$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa File: cfb18649-d381-3b8e-8c0d-7a5962362836.roa (raw, json) Hash identifier: ziX17F6zDA+sNzAACxUzGnrpMD6syrliVaQeuejgh0Q= Subject key identifier: 58:85:5E:9F:22:39:2E:54:B3:60:03:63:8F:96:AF:0A:87:43:86:1F Certificate issuer: /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Certificate serial: 010D0C9F4328584D29B57A85780A77B3AD51CE00 Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa Signing time: Sat 14 Mar 2026 06:35:22 +0000 ROA not before: Sat 14 Mar 2026 06:35:22 +0000 ROA not after: Fri 12 Jun 2026 06:35:22 +0000 asID: 26077 IP address blocks: 161.38.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:b5:7a:85:78:0a:77:b3:ad:51:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Validity Not Before: Mar 14 06:35:22 2026 GMT Not After : Jun 12 06:35:22 2026 GMT Subject: CN=261188ed-1eaa-49a9-ab4e-af5a5a5ae1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:50:5c:49:22:e5:12:64:10:23:18:e4:4a: 18:8a:e3:6c:56:17:33:eb:b2:4c:60:16:76:09:58: da:b8:0b:a2:5e:23:e9:93:b4:5c:7b:51:b4:b7:20: a2:52:53:b2:13:13:00:48:00:74:6c:d9:53:29:c1: f9:1e:6d:76:f6:2f:8f:ee:46:4a:4f:d5:d2:c8:b5: 6c:84:40:50:bd:93:69:29:f4:ed:7c:05:c5:39:59: 9a:45:e3:0f:8a:9f:77:b3:5f:d9:f5:a3:88:bd:64: 41:d8:1e:62:fa:db:78:e2:3a:d5:4e:4a:85:2a:20: a5:ee:4a:3c:ab:d5:4a:36:0d:ff:1b:5c:84:b6:77: 5d:ba:74:81:a6:5b:ba:e8:70:c5:c4:6a:d8:a2:7b: ca:76:f4:e3:8b:a4:e0:29:f7:a2:ce:15:e2:e9:bf: 11:5c:83:f6:85:8d:10:be:06:24:7c:3f:81:f0:84: 41:fd:24:81:1f:99:c2:cf:b8:41:55:5c:f5:e9:9a: 5a:b7:83:50:2d:9f:60:23:1d:ff:26:91:1d:ee:3b: 76:09:e8:2c:6f:e6:8d:70:5c:27:d8:66:29:34:d3: 5a:81:82:be:0b:cc:9a:5e:fc:ab:67:42:0d:c2:13: 2e:a9:5b:97:1e:09:71:ff:e2:45:30:7b:b0:be:e7: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:5E:9F:22:39:2E:54:B3:60:03:63:8F:96:AF:0A:87:43:86:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl X509v3 Authority Key Identifier: keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:63:ca:53:20:07:26:ad:33:b4:52:31:94:b6:98:69:07:86: 80:c3:23:02:03:0e:2d:5a:98:1a:ad:be:43:23:26:b2:b2:49: ad:f2:d8:e0:75:84:5b:e3:67:52:09:6d:43:8a:51:8f:13:51: 41:6a:b8:32:d7:69:95:c7:28:de:5a:9d:e2:65:09:8e:64:af: c8:2f:45:91:ca:42:58:68:8f:2c:e7:a8:39:a2:78:bf:0c:3c: 50:c8:82:f0:a3:cf:49:3e:27:d0:7c:63:1f:ba:6e:1c:eb:99: 13:62:8b:a5:9b:c9:1d:d2:ba:76:f1:52:3b:22:5a:13:3f:8b: 49:38:99:e7:ad:47:34:e8:35:61:c0:a7:8a:fa:ab:ab:fc:e7: 45:15:af:b8:86:b4:8c:22:02:38:8c:04:89:f4:78:40:cb:69: 41:3d:9a:31:2e:20:28:95:05:bd:76:96:1f:7a:a7:fa:6f:97: 2a:d6:7c:a0:2b:90:5b:a5:49:12:6f:fd:45:29:4b:f7:0a:d3: 66:6e:be:0a:c8:d0:f6:03:c2:59:73:38:c1:a3:e5:a4:97:f4: c4:e0:45:52:fa:94:3a:f3:dc:c0:1f:83:7e:f1:77:88:2d:2e: bd:ad:15:50:0c:85:f1:78:65:15:68:d9:cd:12:eb:07:bd:13: d9:bc:ed:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ptXqFeAp3s61RzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj NjBlMB4XDTI2MDMxNDA2MzUyMloXDTI2MDYxMjA2MzUyMlowLzEtMCsGA1UEAxMk MjYxMTg4ZWQtMWVhYS00OWE5LWFiNGUtYWY1YTVhNWFlMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidlQXEki5RJkECMY5EoYiuNsVhcz67JMYBZ2 CVjauAuiXiPpk7Rce1G0tyCiUlOyExMASAB0bNlTKcH5Hm129i+P7kZKT9XSyLVs hEBQvZNpKfTtfAXFOVmaReMPip93s1/Z9aOIvWRB2B5i+tt44jrVTkqFKiCl7ko8 q9VKNg3/G1yEtnddunSBplu66HDFxGrYonvKdvTji6TgKfeizhXi6b8RXIP2hY0Q vgYkfD+B8IRB/SSBH5nCz7hBVVz16Zpat4NQLZ9gIx3/JpEd7jt2Cegsb+aNcFwn 2GYpNNNagYK+C8yaXvyrZ0INwhMuqVuXHglx/+JFMHuwvucx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiFXp8iOS5Us2ADY4+WrwqHQ4YfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvY2ZiMTg2NDktZDM4MS0z YjhlLThjMGQtN2E1OTYyMzYyODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2 YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3 NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoSYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhjylMgByatM7RSMZS2mGkHhoDDIwIDDi1amBqtvkMjJrKySa3y2OB1 hFvjZ1IJbUOKUY8TUUFquDLXaZXHKN5aneJlCY5kr8gvRZHKQlhojyznqDmieL8M PFDIgvCjz0k+J9B8Yx+6bhzrmRNii6WbyR3SunbxUjsiWhM/i0k4meetRzToNWHA p4r6q6v850UVr7iGtIwiAjiMBIn0eEDLaUE9mjEuICiVBb12lh96p/pvlyrWfKAr kFulSRJv/UUpS/cK02ZuvgrI0PYDwllzOMGj5aSX9MTgRVL6lDrz3MAfg37xd4gt Lr2tFVAMhfF4ZRVo2c0S6we9E9m87cI= -----END CERTIFICATE-----Generated at Sat Mar 14 17:59:05 2026 by rpki-client