$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa File: 6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa (raw, json) Hash identifier: 38c66y6V5/qmO1pQUjjJshpSJZLjQhSohAUz73XmxoI= Subject key identifier: AC:66:B0:E9:2A:6E:7D:52:CE:0B:E5:65:9C:65:56:A0:BF:80:92:25 Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Certificate serial: 010D0C9F4328584D4D0455C7D0D240781DE81D40 Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa Signing time: Thu 26 Mar 2026 22:07:33 +0000 ROA not before: Thu 26 Mar 2026 22:07:33 +0000 ROA not after: Wed 24 Jun 2026 22:07:33 +0000 asID: 394352 IP address blocks: 161.38.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:04:55:c7:d0:d2:40:78:1d:e8:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Validity Not Before: Mar 26 22:07:33 2026 GMT Not After : Jun 24 22:07:33 2026 GMT Subject: CN=467b25ca-b2ed-4699-99df-150974c59116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:a5:68:08:1b:b6:c7:3a:ed:3d:21:1b:15: aa:19:69:c9:6c:53:fd:48:dc:a6:f5:5e:cf:6c:4b: e4:5d:94:3f:35:82:7f:ad:6a:9e:62:10:d6:25:53: dd:71:84:f0:06:74:72:ce:6f:70:5b:8f:10:03:e3: b0:2b:ed:f1:e4:84:8a:a6:14:ad:2d:fe:0c:cf:93: 4e:74:81:5d:12:ed:82:a8:15:f7:a4:9d:ec:ae:84: 3d:91:91:e8:1d:e3:97:58:05:38:c1:62:89:71:32: 7f:99:99:c9:ed:61:98:71:e0:3c:3b:6f:54:0e:2f: 2c:92:1b:0a:d1:5e:2c:bf:57:88:d6:fb:80:0d:f9: 35:8a:fa:fc:6b:0f:7e:2f:24:33:48:11:3c:f7:78: ac:a0:8e:62:13:10:9d:09:9d:78:48:62:c7:26:5a: db:15:75:12:39:43:ac:43:30:5c:41:22:8d:75:18: 5d:60:2a:69:fc:7c:b5:54:38:c1:b9:69:a2:c7:cd: 7a:f6:99:2d:42:e3:e6:dc:17:82:6c:58:4c:b1:af: 0f:d3:42:59:9c:8c:7d:3d:be:a2:f2:f8:56:cc:d9: 31:43:43:5e:74:19:9a:91:37:e9:76:43:3b:e3:f7: df:67:2e:d4:46:0a:1a:89:80:52:26:6b:e4:76:5d: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:B0:E9:2A:6E:7D:52:CE:0B:E5:65:9C:65:56:A0:BF:80:92:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl X509v3 Authority Key Identifier: keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer sbgp-ipAddrBlock: critical IPv4: 161.38.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b1:a5:8d:ed:47:a3:ba:e5:cf:9e:db:91:e0:f9:1d:18:09: 6b:a4:b1:7f:b8:43:cd:84:47:19:75:55:6e:b0:8a:45:8f:7e: 3b:03:15:c9:20:51:62:c1:a7:76:12:b0:05:90:ed:dd:0c:0e: 6b:57:a3:58:d2:3b:4a:8c:50:ba:2a:13:a8:59:81:0f:9f:d7: bd:55:ee:4e:14:5c:69:91:9a:e8:dc:4e:98:53:2a:ff:2e:db: 7e:d7:ce:55:a8:05:16:5b:ff:de:fa:42:2d:86:65:d8:93:a8: 7e:72:cb:25:c6:b9:6a:be:2d:65:c2:c2:c3:77:d1:3d:d2:d2: 8d:c6:96:ff:03:10:06:a4:b4:61:26:6c:ec:cd:d6:11:e0:be: 07:57:22:a0:b9:ca:23:11:fa:5f:ac:76:b5:5b:98:99:33:f9: 85:02:a2:6a:bc:c6:54:fd:5c:10:1f:95:9d:da:f1:e9:95:eb: fc:da:ed:25:a9:c6:37:fe:18:d1:89:9f:8b:af:59:36:a3:e5: 4f:e7:67:f3:0a:84:22:41:e3:98:72:71:61:b9:6b:3a:03:c2: a0:11:6f:f4:08:3f:a8:84:bf:26:dc:09:89:1c:f1:35:ba:7d: 18:13:af:5f:39:5e:dc:c6:b6:53:29:00:8d:42:2e:38:27:99: 9d:65:44:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NBFXH0NJAeB3oHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk YzQ1MB4XDTI2MDMyNjIyMDczM1oXDTI2MDYyNDIyMDczM1owLzEtMCsGA1UEAxMk NDY3YjI1Y2EtYjJlZC00Njk5LTk5ZGYtMTUwOTc0YzU5MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aelaAgbtsc67T0hGxWqGWnJbFP9SNym9V7P bEvkXZQ/NYJ/rWqeYhDWJVPdcYTwBnRyzm9wW48QA+OwK+3x5ISKphStLf4Mz5NO dIFdEu2CqBX3pJ3sroQ9kZHoHeOXWAU4wWKJcTJ/mZnJ7WGYceA8O29UDi8skhsK 0V4sv1eI1vuADfk1ivr8aw9+LyQzSBE893isoI5iExCdCZ14SGLHJlrbFXUSOUOs QzBcQSKNdRhdYCpp/Hy1VDjBuWmix8169pktQuPm3BeCbFhMsa8P00JZnIx9Pb6i 8vhWzNkxQ0NedBmakTfpdkM74/ffZy7URgoaiYBSJmvkdl2TowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxmsOkqbn1SzgvlZZxlVqC/gJIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNmI1MDc2ZGYtYzM0YS0z YWM4LWI4YjYtNjFlZTYwZmZhZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1 MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmxpY3tR6O65c+e25Hg+R0YCWuksX+4Q82ERxl1VW6wikWPfjsDFckg UWLBp3YSsAWQ7d0MDmtXo1jSO0qMULoqE6hZgQ+f171V7k4UXGmRmujcTphTKv8u 237XzlWoBRZb/976Qi2GZdiTqH5yyyXGuWq+LWXCwsN30T3S0o3Glv8DEAaktGEm bOzN1hHgvgdXIqC5yiMR+l+sdrVbmJkz+YUComq8xlT9XBAflZ3a8emV6/za7SWp xjf+GNGJn4uvWTaj5U/nZ/MKhCJB45hycWG5azoDwqARb/QIP6iEvybcCYkc8TW6 fRgTr185XtzGtlMpAI1CLjgnmZ1lRAc= -----END CERTIFICATE-----Generated at Tue Apr 14 16:00:47 2026 by rpki-client