$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa File: a1938fc5-2350-385d-a647-f833e035e7be.roa (raw, json) Hash identifier: xprAaUkxtVEkeBOAufdggOkKRno7mOjPzdk7uZfrWNA= Subject key identifier: EB:1C:B5:51:BA:1A:0C:78:43:E6:53:96:2C:70:72:E5:59:46:E0:49 Certificate issuer: /CN=39bc904e-c316-4e84-92fb-2339457361b2 Certificate serial: 010D0C9F4328584D0D4260620061676B64836A40 Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 40102 IP address blocks: 160.253.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:60:62:00:61:67:6b:64:83:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0c1fa6a5-f593-4dc1-8de8-52fb73fdc068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:34:e2:ba:9c:c0:0f:ab:3d:2b:11:b1:d1: bd:25:46:7b:b7:73:fc:1c:8d:8e:4d:23:18:e1:fb: d8:fb:8a:d7:33:7c:87:68:77:e3:a6:1d:3d:2b:ef: db:9e:76:c2:8a:9a:1b:50:dd:34:f4:f3:77:db:48: e0:b2:ba:4f:07:6c:b8:45:fc:b8:4e:61:83:fd:45: 83:44:fc:c2:b1:1e:e9:25:a5:c7:06:74:51:7d:90: 38:55:49:4f:bd:f9:55:4a:c9:18:d0:ba:5e:9d:a7: cb:17:04:b5:4c:7e:65:16:51:6c:25:bc:5c:29:05: 7a:7d:6b:3e:3f:b7:bc:e0:a8:e0:5d:6c:81:75:79: 4e:33:d1:0c:41:04:eb:13:82:06:23:0b:c3:93:6e: 3b:d9:95:9c:7f:ee:72:cd:cd:2d:d1:ec:10:8c:17: 76:fe:f9:80:f9:89:19:24:a5:e8:99:d1:e4:84:28: 0a:ad:9d:0b:4f:44:8e:45:cb:94:57:ad:d1:dc:b0: 7a:77:3b:40:94:c1:99:1c:e6:25:76:af:26:ea:97: 5c:91:21:6d:f7:de:f6:50:38:d9:a5:a4:d8:46:40: bf:4b:13:6d:1d:ee:d7:e9:29:fb:c0:50:0a:74:56: ad:00:19:75:c4:04:a7:bf:25:0d:a3:43:87:62:10: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1C:B5:51:BA:1A:0C:78:43:E6:53:96:2C:70:72:E5:59:46:E0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl X509v3 Authority Key Identifier: keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer sbgp-ipAddrBlock: critical IPv4: 160.253.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:94:60:3d:e0:c8:7f:41:c1:d9:00:dd:18:0a:05:70:c1:92: 31:b3:25:b3:b6:8d:f8:80:63:fe:ca:ff:f0:78:02:31:bd:a9: 19:c5:30:4e:92:a3:79:2d:60:7f:5c:21:0b:05:e6:af:71:f5: 57:06:9d:c5:84:b3:fa:4f:25:88:15:1c:85:cb:71:09:a2:0a: 5f:bc:37:52:32:95:30:d0:34:92:3b:ab:ef:e7:d7:10:45:9f: 06:00:8a:34:29:d9:f3:85:7d:55:6d:b2:d7:83:cd:7e:29:27: ff:42:95:93:ed:c8:32:50:55:c1:f6:46:9d:6b:e2:27:22:0d: ad:bd:d9:df:f4:d9:01:64:d2:2e:c3:b4:1c:54:59:da:b9:0b: f4:a2:d2:11:09:34:aa:b2:63:2f:96:c3:17:21:f8:35:d6:19: 56:d3:47:bb:cf:e2:57:9e:6c:d4:d7:f4:e8:a8:18:cf:8f:79: 9b:20:8b:a3:d9:7d:91:2e:94:24:db:50:b0:d4:48:8a:ae:c8: a8:0c:7d:96:d3:bf:ed:9c:36:fb:d8:7a:9e:96:62:8f:82:a0: eb:17:7e:96:95:44:4c:87:21:7f:ec:34:dc:d8:c1:32:c1:d2: b3:99:71:50:1f:48:2d:ea:36:e9:b8:0b:51:e3:a8:3a:26:ae: 0a:95:51:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmBiAGFna2SDakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliYzkwNGUtYzMxNi00ZTg0LTkyZmItMjMzOTQ1NzM2 MWIyMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGMxZmE2YTUtZjU5My00ZGMxLThkZTgtNTJmYjczZmRjMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20w04rqcwA+rPSsRsdG9JUZ7t3P8HI2OTSMY 4fvY+4rXM3yHaHfjph09K+/bnnbCipobUN009PN320jgsrpPB2y4Rfy4TmGD/UWD RPzCsR7pJaXHBnRRfZA4VUlPvflVSskY0LpenafLFwS1TH5lFlFsJbxcKQV6fWs+ P7e84KjgXWyBdXlOM9EMQQTrE4IGIwvDk2472ZWcf+5yzc0t0ewQjBd2/vmA+YkZ JKXomdHkhCgKrZ0LT0SORcuUV63R3LB6dztAlMGZHOYldq8m6pdckSFt9972UDjZ paTYRkC/SxNtHe7X6Sn7wFAKdFatABl1xASnvyUNo0OHYhCQBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsctVG6Ggx4Q+ZTlixwcuVZRuBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJj OTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5NDU3MzYxYjIvYTE5MzhmYzUtMjM1MC0z ODVkLWE2NDctZjgzM2UwMzVlN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzliYzkwNGUtYzMxNi00ZTg0LTky ZmItMjMzOTQ1NzM2MWIyLzM5YmM5MDRlLWMzMTYtNGU4NC05MmZiLTIzMzk0NTcz NjFiMi5jcmwwHwYDVR0jBBgwFoAUbfN0ZIQ+Wp5nQIOp6FOkMjiucYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJjOTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5 NDU3MzYxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoP0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6UYD3gyH9BwdkA3RgKBXDBkjGzJbO2jfiAY/7K//B4AjG9qRnFME6S o3ktYH9cIQsF5q9x9VcGncWEs/pPJYgVHIXLcQmiCl+8N1IylTDQNJI7q+/n1xBF nwYAijQp2fOFfVVtsteDzX4pJ/9ClZPtyDJQVcH2Rp1r4iciDa292d/02QFk0i7D tBxUWdq5C/Si0hEJNKqyYy+Wwxch+DXWGVbTR7vP4leebNTX9OioGM+PeZsgi6PZ fZEulCTbULDUSIquyKgMfZbTv+2cNvvYep6WYo+CoOsXfpaVREyHIX/sNNzYwTLB 0rOZcVAfSC3qNum4C1HjqDomrgqVUbk= -----END CERTIFICATE-----Generated at Tue Mar 17 00:44:10 2026 by rpki-client