$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa File: dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa (raw, json) Hash identifier: mJwNhH0p+/sz/OIScrB0N7v5iyUtt2EW07JYfDq5iRU= Subject key identifier: 8B:5F:E2:98:1F:1E:8A:26:97:21:F8:35:F7:48:B6:B8:A9:A1:66:C3 Certificate issuer: /CN=63772934-17e5-40fe-9a28-6fe830808dc3 Certificate serial: 010D0C9F4328584EAA51A172F16BE0D40128E2C0 Authority key identifier: 51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 161.38.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:a1:72:f1:6b:e0:d4:01:28:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63772934-17e5-40fe-9a28-6fe830808dc3 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=477e202c-4e2b-47ba-a7c9-e006e91af35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:9a:db:58:15:08:d2:45:e1:0a:e1:00:a3: 73:5f:d4:fe:c0:53:9d:a4:75:e7:77:8e:77:b4:c6: ac:07:b2:3a:2f:17:47:27:5e:82:f6:55:79:cf:3c: b7:c1:a9:dc:2b:93:9a:6f:d1:8d:1f:c8:2c:2b:a5: 33:24:fd:8a:c5:db:39:17:02:29:e3:c6:f3:ef:d4: 3a:dc:24:7f:01:54:ee:84:06:eb:d8:f8:1b:79:a7: f6:c5:30:42:7a:99:15:25:67:04:d4:32:b1:c4:04: 87:32:b0:30:7e:44:3e:51:0e:6d:8f:b9:b2:10:48: 22:0c:01:c0:07:5b:75:90:97:81:c2:3a:fe:3a:7b: 7a:5b:dd:0a:41:2c:6a:0f:f3:d8:5c:cf:b9:7a:27: eb:d9:1c:ac:a3:ea:01:72:8d:5d:bc:89:a3:8f:9e: bf:4d:56:42:3b:96:f1:7f:60:e0:28:21:80:03:16: 12:f7:74:04:32:9b:d4:01:03:e4:88:30:4f:a0:93: 7a:cd:ea:98:02:38:d3:ca:d4:07:01:1b:9e:0d:7e: c3:f0:e3:df:f7:7d:c5:5e:c8:df:88:1d:6d:5e:63: 47:14:d4:4b:25:c4:b2:55:c3:f9:37:00:10:d2:b4: 35:8d:52:38:a7:d7:7a:a6:05:62:5d:de:ea:24:9e: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5F:E2:98:1F:1E:8A:26:97:21:F8:35:F7:48:B6:B8:A9:A1:66:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl X509v3 Authority Key Identifier: keyid:51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer sbgp-ipAddrBlock: critical IPv4: 161.38.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:17:e0:60:2f:57:dd:e2:03:d9:c6:e7:fe:0d:80:4f:eb: 13:62:ae:4c:d4:22:2c:76:d5:f4:97:e4:a8:7e:49:45:12:95: ab:d5:ba:45:d7:e7:e2:9c:e2:fa:84:a2:14:ae:f1:97:77:b0: a9:a6:38:d4:06:b4:c0:87:27:a4:43:1e:74:df:cc:30:ea:80: 79:73:e0:bb:39:5f:5a:25:3f:55:b5:d1:b3:9c:6a:ea:db:6d: ff:40:49:a2:aa:98:06:b1:d6:f2:e4:eb:9b:21:25:73:a5:54: d0:7e:52:4a:48:d5:46:61:2c:47:ba:cf:f0:51:b0:1b:ce:dd: 31:a6:c0:94:9c:e1:a9:09:47:5a:3d:2e:11:e3:ac:51:76:21: fc:57:2e:b5:f8:df:ee:42:4b:b2:da:6e:7e:e0:4c:eb:eb:f9: c9:32:25:92:5d:35:21:04:07:d2:07:1c:38:ab:e7:92:c4:e2: e8:f2:ea:50:20:87:33:34:b4:ab:7c:95:f6:c2:4b:b9:0d:5d: dd:e7:fc:a5:0e:60:a5:a0:f0:b1:d3:65:c2:0e:0d:38:f5:68: e3:30:06:7f:e8:e9:6b:50:ec:fa:79:7b:10:6a:25:be:fd:46: 84:a9:1e:06:6b:52:4d:5a:95:8f:e0:06:97:17:ba:ed:31:c6: 98:c5:29:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUaFy8Wvg1AEo4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM3NzI5MzQtMTdlNS00MGZlLTlhMjgtNmZlODMwODA4 ZGMzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NDc3ZTIwMmMtNGUyYi00N2JhLWE3YzktZTAwNmU5MWFmMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ma21gVCNJF4QrhAKNzX9T+wFOdpHXnd453 tMasB7I6LxdHJ16C9lV5zzy3wancK5Oab9GNH8gsK6UzJP2Kxds5FwIp48bz79Q6 3CR/AVTuhAbr2Pgbeaf2xTBCepkVJWcE1DKxxASHMrAwfkQ+UQ5tj7myEEgiDAHA B1t1kJeBwjr+Ont6W90KQSxqD/PYXM+5eifr2Ryso+oBco1dvImjj56/TVZCO5bx f2DgKCGAAxYS93QEMpvUAQPkiDBPoJN6zeqYAjjTytQHARueDX7D8OPf933FXsjf iB1tXmNHFNRLJcSyVcP5NwAQ0rQ1jVI4p9d6pgViXd7qJJ7OzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItf4pgfHoomlyH4NfdItripoWbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82Mzc3 MjkzNC0xN2U1LTQwZmUtOWEyOC02ZmU4MzA4MDhkYzMvZGZjN2ZlMmYtNjE0Ny0z NWRhLWFiOTItNzU1ZmRkMWY5NzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjM3NzI5MzQtMTdlNS00MGZlLTlh MjgtNmZlODMwODA4ZGMzLzYzNzcyOTM0LTE3ZTUtNDBmZS05YTI4LTZmZTgzMDgw OGRjMy5jcmwwHwYDVR0jBBgwFoAUUUqQ4N2nA+o72cTiCM6lCY32EPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82Mzc3MjkzNC0xN2U1LTQwZmUtOWEyOC02ZmU4 MzA4MDhkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHpF+BgL1fd4gPZxuf+DYBP6xNirkzUIix21fSX5Kh+SUUSlavVukXX 5+Kc4vqEohSu8Zd3sKmmONQGtMCHJ6RDHnTfzDDqgHlz4Ls5X1olP1W10bOcaurb bf9ASaKqmAax1vLk65shJXOlVNB+UkpI1UZhLEe6z/BRsBvO3TGmwJSc4akJR1o9 LhHjrFF2IfxXLrX43+5CS7Labn7gTOvr+ckyJZJdNSEEB9IHHDir55LE4ujy6lAg hzM0tKt8lfbCS7kNXd3n/KUOYKWg8LHTZcIODTj1aOMwBn/o6WtQ7Pp5exBqJb79 RoSpHgZrUk1alY/gBpcXuu0xxpjFKeM= -----END CERTIFICATE-----Generated at Fri Aug 21 02:52:07 2026 by rpki-client