$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: oS4RJZ+kVfUr39u7qGVXD9ZyK5f9Bv6+nDS4q5dYiI4= Subject key identifier: 39:08:7B:73:67:2F:56:92:76:E7:1B:BD:24:2E:88:1E:2E:D3:C6:6F Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584E2D9F0EC5753C66A63FC12C80 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:0e:c5:75:3c:66:a6:3f:c1:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=19c1a947-52e7-45b3-902c-adc73f929b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:bb:43:d3:af:c0:14:04:53:ee:85:b3:d3: 8a:27:31:6c:5d:6b:57:a7:c2:6a:37:93:97:d7:17: 97:ac:6d:79:4d:8c:50:63:4a:81:1f:4f:d8:5e:26: 0d:12:6e:4c:0a:35:98:d9:4a:b0:7b:4d:17:57:6f: 07:d0:dc:21:3a:ea:76:0c:ea:75:d1:a7:b0:73:1c: 1f:e2:4c:87:1b:a5:8e:a9:f1:01:7f:27:e9:14:ea: 43:80:1e:4c:6f:2d:c6:ac:47:59:1b:83:40:97:e9: 5b:b4:38:a1:c5:c5:c7:4c:c2:9b:d9:06:b1:cd:41: 30:60:45:69:23:f7:65:de:4e:bf:a0:b4:25:98:a2: 0e:df:43:23:7a:e6:8d:87:91:28:94:40:9c:9c:60: 07:01:ce:b9:97:43:54:28:33:3a:2f:c2:b1:bb:52: 71:aa:ee:55:dc:65:b0:90:eb:2a:f0:04:f0:a1:a5: 1e:74:13:cd:29:6d:67:07:0b:fd:59:47:4f:70:4a: 2e:26:85:5f:3f:20:19:e9:00:dd:c8:26:b4:43:bb: f6:48:69:44:f3:40:0a:88:31:f0:4f:70:4c:b2:50: a3:57:8c:34:3e:78:40:c2:f3:81:77:74:c4:dd:83: 3e:27:17:ac:cc:1f:e3:66:e8:eb:9c:5a:5a:ad:c0: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:7B:73:67:2F:56:92:76:E7:1B:BD:24:2E:88:1E:2E:D3:C6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ad:ff:4c:0e:2d:63:91:a3:7c:98:5d:ea:01:6e:db:ac:65: ae:92:a6:60:75:1a:2b:3e:19:50:28:54:6c:db:24:ce:e5:f2: d8:4b:8f:48:ea:48:69:52:b5:68:7e:26:3b:0f:f9:6c:1b:84: 89:cc:b0:c1:41:f1:35:4d:fe:2f:24:97:81:a0:13:9b:f3:46: cb:92:77:bd:15:af:41:cb:fe:47:8b:28:b6:47:5d:a9:3a:e4: 7d:1a:25:e6:24:cd:9d:a5:68:07:b7:f6:c8:9d:0f:61:2c:ef: 2e:f8:28:c3:aa:40:6a:ee:98:b7:67:c1:23:4f:fe:55:02:52: 72:01:a5:a9:45:10:d9:23:9b:d8:62:48:8d:fe:18:15:22:5d: 63:59:6a:2c:3f:fd:4e:5f:99:ea:8e:92:fa:d7:dc:64:c7:35: 69:e8:88:c5:e3:8e:e3:90:c1:5c:7e:e8:3e:24:02:34:6a:4f: 93:2f:3d:c1:b9:39:ba:03:61:11:81:71:26:83:b1:46:b1:05: 7e:87:e2:b7:6b:da:c5:9c:07:78:6a:55:22:00:19:bc:26:74: 0b:75:f0:03:3d:6a:91:9f:a5:fa:7e:7d:aa:64:ef:e3:22:12: 2e:c3:d1:d9:d4:5b:8c:56:f6:f0:bb:0c:ac:24:d1:10:3f:ef: 58:47:b2:b4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4tnw7FdTxmpj/BLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MTljMWE5NDctNTJlNy00NWIzLTkwMmMtYWRjNzNmOTI5YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYe7Q9OvwBQEU+6Fs9OKJzFsXWtXp8JqN5OX 1xeXrG15TYxQY0qBH0/YXiYNEm5MCjWY2Uqwe00XV28H0NwhOup2DOp10aewcxwf 4kyHG6WOqfEBfyfpFOpDgB5Mby3GrEdZG4NAl+lbtDihxcXHTMKb2QaxzUEwYEVp I/dl3k6/oLQlmKIO30MjeuaNh5EolECcnGAHAc65l0NUKDM6L8Kxu1Jxqu5V3GWw kOsq8ATwoaUedBPNKW1nBwv9WUdPcEouJoVfPyAZ6QDdyCa0Q7v2SGlE80AKiDHw T3BMslCjV4w0PnhAwvOBd3TE3YM+JxeszB/jZujrnFparcDPFwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDkIe3NnL1aSducbvSQuiB4u08ZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiK3/TA4tY5GjfJhd6gFu26xlrpKmYHUa Kz4ZUChUbNskzuXy2EuPSOpIaVK1aH4mOw/5bBuEicywwUHxNU3+LySXgaATm/NG y5J3vRWvQcv+R4sotkddqTrkfRol5iTNnaVoB7f2yJ0PYSzvLvgow6pAau6Yt2fB I0/+VQJScgGlqUUQ2SOb2GJIjf4YFSJdY1lqLD/9Tl+Z6o6S+tfcZMc1aeiIxeOO 45DBXH7oPiQCNGpPky89wbk5ugNhEYFxJoOxRrEFfofit2vaxZwHeGpVIgAZvCZ0 C3XwAz1qkZ+l+n59qmTv4yISLsPR2dRbjFb28LsMrCTRED/vWEeytA== -----END CERTIFICATE-----Generated at Tue Jun 16 11:35:16 2026 by rpki-client