$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa File: 38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa (raw, json) Hash identifier: wWtWIaoCNnbrU23G9uvVDf+Es7Irc/XESnKFRBrn+tQ= Subject key identifier: 45:5A:8F:1E:36:EA:EB:17:D9:00:B5:68:53:5D:7B:B1:1A:B8:51:6F Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584F119CDDD25BC05D9DF083BDC0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 209043 IP address blocks: 172.103.32.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:dd:d2:5b:c0:5d:9d:f0:83:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b898d8da-fa99-4a56-911a-c064dd6894c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:09:38:7c:2d:bc:3f:66:4c:d5:bb:90:1f: 9c:9f:10:99:84:fe:66:5c:8a:e3:6a:a0:a5:47:f0: 7f:85:7d:d1:3f:33:8c:d6:de:e6:8d:5a:8f:8b:74: 45:f0:f1:bc:b9:61:89:5e:16:e6:39:a8:ce:83:93: 0e:2d:87:bb:fd:6c:0c:64:87:75:06:d5:57:b1:a0: 9c:cb:da:6c:ee:a8:e7:c4:3b:de:be:7b:78:91:e2: 55:c8:07:a3:7e:85:be:bb:b1:89:8b:ae:fd:69:4d: 9d:bf:4a:73:49:64:96:8d:2c:a8:72:57:31:4b:48: 72:97:a4:12:93:7d:7e:44:b9:ac:c0:83:d8:b5:48: 46:f7:e1:8d:1e:cd:d1:b9:a5:a2:c1:a2:0a:44:72: e7:e5:e2:83:c4:63:54:e7:14:30:bc:39:0e:49:af: 24:9b:3e:28:9b:f8:3d:96:1d:4d:43:10:dd:ee:d5: 4b:07:a7:99:59:b4:80:0c:c5:38:af:17:0b:07:07: b0:13:ad:fd:a8:6d:8a:61:2d:41:06:60:0a:91:2f: a2:bf:81:af:56:39:bb:7f:6e:26:fd:7b:42:b6:83: 23:ac:89:43:e8:4f:f3:7a:ba:63:a0:f8:a5:55:91: 63:82:a2:ab:1e:9d:bb:21:4c:3a:61:15:94:3f:83: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:8F:1E:36:EA:EB:17:D9:00:B5:68:53:5D:7B:B1:1A:B8:51:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 172.103.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:85:09:d4:b0:a6:b0:65:99:68:87:7e:08:10:0a:ca:b7:8e: 18:f8:a2:bb:d6:e3:e4:61:45:32:2c:a1:49:8f:bb:35:a6:6c: 56:3f:67:67:8b:da:50:78:6f:69:c8:17:31:98:07:f4:26:02: 1a:cf:f7:81:1c:78:dd:da:16:92:e0:c5:ad:ad:4c:fb:c6:ea: 05:f1:c4:d6:fc:c5:7f:bf:ca:fc:da:dc:e0:10:2d:6a:3a:c2: 9a:f3:e0:d8:a7:5f:5c:35:6d:36:40:88:48:2e:bb:80:03:4a: c4:d2:ab:22:8f:d6:3e:ba:c6:d9:c3:6e:0a:7c:ca:dd:36:49: 97:7b:2b:86:92:c6:98:ac:18:6b:7e:88:51:86:ba:0b:45:5e: 54:c2:c1:a9:6d:83:34:d6:70:ed:b4:a6:f9:81:38:3e:27:ac: ba:6c:8d:80:0d:98:81:61:19:12:51:e9:e2:0f:a8:bb:e1:bb: 47:30:0c:25:4f:57:7a:4f:83:2f:41:e0:3e:b9:16:ca:33:fd: 85:98:44:2f:b6:5e:d7:2c:b8:36:fd:be:dd:03:a5:56:88:5b: 4f:32:1a:de:e3:62:ea:f0:3a:cd:6f:71:df:03:50:46:bf:37: 58:19:47:cc:fe:7a:26:2d:1b:a0:d1:b7:e5:23:c1:ec:f0:e4: c0:d3:94:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN3SW8BdnfCDvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg5OGQ4ZGEtZmE5OS00YTU2LTkxMWEtYzA2NGRkNjg5NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwYJOHwtvD9mTNW7kB+cnxCZhP5mXIrjaqCl R/B/hX3RPzOM1t7mjVqPi3RF8PG8uWGJXhbmOajOg5MOLYe7/WwMZId1BtVXsaCc y9ps7qjnxDvevnt4keJVyAejfoW+u7GJi679aU2dv0pzSWSWjSyoclcxS0hyl6QS k31+RLmswIPYtUhG9+GNHs3RuaWiwaIKRHLn5eKDxGNU5xQwvDkOSa8kmz4om/g9 lh1NQxDd7tVLB6eZWbSADMU4rxcLBwewE639qG2KYS1BBmAKkS+iv4GvVjm7f24m /XtCtoMjrIlD6E/zerpjoPilVZFjgqKrHp27IUw6YRWUP4P7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVajx426usX2QC1aFNde7EauFFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMzhiZmUxZjctNmZiNi0z Y2ZmLWE3YzAtNDQ0MTE5MmZiYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuFCdSwprBlmWiHfggQCsq3jhj4orvW4+RhRTIsoUmPuzWmbFY/Z2eL 2lB4b2nIFzGYB/QmAhrP94EceN3aFpLgxa2tTPvG6gXxxNb8xX+/yvza3OAQLWo6 wprz4NinX1w1bTZAiEguu4ADSsTSqyKP1j66xtnDbgp8yt02SZd7K4aSxpisGGt+ iFGGugtFXlTCwaltgzTWcO20pvmBOD4nrLpsjYANmIFhGRJR6eIPqLvhu0cwDCVP V3pPgy9B4D65Fsoz/YWYRC+2XtcsuDb9vt0DpVaIW08yGt7jYurwOs1vcd8DUEa/ N1gZR8z+eiYtG6DRt+Ujwezw5MDTlFk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:35:07 2026 by rpki-client