$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: LcQsdTZTVwPgMQtwmrSPOw+5nEd0/FGQQTVHogE8C4A= Subject key identifier: D1:F2:DE:BB:6F:C1:52:49:F9:1A:8F:73:5A:D9:3E:7A:BA:8A:E7:B7 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584C6E2163929935575B47A08740 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:63:92:99:35:57:5b:47:a0:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=acf941c9-f8e1-4a7b-adb7-87ec62bb55c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:0d:0b:d8:c2:43:60:02:32:1a:0b:69:97: 3e:2b:2e:aa:2b:e4:0c:5f:e5:2f:de:e7:c6:d5:8f: 4a:31:2b:a4:d8:ec:5d:d4:2b:85:ec:d8:e0:a7:be: 73:fa:a3:7d:a4:b6:d6:38:d2:6e:1f:32:f1:f9:d6: 9c:8f:c1:33:2f:a3:92:82:39:33:0f:e6:2d:a6:61: 19:fe:50:38:67:19:1d:84:86:b6:8c:4b:ca:bf:ec: 8f:c3:e5:46:b6:54:87:05:ff:73:73:9a:1c:6d:11: 90:c1:c0:bf:a2:db:31:d8:e1:b0:97:fc:6c:96:70: 8c:ae:8c:b1:15:7b:4a:5c:0a:f0:33:7d:b0:c0:16: 0c:f0:7b:8d:9c:6c:60:fc:44:fe:82:e1:14:48:7e: 5b:13:83:52:7f:1f:fb:8d:f3:37:2e:b9:35:10:a8: 18:e6:3a:d2:8a:66:24:8c:b1:b3:83:a8:20:f5:78: 8f:5e:3e:86:c8:44:ea:d3:d8:75:29:96:0d:5f:f0: 74:c5:24:75:4e:c6:1b:d4:3f:47:29:34:58:54:d1: c8:db:76:d1:07:f7:8c:2b:72:a7:61:53:97:5d:c0: 22:01:a4:41:2c:c0:b7:ad:bf:7a:ff:9e:9a:84:1c: d2:3b:48:23:15:0f:81:6a:2e:af:1e:8f:8e:27:de: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F2:DE:BB:6F:C1:52:49:F9:1A:8F:73:5A:D9:3E:7A:BA:8A:E7:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:24:bc:2f:f8:a0:b7:71:2e:d9:35:21:c3:4e:28:be:91:6a: da:22:43:2d:64:bb:eb:91:51:27:e6:34:4e:f9:93:3e:f0:f0: 35:82:b2:a9:08:b1:26:4e:e7:da:f9:ca:a0:9a:85:c1:bb:88: 95:3b:cc:55:b6:0a:46:82:4a:90:c8:f2:4c:a8:17:62:9f:29: a1:f3:b3:79:4a:89:fb:03:1d:e4:e8:8b:52:49:6d:50:b2:3e: 08:02:2a:d1:e3:ed:d1:ce:0b:88:2f:d9:3f:c8:da:de:58:03: 2b:3a:1a:3f:f1:4a:3e:1b:f1:03:a2:cf:22:e5:62:74:50:74: a5:0b:cd:45:80:8b:6a:72:15:a3:ec:54:d8:b4:46:6f:8b:fd: 3a:5c:0c:b3:1a:25:21:b8:d1:c6:90:a9:e0:6c:ed:04:7f:06: c2:60:f5:11:d6:45:42:55:2d:6a:a9:9c:fa:21:71:58:53:7e: ee:19:93:bd:b9:dd:f6:88:f9:78:3f:12:fe:14:91:44:3e:b0: da:2e:b4:4c:b2:17:f5:c8:d0:44:59:bc:c7:c8:5d:cf:64:4f: a5:c0:35:ee:5f:75:9c:96:bd:f4:f0:61:64:f2:a9:c6:09:42: 96:cc:7a:98:e4:0f:04:0a:41:10:bd:2f:89:ad:75:63:7d:e0: 38:af:7a:bb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWExuIWOSmTVXW0egh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk YWNmOTQxYzktZjhlMS00YTdiLWFkYjctODdlYzYyYmI1NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvsNC9jCQ2ACMhoLaZc+Ky6qK+QMX+Uv3ufG 1Y9KMSuk2Oxd1CuF7Njgp75z+qN9pLbWONJuHzLx+dacj8EzL6OSgjkzD+YtpmEZ /lA4ZxkdhIa2jEvKv+yPw+VGtlSHBf9zc5ocbRGQwcC/otsx2OGwl/xslnCMroyx FXtKXArwM32wwBYM8HuNnGxg/ET+guEUSH5bE4NSfx/7jfM3Lrk1EKgY5jrSimYk jLGzg6gg9XiPXj6GyETq09h1KZYNX/B0xSR1TsYb1D9HKTRYVNHI23bRB/eMK3Kn YVOXXcAiAaRBLMC3rb96/56ahBzSO0gjFQ+Bai6vHo+OJ95NbQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNHy3rtvwVJJ+RqPc1rZPnq6iue3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmSS8L/igt3Eu2TUhw04ovpFq2iJDLWS7 65FRJ+Y0TvmTPvDwNYKyqQixJk7n2vnKoJqFwbuIlTvMVbYKRoJKkMjyTKgXYp8p ofOzeUqJ+wMd5OiLUkltULI+CAIq0ePt0c4LiC/ZP8ja3lgDKzoaP/FKPhvxA6LP IuVidFB0pQvNRYCLanIVo+xU2LRGb4v9OlwMsxolIbjRxpCp4GztBH8GwmD1EdZF QlUtaqmc+iFxWFN+7hmTvbnd9oj5eD8S/hSRRD6w2i60TLIX9cjQRFm8x8hdz2RP pcA17l91nJa99PBhZPKpxglClsx6mOQPBApBEL0via11Y33gOK96uw== -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:08 2026 by rpki-client