$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: fhr2NSp/mjdX4HSSuwaDXd4q19EZ5cUBI3rmeNeZ5TU= Subject key identifier: E2:77:24:F7:A4:C7:3E:A5:A4:0D:DB:58:FB:A3:58:1E:44:E4:EA:BA Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584ED001DC0C1A79437F21504240 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:dc:0c:1a:79:43:7f:21:50:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=ef27be12-027e-4f0d-9209-984b57291b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:26:59:dc:3b:28:5a:e1:cc:7d:10:b1:97: 9d:93:d8:f1:bf:85:2b:d4:88:dc:cb:98:d8:41:5a: 83:c9:f6:9f:fe:fe:85:96:a6:5b:9e:8d:e8:3a:63: ee:3b:1a:46:32:44:1e:a2:a6:39:52:cb:be:dd:d8: 4d:9e:b1:7c:38:8d:16:51:fb:95:52:79:e3:1a:fb: 2b:fc:8e:2d:51:aa:c7:13:75:b2:cc:4d:8d:88:ce: f9:62:4b:44:94:85:50:cc:c4:c8:0c:1c:60:5a:f5: 88:5e:3f:f4:a7:b1:28:8b:b9:cf:87:69:7c:64:7b: 81:58:ca:94:be:15:90:1c:6e:60:fc:ad:b6:cf:56: 7c:87:9e:e2:10:6b:12:b6:b3:17:b6:3c:6a:50:8c: 25:ef:d5:e6:8d:46:aa:dc:19:6f:23:4f:bf:a3:58: ee:39:cb:aa:6f:2e:b5:3a:0e:d5:a6:98:fb:1b:91: a7:ea:38:5c:b2:a3:a2:d8:84:32:2e:73:fc:14:44: 00:b9:5d:a8:b2:5f:93:0e:f4:4f:c9:e3:21:2e:b5: 5c:ff:88:3e:ec:95:e7:9d:df:4e:53:1e:46:e6:ed: 1c:91:72:13:da:56:a1:2e:ec:cb:d6:2e:7b:d5:3b: 7f:90:8d:9d:cb:54:2f:fb:3d:36:fd:f7:a1:0a:c1: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:24:F7:A4:C7:3E:A5:A4:0D:DB:58:FB:A3:58:1E:44:E4:EA:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:15:9c:b2:47:0c:74:02:f3:35:40:6d:2d:a9:f4:89:17:2b: 01:4a:c9:8e:0b:26:a0:1d:1b:2d:fe:d4:6f:b8:44:19:97:0d: ba:78:ff:d3:22:96:eb:8e:11:f5:5f:71:94:f7:68:d0:36:51: fe:07:19:0c:be:cd:28:30:58:31:e4:90:f4:98:03:0d:c5:76: 7c:ab:e9:96:87:34:c1:f6:09:0c:28:ca:41:34:7b:8d:92:b4: 39:1b:65:ab:5a:30:19:99:a6:e3:b7:2b:c4:19:e8:55:5f:9c: 7e:c7:76:a8:9a:7e:e9:27:d3:de:9b:e7:77:db:59:bd:d3:ad: 82:3b:70:e9:81:93:58:89:17:87:08:6e:97:87:9d:9e:47:72: e3:18:1e:54:2f:ab:03:27:a5:87:b8:fb:37:59:47:71:aa:ac: 8d:f1:59:bc:24:41:72:76:07:15:9b:35:21:de:5d:7b:00:4a: bb:a2:ad:0a:92:cc:03:ce:40:8f:12:9e:65:3f:ef:f7:c1:10: ff:f8:96:9f:c1:32:a9:c6:55:22:ad:51:c7:04:1f:e9:6e:57: 49:18:1d:df:a2:fb:b9:e7:24:c6:7e:8b:c8:a6:68:be:f1:2a: ba:44:70:93:be:bf:e9:64:fa:86:b0:fb:b7:10:97:26:9c:d3: 73:d4:8f:8f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7QAdwMGnlDfyFQQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWYyN2JlMTItMDI3ZS00ZjBkLTkyMDktOTg0YjU3MjkxYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz08mWdw7KFrhzH0QsZedk9jxv4Ur1Ijcy5jY QVqDyfaf/v6FlqZbno3oOmPuOxpGMkQeoqY5Usu+3dhNnrF8OI0WUfuVUnnjGvsr /I4tUarHE3WyzE2NiM75YktElIVQzMTIDBxgWvWIXj/0p7Eoi7nPh2l8ZHuBWMqU vhWQHG5g/K22z1Z8h57iEGsStrMXtjxqUIwl79XmjUaq3BlvI0+/o1juOcuqby61 Og7Vppj7G5Gn6jhcsqOi2IQyLnP8FEQAuV2osl+TDvRPyeMhLrVc/4g+7JXnnd9O Ux5G5u0ckXIT2lahLuzL1i571Tt/kI2dy1Qv+z02/fehCsF+XQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOJ3JPekxz6lpA3bWPujWB5E5Oq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcxWcskcMdALzNUBtLan0iRcrAUrJjgsm oB0bLf7Ub7hEGZcNunj/0yKW644R9V9xlPdo0DZR/gcZDL7NKDBYMeSQ9JgDDcV2 fKvploc0wfYJDCjKQTR7jZK0ORtlq1owGZmm47crxBnoVV+cfsd2qJp+6SfT3pvn d9tZvdOtgjtw6YGTWIkXhwhul4ednkdy4xgeVC+rAyelh7j7N1lHcaqsjfFZvCRB cnYHFZs1Id5dewBKu6KtCpLMA85AjxKeZT/v98EQ//iWn8EyqcZVIq1RxwQf6W5X SRgd36L7ueckxn6LyKZovvEqukRwk76/6WT6hrD7txCXJpzTc9SPjw== -----END CERTIFICATE-----Generated at Thu Aug 13 12:59:13 2026 by rpki-client