$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: wKVjAOCrskhpCpLSE8lWECYURcxY4BDV5/8+XnP8xNo= Subject key identifier: 23:69:FE:A1:81:3A:F9:2D:51:8E:6D:09:49:5D:D3:6D:F5:46:1D:D6 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584D55BA3A6AEC490820AB46CF00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3a:6a:ec:49:08:20:ab:46:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c1987c28-074e-4fca-b8d6-d3de8259599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:24:08:3a:81:af:d8:dc:ef:ad:9e:b3:11:24: ba:24:11:04:9d:7e:8f:ba:37:08:14:54:71:c0:b3: 0b:af:d8:53:6a:b5:7e:b4:83:81:06:81:d9:1a:35: 4c:1f:d5:d8:e0:6e:1e:46:88:18:66:d1:51:07:54: dc:30:d3:ea:12:90:eb:3a:e0:86:e4:07:b5:f0:0e: 11:af:1a:d0:06:44:89:0e:74:90:31:f8:e0:4d:60: 4d:97:6f:92:55:9d:a2:1c:63:49:27:3c:a1:12:86: a0:de:11:98:3f:48:4e:ff:47:f6:21:e1:a7:e2:0a: 6d:fa:f3:16:cf:2f:fd:9c:a6:40:a1:91:b1:e6:e4: 0c:c2:95:b0:67:47:b9:72:6c:c7:33:08:a8:82:71: 51:6d:e2:1c:a7:59:70:37:07:48:b2:29:12:4c:9c: 22:00:8f:5d:fc:a2:75:3f:2a:3e:40:d0:74:57:e7: 6e:f1:be:25:9b:37:a4:de:c4:1c:bf:dc:ec:c0:0c: 73:8b:a9:2e:73:80:c9:54:6d:2c:9c:76:30:b6:37: 4a:7e:67:7b:31:26:16:76:f9:66:83:6b:79:05:1d: 6c:2d:db:14:d6:7b:62:1d:6d:73:a9:a8:b0:21:fc: f7:ee:0c:81:80:d9:0a:c4:b5:89:7f:3d:71:4b:b4: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:69:FE:A1:81:3A:F9:2D:51:8E:6D:09:49:5D:D3:6D:F5:46:1D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2f:9c:73:a6:4e:bb:0d:9b:bb:3f:d9:da:73:f7:64:0a:c1: cc:e1:e7:3a:fd:8b:86:de:33:c1:12:ac:f3:3b:e3:d2:e6:28: a9:45:47:4e:59:5f:1c:49:5d:b1:fb:38:97:a0:b7:00:bd:70: 8a:b3:09:ba:8f:f0:8a:a4:f0:a3:ff:4c:47:1c:3a:10:43:a8: 2a:c3:b4:3d:17:72:b8:ef:a7:cb:3b:c5:77:fe:ab:2e:4c:19: 55:7b:6b:3b:de:c7:ff:65:96:42:d1:bd:f6:0f:61:27:5f:b5: e1:4f:bc:65:e4:a3:cd:1d:fb:9a:cd:59:e6:7a:d5:fc:9e:a4: 82:26:b4:9e:93:ed:27:e5:09:6d:9a:df:f5:e6:47:ee:2d:21: 4b:77:85:3d:1f:84:55:7a:d2:d2:13:4d:22:5a:70:99:07:f4: d4:9f:a5:77:c8:35:0f:a6:01:7b:03:87:c1:2f:83:f0:4c:c6: b5:09:c6:58:88:dc:5f:71:2c:ca:77:02:99:71:f6:1b:87:87: 4d:88:aa:e4:47:f9:75:96:f4:99:5c:f8:11:6a:69:18:fb:69: 8c:6e:48:41:99:b3:dd:75:23:2a:a9:cb:e7:07:f2:2e:4d:bd: 5d:12:91:d6:11:a0:5e:f4:c5:ae:05:c1:79:93:b7:9e:9f:64: 26:b6:30:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vujpq7EkIIKtGzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzE5ODdjMjgtMDc0ZS00ZmNhLWI4ZDYtZDNkZTgyNTk1OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CQIOoGv2NzvrZ6zESS6JBEEnX6PujcIFFRx wLMLr9hTarV+tIOBBoHZGjVMH9XY4G4eRogYZtFRB1TcMNPqEpDrOuCG5Ae18A4R rxrQBkSJDnSQMfjgTWBNl2+SVZ2iHGNJJzyhEoag3hGYP0hO/0f2IeGn4gpt+vMW zy/9nKZAoZGx5uQMwpWwZ0e5cmzHMwiognFRbeIcp1lwNwdIsikSTJwiAI9d/KJ1 Pyo+QNB0V+du8b4lmzek3sQcv9zswAxzi6kuc4DJVG0snHYwtjdKfmd7MSYWdvlm g2t5BR1sLdsU1ntiHW1zqaiwIfz37gyBgNkKxLWJfz1xS7ROeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNp/qGBOvktUY5tCUld0231Rh3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsvnHOmTrsNm7s/2dpz92QKwczh5zr9i4beM8ESrPM749LmKKlFR05Z XxxJXbH7OJegtwC9cIqzCbqP8Iqk8KP/TEccOhBDqCrDtD0Xcrjvp8s7xXf+qy5M GVV7azvex/9llkLRvfYPYSdfteFPvGXko80d+5rNWeZ61fyepIImtJ6T7SflCW2a 3/XmR+4tIUt3hT0fhFV60tITTSJacJkH9NSfpXfINQ+mAXsDh8Evg/BMxrUJxliI 3F9xLMp3Aplx9huHh02IquRH+XWW9Jlc+BFqaRj7aYxuSEGZs911Iyqpy+cH8i5N vV0SkdYRoF70xa4FwXmTt56fZCa2MB8= -----END CERTIFICATE-----Generated at Thu Apr 9 03:40:07 2026 by rpki-client