$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa File: a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa (raw, json) Hash identifier: K2H2kbKFQhNmXnwYL+aBYnE0LfsDFMPOWv+xddAlUwc= Subject key identifier: 17:15:CA:EB:0F:44:B9:43:28:00:BE:31:45:5F:4D:3C:DA:2E:36:D1 Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Certificate serial: 010D0C9F4328584DF64095A8E663C3D48D766B00 Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 63201 IP address blocks: 161.38.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:95:a8:e6:63:c3:d4:8d:76:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=66e51f83-699a-45e9-8396-1b491534088d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:0f:e2:0e:11:19:98:03:5f:0b:d1:09:23: 64:d1:98:22:59:65:00:18:ce:2a:60:be:e3:30:81: d2:40:71:70:96:ff:45:48:be:21:97:07:a1:67:88: f5:cc:a6:09:40:05:c1:48:2e:84:f9:f8:ad:64:ca: 98:91:af:e8:05:ec:98:6a:75:1c:0b:ed:98:a6:7d: ab:37:19:f4:d1:ea:48:9a:7d:d7:c8:6b:30:47:5a: 73:ed:52:1e:7a:1f:45:92:d3:2f:2c:48:d9:ae:0a: 41:16:4d:b8:5f:a9:d4:6c:9e:14:6f:9c:84:f0:79: cf:7f:9e:85:85:2e:f3:9b:80:f1:0d:46:42:39:8c: 8e:09:33:3b:e2:b9:02:eb:9f:74:76:b7:b6:15:2b: 00:98:2d:44:84:91:00:50:23:c6:eb:d5:41:54:69: c0:6c:5c:40:bc:65:87:8c:23:81:c7:57:c1:65:c5: e1:73:07:f0:c2:8a:45:09:8a:da:a9:68:12:77:f6: 72:79:21:23:c1:5c:aa:25:23:45:05:d2:13:46:b2: 40:0a:dc:46:99:52:4f:df:54:07:d5:96:4a:59:29: b5:f2:cb:c2:01:b5:a6:9a:3f:96:6d:cd:fd:0f:6e: 7a:2f:bb:bb:69:bc:e3:16:7b:47:0a:0b:1f:4d:f8: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:CA:EB:0F:44:B9:43:28:00:BE:31:45:5F:4D:3C:DA:2E:36:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl X509v3 Authority Key Identifier: keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer sbgp-ipAddrBlock: critical IPv4: 161.38.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9a:5f:69:a3:8e:64:4c:23:7d:be:d9:d9:69:19:eb:49:41: da:86:b8:11:d7:de:cf:24:5d:29:f8:46:26:5b:d9:8b:97:41: 94:38:08:d0:e8:d5:9c:22:e8:e3:4a:34:df:f0:a7:ff:a3:80: 18:b9:1f:a2:7f:88:11:46:64:6f:f1:a2:70:20:e2:e6:03:42: f4:2f:79:c0:bf:6f:39:5d:ba:d3:17:ea:3d:da:a1:fc:90:cc: d1:62:63:a1:df:4a:36:9d:35:64:8b:99:7f:86:fc:d7:87:c4: 63:4f:75:d7:33:b2:ee:b0:c8:55:0d:cd:06:45:da:a0:55:7b: 44:e7:97:c2:d0:f7:c3:29:5e:04:64:6a:b7:42:de:b4:df:1c: bf:9a:5a:48:c6:f8:5a:4a:9d:b3:36:bb:44:88:b3:b0:e7:9b: f3:39:99:ac:65:85:22:ba:7a:42:33:80:36:fa:0f:1a:53:43: 60:96:58:9e:ea:18:66:20:7f:75:c5:3c:b1:78:d8:df:aa:ae: 4f:d5:4d:aa:e0:75:eb:ca:6d:c4:f1:f8:02:18:f7:a0:0c:92: 93:85:18:a5:81:7a:27:56:9e:8f:ae:ee:b3:ce:c8:1f:3f:94: 8b:bd:aa:e1:4a:d7:a3:dd:a7:3d:9a:2c:fa:3e:01:f9:b2:83: 49:bc:d2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJWo5mPD1I12awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez ODYxMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk NjZlNTFmODMtNjk5YS00NWU5LTgzOTYtMWI0OTE1MzQwODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfoP4g4RGZgDXwvRCSNk0ZgiWWUAGM4qYL7j MIHSQHFwlv9FSL4hlwehZ4j1zKYJQAXBSC6E+fitZMqYka/oBeyYanUcC+2Ypn2r Nxn00epImn3XyGswR1pz7VIeeh9FktMvLEjZrgpBFk24X6nUbJ4Ub5yE8HnPf56F hS7zm4DxDUZCOYyOCTM74rkC6590dre2FSsAmC1EhJEAUCPG69VBVGnAbFxAvGWH jCOBx1fBZcXhcwfwwopFCYraqWgSd/ZyeSEjwVyqJSNFBdITRrJACtxGmVJP31QH 1ZZKWSm18svCAbWmmj+Wbc39D256L7u7abzjFntHCgsfTfhLkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcVyusPRLlDKAC+MUVfTTzaLjbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvYTdhOWM4N2EtZTJmZi0z ZTNiLTgyMWYtYzI5ZGM4ZDgzNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeaX2mjjmRMI32+2dlpGetJQdqGuBHX3s8kXSn4RiZb2YuXQZQ4CNDo 1Zwi6ONKNN/wp/+jgBi5H6J/iBFGZG/xonAg4uYDQvQvecC/bzldutMX6j3aofyQ zNFiY6HfSjadNWSLmX+G/NeHxGNPddczsu6wyFUNzQZF2qBVe0Tnl8LQ98MpXgRk ardC3rTfHL+aWkjG+FpKnbM2u0SIs7Dnm/M5maxlhSK6ekIzgDb6DxpTQ2CWWJ7q GGYgf3XFPLF42N+qrk/VTargdevKbcTx+AIY96AMkpOFGKWBeidWno+u7rPOyB8/ lIu9quFK16Pdpz2aLPo+Afmyg0m80mI= -----END CERTIFICATE-----Generated at Sat Jun 13 17:08:50 2026 by rpki-client