$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa File: a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa (raw, json) Hash identifier: TYNzOegvfRk9QAUAFnZH6l47s45LXlg/sLMmE99eqwk= Subject key identifier: 61:36:55:83:F1:5F:8A:8D:B8:FF:56:C6:FE:A3:6E:CC:29:CD:C4:E2 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584D1F4A47FDE86C5F10AE5BA400 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 198949 IP address blocks: 162.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:47:fd:e8:6c:5f:10:ae:5b:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=0bc7e41e-3b9b-4795-8efc-e765a4568e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:20:5b:94:71:9f:c8:c7:28:9f:be:c5:23: 78:e7:2a:4b:22:a7:2d:07:05:f2:ff:02:87:57:71: f6:dc:f4:ff:6b:0f:3d:74:fa:a0:13:4b:63:31:77: d5:8e:3b:8c:94:74:ff:c7:ad:37:ab:50:f9:4e:f8: ce:c2:71:8a:5d:45:a2:d2:cd:8c:2a:58:74:74:e2: 38:21:9d:2e:49:d7:5a:eb:a2:1a:ca:4f:e4:ea:26: 92:28:9a:db:d7:aa:c0:6f:2a:6f:00:e3:2f:c2:b7: 79:1b:a4:dc:6b:52:5b:25:01:e1:e1:f1:0e:3e:6e: a0:0d:1d:84:88:69:9d:e6:23:e9:e0:65:16:5f:7d: b3:7e:95:4e:cb:65:87:e6:e9:7f:67:5b:a9:b6:04: 40:39:5a:f1:b3:eb:85:10:27:ec:25:ab:f3:3c:d4: b8:a2:1b:0b:d7:5a:90:77:7e:c8:fa:7d:1f:d8:d2: ba:d8:0e:40:13:e6:76:bd:24:74:30:4e:36:21:18: 8a:41:7f:b9:7c:b3:d2:4f:0e:2b:bc:7d:74:2d:95: 6b:66:cc:19:c3:77:c2:f8:e1:66:84:75:95:e5:b2: d9:c1:5f:e6:0c:e2:9d:d5:c4:39:37:ae:da:2a:af: 67:8b:6d:1d:49:9a:37:df:a0:42:0f:02:74:76:54: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:55:83:F1:5F:8A:8D:B8:FF:56:C6:FE:A3:6E:CC:29:CD:C4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:84:84:b2:48:df:16:b4:00:01:8a:8d:70:a3:74:b0:f1:c8: ac:22:d2:1a:08:35:16:b1:39:8c:f2:f6:45:37:7c:ab:9e:1a: eb:dd:fb:74:12:91:2b:e9:57:12:89:a8:4a:8b:bc:a5:29:6d: 26:2d:6e:b8:7a:09:b6:df:5f:4c:c6:8b:87:13:4b:99:d2:b9: 8e:7e:46:45:73:f3:25:04:ca:a2:da:96:c7:a8:ba:47:6f:97: 9a:69:fd:2a:86:0f:b0:83:87:75:00:6f:07:e3:65:95:4e:60: b9:02:71:1b:2c:55:f2:88:84:f0:ee:0b:d8:be:a6:70:b7:1b: 71:7e:10:86:37:a7:43:a8:a3:96:59:b4:6c:dc:4f:9e:ac:df: 42:e7:9d:de:e3:3d:c9:45:da:59:0f:45:b4:f4:23:09:b7:78: 75:31:d7:a1:72:fa:3f:ea:23:1b:7a:38:ad:50:df:eb:01:44: 63:35:53:99:5f:ef:0e:b9:12:c1:f3:77:13:b0:98:02:eb:57: d3:37:d4:7f:62:1a:93:0b:23:67:da:99:73:4e:f5:88:f1:52: fc:96:8e:09:3a:35:43:dd:8c:92:bd:f2:7d:37:22:82:72:35: df:d1:44:1c:60:53:91:86:19:cd:df:94:86:32:62:46:74:52: f9:e0:b4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkf96GxfEK5bpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MGJjN2U0MWUtM2I5Yi00Nzk1LThlZmMtZTc2NWE0NTY4ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyksgW5Rxn8jHKJ++xSN45ypLIqctBwXy/wKH V3H23PT/aw89dPqgE0tjMXfVjjuMlHT/x603q1D5TvjOwnGKXUWi0s2MKlh0dOI4 IZ0uSdda66Iayk/k6iaSKJrb16rAbypvAOMvwrd5G6Tca1JbJQHh4fEOPm6gDR2E iGmd5iPp4GUWX32zfpVOy2WH5ul/Z1uptgRAOVrxs+uFECfsJavzPNS4ohsL11qQ d37I+n0f2NK62A5AE+Z2vSR0ME42IRiKQX+5fLPSTw4rvH10LZVrZswZw3fC+OFm hHWV5bLZwV/mDOKd1cQ5N67aKq9ni20dSZo336BCDwJ0dlTJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE2VYPxX4qNuP9Wxv6jbswpzcTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTFlY2I4ZTUtMzlhZi0z MjQwLWE2ZmEtNzY1NWUxNWU5ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCEhLJI3xa0AAGKjXCjdLDxyKwi0hoINRaxOYzy9kU3fKueGuvd+3QS kSvpVxKJqEqLvKUpbSYtbrh6CbbfX0zGi4cTS5nSuY5+RkVz8yUEyqLalseoukdv l5pp/SqGD7CDh3UAbwfjZZVOYLkCcRssVfKIhPDuC9i+pnC3G3F+EIY3p0Ooo5ZZ tGzcT56s30Lnnd7jPclF2lkPRbT0Iwm3eHUx16Fy+j/qIxt6OK1Q3+sBRGM1U5lf 7w65EsHzdxOwmALrV9M31H9iGpMLI2famXNO9YjxUvyWjgk6NUPdjJK98n03IoJy Nd/RRBxgU5GGGc3flIYyYkZ0UvngtNc= -----END CERTIFICATE-----Generated at Wed Mar 25 03:36:20 2026 by rpki-client