$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: 1Y6ugWX1MZGTVLhNN2HXtvhKh29jBCc6ZK8QqJfFztg= Subject key identifier: 60:91:07:B2:35:E2:5E:D0:86:D9:30:53:0B:8C:25:59:D0:F3:C5:4F Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584E07008B93AFD4CA3DABC9E0A8 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8b:93:af:d4:ca:3d:ab:c9:e0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=20c614f5-6f7c-4814-abb0-ed8327ff5a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:c6:ca:7e:21:d0:d6:dd:82:3a:6c:15:96: 6f:b0:1a:3e:03:55:fa:13:67:c6:ab:cd:f8:7f:e3: 1e:05:2b:3f:9a:ba:e9:1f:16:d7:0c:e8:98:7a:80: 45:e5:d3:8b:60:78:ec:c9:c4:11:90:08:5b:2b:4f: 55:1d:ed:cc:38:79:87:fb:22:61:c6:a6:dc:26:d6: 62:03:1f:a0:66:95:f1:b7:26:58:26:6a:9a:ab:45: ca:8d:41:f5:18:f6:c8:54:a3:36:32:99:de:c5:4c: 29:dd:0f:b0:40:2b:9d:69:09:89:18:f0:86:7e:6c: 6d:62:df:44:c1:22:5b:1d:fc:46:a9:53:b7:41:14: 85:36:c6:49:80:99:dd:53:b4:f4:c7:d7:a3:1b:80: 67:1c:eb:43:56:ff:3f:f8:75:9c:51:8a:ee:2d:c8: f1:e9:58:16:19:cf:06:be:e3:90:f4:f1:28:0a:e2: b0:f6:e0:d8:e4:b7:45:ea:fc:3f:06:3b:3e:ed:cc: 36:6b:b0:62:df:b4:6b:80:15:bc:47:69:2a:8e:ed: b9:db:f9:8a:7c:d2:5a:dc:bd:91:1d:eb:ec:e4:87: 2d:a5:6f:45:cd:7e:15:e6:3a:a0:21:c6:ae:67:47: a3:bd:fb:71:44:19:03:43:4f:c1:85:fe:ea:09:81: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:91:07:B2:35:E2:5E:D0:86:D9:30:53:0B:8C:25:59:D0:F3:C5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:10:b2:40:64:10:73:e8:c5:43:f9:1c:c1:23:c7:55:18:a4: d8:70:65:0e:29:d3:f0:b3:7b:8d:21:88:d4:78:9b:97:ca:df: e9:36:b3:ae:dc:53:d5:c5:a3:82:bc:83:90:a5:1d:d9:3f:3b: 3f:0a:49:2e:97:ed:e6:6c:01:72:80:3b:ba:6e:48:6e:fe:a2: 10:e5:85:31:a5:43:02:08:10:26:a8:d2:bd:b8:5a:5e:ef:cd: 38:bf:1e:21:35:9f:81:d6:24:e2:45:9e:08:db:d8:50:96:d7: ba:34:b8:5b:ed:7a:b7:00:6d:15:e8:ae:75:8b:84:42:26:ee: 2e:04:c0:a8:19:45:8f:29:63:8c:a7:6d:6c:e4:48:d3:12:62: f2:71:c2:52:6a:1b:10:96:b3:1a:fd:1d:4b:46:ef:c6:ad:aa: fb:31:d7:9a:7d:ce:ef:b0:b7:33:f9:d5:97:9b:43:1d:36:c4: 4b:f5:a4:a1:ea:3c:bd:58:2e:7e:39:d5:5d:43:6c:cc:0e:4c: b7:d7:31:86:67:0f:1d:b6:d3:e0:97:72:f1:47:9f:81:7d:47: d8:15:bd:93:ec:8f:71:52:47:9a:71:03:0b:9b:e2:8a:56:d1: e1:06:35:07:fb:ff:30:d0:9b:31:7c:80:5f:e2:6c:fe:b5:14: b1:5e:e0:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIuTr9TKPavJ4KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MjBjNjE0ZjUtNmY3Yy00ODE0LWFiYjAtZWQ4MzI3ZmY1YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ePGyn4h0NbdgjpsFZZvsBo+A1X6E2fGq834 f+MeBSs/mrrpHxbXDOiYeoBF5dOLYHjsycQRkAhbK09VHe3MOHmH+yJhxqbcJtZi Ax+gZpXxtyZYJmqaq0XKjUH1GPbIVKM2MpnexUwp3Q+wQCudaQmJGPCGfmxtYt9E wSJbHfxGqVO3QRSFNsZJgJndU7T0x9ejG4BnHOtDVv8/+HWcUYruLcjx6VgWGc8G vuOQ9PEoCuKw9uDY5LdF6vw/Bjs+7cw2a7Bi37RrgBW8R2kqju252/mKfNJa3L2R Hevs5IctpW9FzX4V5jqgIcauZ0ejvftxRBkDQ0/Bhf7qCYFGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCRB7I14l7QhtkwUwuMJVnQ88VPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkQskBkEHPoxUP5HMEjx1UYpNhwZQ4p0/Cze40hiNR4m5fK3+k2s67c U9XFo4K8g5ClHdk/Oz8KSS6X7eZsAXKAO7puSG7+ohDlhTGlQwIIECao0r24Wl7v zTi/HiE1n4HWJOJFngjb2FCW17o0uFvtercAbRXornWLhEIm7i4EwKgZRY8pY4yn bWzkSNMSYvJxwlJqGxCWsxr9HUtG78atqvsx15p9zu+wtzP51ZebQx02xEv1pKHq PL1YLn451V1DbMwOTLfXMYZnDx220+CXcvFHn4F9R9gVvZPsj3FSR5pxAwub4opW 0eEGNQf7/zDQmzF8gF/ibP61FLFe4GE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:51 2026 by rpki-client