$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa File: d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json) Hash identifier: Sodu1DK+3cFXVDeI/45s7hJZCwO76u/82zth+VqbqSw= Subject key identifier: 96:CE:FE:B7:95:F5:5B:CA:93:DA:A9:EC:D7:C0:82:F5:93:0C:0A:96 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584F4976E6BB0E4939423674FC80 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396479 IP address blocks: 161.38.192.0/22 maxlen: 24 161.38.196.0/22 maxlen: 24 161.38.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:e6:bb:0e:49:39:42:36:74:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3818d9bf-8493-4a6e-8aee-e05610a8c177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:6f:7d:52:b4:92:2f:ee:0d:ab:76:8b:39: ec:51:7a:aa:de:2b:28:09:a0:17:6e:a7:32:0d:76: fe:82:8d:91:94:06:7f:48:6a:03:bb:dd:84:c2:28: de:09:e4:5d:e0:c6:86:e7:f2:f9:bf:6a:04:df:04: 8f:ec:47:85:cd:57:64:67:85:e7:be:bf:6f:a1:48: 7e:12:df:cb:92:15:dd:54:dc:91:36:3c:03:c4:03: 8a:86:a7:99:3b:ac:71:60:c1:83:04:9d:ae:a1:e3: d8:3a:65:70:9d:be:4d:8d:e3:dd:39:c9:51:8c:ff: d3:81:29:dd:96:0d:d1:d5:89:75:5a:26:5c:a1:eb: 6d:ed:ef:d2:9f:a9:da:09:18:54:71:fa:13:c9:c4: 97:9a:f1:7b:09:21:54:c0:f9:89:9e:43:c8:72:29: a3:5a:44:97:9a:10:7a:52:11:c2:48:32:2d:9a:df: 50:52:e4:e5:fe:9f:69:75:65:f9:b8:23:68:21:eb: da:0b:d1:36:03:2a:4a:f2:1a:a8:23:d6:49:a8:bd: 5b:60:c1:73:ee:d8:19:ad:83:dc:1b:83:7b:64:21: aa:25:ad:81:9f:42:fc:38:7e:53:28:46:41:b5:01: 5e:aa:56:69:18:84:8d:59:2a:6a:33:a3:6b:48:2e: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CE:FE:B7:95:F5:5B:CA:93:DA:A9:EC:D7:C0:82:F5:93:0C:0A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0-161.38.203.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:44:bd:c8:63:21:91:af:cc:60:d8:3e:89:69:c6:94:f8:5e: df:35:74:c4:01:66:3c:99:d4:df:fa:f7:a0:01:ae:f7:4c:e0: a1:3f:9d:2b:ce:bd:d8:e2:a0:1b:7f:bf:2b:8f:99:45:cd:74: bf:dd:24:89:de:24:64:e2:69:e9:b1:26:17:c9:8d:fb:1b:df: 51:be:a8:f4:e7:4c:1c:f5:5f:5a:70:b4:75:f8:2e:55:37:b4: ee:82:c4:76:1b:24:dc:88:0f:93:8e:ca:98:65:4c:28:cf:b2: 65:25:9f:2e:4b:2f:9d:db:25:00:3c:a8:56:24:4b:5b:e1:57: 2c:f4:93:19:77:13:56:c6:93:42:db:a4:9c:f1:b3:74:1d:f8: bb:50:e3:f1:75:d2:0e:af:0a:83:fc:40:a7:4f:99:cd:65:b3: 9c:94:3b:6c:b4:fb:b9:74:d6:c7:ec:1f:09:02:db:c0:d3:00: 93:00:44:57:a3:0a:2c:4e:fd:3a:77:70:bd:3b:a4:3f:7f:c1: 14:3a:4a:21:b8:4f:b0:b6:79:bc:ff:aa:74:29:3e:89:ee:32: 15:7d:3e:80:20:52:d4:c5:1a:82:99:8c:81:a9:e0:1b:3f:49: 2b:86:f1:81:42:56:75:23:e9:3c:8f:f0:4a:99:86:88:a3:2b: 14:1a:31:79 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Jdua7Dkk5QjZ0/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzgxOGQ5YmYtODQ5My00YTZlLThhZWUtZTA1NjEwYThjMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmpvfVK0ki/uDat2iznsUXqq3isoCaAXbqcy DXb+go2RlAZ/SGoDu92EwijeCeRd4MaG5/L5v2oE3wSP7EeFzVdkZ4Xnvr9voUh+ Et/LkhXdVNyRNjwDxAOKhqeZO6xxYMGDBJ2uoePYOmVwnb5NjePdOclRjP/TgSnd lg3R1Yl1WiZcoett7e/Sn6naCRhUcfoTycSXmvF7CSFUwPmJnkPIcimjWkSXmhB6 UhHCSDItmt9QUuTl/p9pdWX5uCNoIevaC9E2AypK8hqoI9ZJqL1bYMFz7tgZrYPc G4N7ZCGqJa2Bn0L8OH5TKEZBtQFeqlZpGISNWSpqM6NrSC7DTQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJbO/reV9VvKk9qp7NfAgvWTDAqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZDhjNGI5YjQtZDY0ZS0z YWY3LTk1YTctYjY0MWEyNTg0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAahJsAD BAKhJsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKkS9yGMhka/MYNg+iWnGlPhe3zV0xAFmPJnU3/r3oAGu 90zgoT+dK8692OKgG3+/K4+ZRc10v90kid4kZOJp6bEmF8mN+xvfUb6o9OdMHPVf WnC0dfguVTe07oLEdhsk3IgPk47KmGVMKM+yZSWfLksvndslADyoViRLW+FXLPST GXcTVsaTQtuknPGzdB34u1Dj8XXSDq8Kg/xAp0+ZzWWznJQ7bLT7uXTWx+wfCQLb wNMAkwBEV6MKLE79OndwvTukP3/BFDpKIbhPsLZ5vP+qdCk+ie4yFX0+gCBS1MUa gpmMgangGz9JK4bxgUJWdSPpPI/wSpmGiKMrFBoxeQ== -----END CERTIFICATE-----Generated at Sun Sep 27 00:20:59 2026 by rpki-client