: 8c:ec:52:ea:5b:fd:7e:8f:11:5c:51:39:c8:2c:27: aa:82:07:55:16:3c:1d:99:d1:53:43:31:64:76:4c: 9e:79:49:75:42:8f:59:07:fc:0e:b7:51:c3:6a:79: 6e:8c:e5:8a:19:d4:10:7f:ec:cd:17:aa:06:fc:c7: ad:9b:f2:b9:16:09:f6:7d:c3:9f:76:4d:62:80:71: 4a:d6:61:79:5e:b1:27:0a:b5:9a:27:9a:d0:bc:6d: 5e:a9:c0:2e:8c:4d:57:b9:08:6d:f3:4e:c9:f6:0b: bd:84:a2:e3:1e:69:11:14:b1:56:40:57:a7:43:3d: 1d:cf:a6:6e:98:c1:98:be:00:c4:81:08:b6:75:99: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:22:4C:07:43:E3:CC:76:38:B5:9C:F4:64:DD:92:E5:5D:8E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl X509v3 Authority Key Identifier: keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:af:40:b2:3d:a6:c1:ed:44:52:2a:08:5f:16:7c:a4:8c:e2: 2c:cc:46:5b:84:72:15:92:4b:34:69:5c:f5:fc:31:4f:a1:38: 61:e5:7a:f2:7b:98:62:6d:32:9e:80:43:4f:e9:52:82:c4:cc: 46:72:d0:3c:81:b5:79:2d:28:e3:19:f9:0a:23:82:cf:46:d6: ee:ed:8d:ba:74:5c:b5:8c:ef:5f:4c:8a:df:0d:f1:0a:73:e9: 27:cc:89:54:e1:51:9b:fe:df:51:c3:ec:cc:a9:bc:0a:6c:25: 31:9a:5f:67:3e:31:80:e8:ac:8b:4c:f4:ce:60:84:b3:ae:63: 33:ed:26:0e:41:ae:66:1f:66:d5:23:82:d5:b8:a7:cd:0e:b5: e0:ba:e9:85:4e:b6:1c:f0:a9:df:da:f8:fb:ce:56:a4:75:21: 0e:f3:58:36:6a:5e:6e:5b:6e:be:eb:48:5b:fb:e1:f2:93:e6: 08:57:1f:8e:4b:54:bf:ba:81:93:99:1b:c7:2a:18:fb:12:73: b5:a4:8a:d7:05:1d:a8:2f:7f:30:40:3c:e1:d1:ab:43:7c:da: d9:60:59:79:67:7d:fe:be:1d:a2:0f:04:c8:9d:54:6d:33:bb: 2c:6f:2b:48:88:f3:13:60:29:e6:cc:4b:ce:99:ea:e1:b8:39: 84:0e:0d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtu3ebVSL9CVoWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj NjBlMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk NmQxZWIyYzAtOTYyMy00OWI5LTk4OGQtNDZhYzM2Njk1ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFKxXrfTPOuE3xbVZXX+EbNPq2ISPx7SX1oH sVTaTnpm+9p8cURsbMBq5FlTiQ32Oruqc7wEykHCbgdfTb0vNbxJbi0nXnwiqUvI 5fL1rTcNk4NUGYf//550xXXQhc/iAU3romdw9NBA9I4FbSSbKajjFMf7FuyM7FLq W/1+jxFcUTnILCeqggdVFjwdmdFTQzFkdkyeeUl1Qo9ZB/wOt1HDanlujOWKGdQQ f+zNF6oG/Metm/K5Fgn2fcOfdk1igHFK1mF5XrEnCrWaJ5rQvG1eqcAujE1XuQht 807J9gu9hKLjHmkRFLFWQFenQz0dz6ZumMGYvgDEgQi2dZmhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYsIkwHQ+PMdji1nPRk3ZLlXY5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvY2ZiMTg2NDktZDM4MS0z YjhlLThjMGQtN2E1OTYyMzYyODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2 YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3 NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoSYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6vQLI9psHtRFIqCF8WfKSM4izMRluEchWSSzRpXPX8MU+hOGHlevJ7 mGJtMp6AQ0/pUoLEzEZy0DyBtXktKOMZ+Qojgs9G1u7tjbp0XLWM719Mit8N8Qpz 6SfMiVThUZv+31HD7MypvApsJTGaX2c+MYDorItM9M5ghLOuYzPtJg5BrmYfZtUj gtW4p80OteC66YVOthzwqd/a+PvOVqR1IQ7zWDZqXm5bbr7rSFv74fKT5ghXH45L VL+6gZOZG8cqGPsSc7WkitcFHagvfzBAPOHRq0N82tlgWXlnff6+HaIPBMidVG0z uyxvK0iI8xNgKebMS86Z6uG4OYQODdI= -----END CERTIFICATE-----Generated at Sun Sep 13 13:22:43 2026 by rpki-client