$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa File: b44b5711-0436-3c6d-afd4-086e370fe33b.roa (raw, json) Hash identifier: yl4eStEydbCTiF12+1kaiy5P7DaVxnnupQxLskCPmZs= Subject key identifier: C2:77:73:B8:76:8A:17:9C:9C:13:E3:E3:AC:DD:D9:E0:BB:37:C1:BC Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584C8046CDCAD5DECC90F169C680 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 36445 IP address blocks: 161.38.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:cd:ca:d5:de:cc:90:f1:69:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=1146b041-d02a-42b2-9348-a086c696a1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:27:f2:99:3c:87:0d:7f:2a:fd:70:3c:77: c7:e2:31:bc:33:21:fc:33:fb:b3:00:94:14:f2:90: e6:9d:83:bb:b3:6d:49:33:a5:16:73:c6:59:79:94: 77:74:b5:89:88:d4:a8:57:62:ad:cf:f4:ef:f0:50: f3:7b:f6:da:0b:f6:ab:c6:fa:2e:d4:54:c8:25:9f: ad:05:0c:f2:97:f1:1e:bb:f5:42:fe:fc:99:ff:c8: 1e:f3:db:60:0c:30:ed:42:4f:e8:2b:0e:4b:6d:6e: a3:af:27:c6:0c:a4:ea:62:50:92:d6:4f:0a:29:0c: 4e:0f:0d:d5:31:ee:d1:bc:64:c5:c8:90:45:f6:ec: ca:d3:2a:1f:14:6b:51:e8:cb:c9:42:51:18:4f:16: 21:6a:c7:20:45:db:83:1c:9a:f8:06:16:16:db:99: 1e:05:dd:66:62:f9:c5:99:6e:84:4b:a8:5b:b0:82: 43:93:a0:49:14:91:db:ee:22:9b:fa:77:26:e8:11: d2:f5:ad:e0:f4:7a:83:6e:c5:1f:02:25:4d:e8:ac: 29:c5:1a:37:46:aa:4b:31:0e:5b:e1:a2:0a:37:10: cb:7f:50:46:eb:bb:19:e6:6c:b6:08:55:0a:58:ef: 08:04:b6:1b:7a:d7:b6:28:05:52:96:ac:fd:77:96: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:73:B8:76:8A:17:9C:9C:13:E3:E3:AC:DD:D9:E0:BB:37:C1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 161.38.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ba:96:4b:af:44:4e:5f:a6:e1:22:b0:05:b3:ed:bc:f5:80: 91:b6:47:e4:46:2c:e5:8b:d6:2c:46:40:04:a5:63:22:e1:00: 6c:68:ae:ef:47:19:c5:a2:d6:22:77:17:d9:50:9f:8d:10:34: 6c:c4:4b:7c:54:4e:91:db:ff:50:38:0a:83:cd:ce:41:ff:dc: 63:3e:b2:48:14:0a:d0:c0:a4:1e:e5:de:3e:74:a2:ff:99:9c: b5:2e:ce:d6:fd:63:fd:7d:b0:6f:7b:70:bc:bf:4b:aa:eb:c5: ee:60:3f:30:95:4b:d6:87:8a:64:76:93:fa:1d:cc:51:a4:fe: a5:f6:27:d5:0c:31:5f:24:7e:9e:43:02:3f:8b:02:97:52:9e: 3c:60:c5:a2:7f:ed:98:59:a7:40:18:f7:7a:41:0c:6a:2d:27: 52:ff:e9:ec:f6:19:c4:bf:e3:e1:0c:80:71:75:5c:59:da:19: a8:12:0d:40:d0:1b:de:67:65:47:f4:00:f1:31:8f:98:6f:1b: 96:b0:91:02:64:1a:09:15:c8:cd:c3:4f:1c:b9:ff:86:45:c2: a7:40:e8:e0:63:19:c0:8d:ef:91:01:2a:32:d9:fb:63:c2:4e: be:78:5b:ef:cc:fd:9c:5b:36:a3:36:e3:61:23:52:36:3e:6b: 5d:e2:e6:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARs3K1d7MkPFpxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTE0NmIwNDEtZDAyYS00MmIyLTkzNDgtYTA4NmM2OTZhMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4gn8pk8hw1/Kv1wPHfH4jG8MyH8M/uzAJQU 8pDmnYO7s21JM6UWc8ZZeZR3dLWJiNSoV2Ktz/Tv8FDze/baC/arxvou1FTIJZ+t BQzyl/Eeu/VC/vyZ/8ge89tgDDDtQk/oKw5LbW6jryfGDKTqYlCS1k8KKQxODw3V Me7RvGTFyJBF9uzK0yofFGtR6MvJQlEYTxYhascgRduDHJr4BhYW25keBd1mYvnF mW6ES6hbsIJDk6BJFJHb7iKb+ncm6BHS9a3g9HqDbsUfAiVN6KwpxRo3RqpLMQ5b 4aIKNxDLf1BG67sZ5my2CFUKWO8IBLYbete2KAVSlqz9d5ZeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ3c7h2ihecnBPj46zd2eC7N8G8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvYjQ0YjU3MTEtMDQzNi0z YzZkLWFmZDQtMDg2ZTM3MGZlMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK6lkuvRE5fpuEisAWz7bz1gJG2R+RGLOWL1ixGQASlYyLhAGxoru9H GcWi1iJ3F9lQn40QNGzES3xUTpHb/1A4CoPNzkH/3GM+skgUCtDApB7l3j50ov+Z nLUuztb9Y/19sG97cLy/S6rrxe5gPzCVS9aHimR2k/odzFGk/qX2J9UMMV8kfp5D Aj+LApdSnjxgxaJ/7ZhZp0AY93pBDGotJ1L/6ez2GcS/4+EMgHF1XFnaGagSDUDQ G95nZUf0APExj5hvG5awkQJkGgkVyM3DTxy5/4ZFwqdA6OBjGcCN75EBKjLZ+2PC Tr54W+/M/ZxbNqM242EjUjY+a13i5mU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:45 2026 by rpki-client