$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: VZf/4+kEnZZwVH74LjxFyx3uDAq9hvkCNIk9Q03vPDU= Subject key identifier: BB:DE:A3:CC:6A:E1:0E:AA:1A:5C:89:2F:5B:C0:B5:5C:5B:5E:AE:27 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584D91C009BAB5E65331533B7F00 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:09:ba:b5:e6:53:31:53:3b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=06f2d5ad-5442-4d72-a8de-b90306ff814e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:1e:80:ab:49:ea:33:ae:40:0b:ee:07:c3: 65:36:9b:84:85:e2:d1:80:a5:ca:35:56:d6:8f:40: 8e:c3:ab:76:c0:53:2f:0a:7c:8d:9b:b7:95:bb:92: 7e:98:26:ae:9f:53:bc:bd:f5:5a:5f:7b:a9:ef:41: e2:b0:06:f3:5a:e7:59:2c:ee:f7:1d:c5:68:04:5d: 4f:bb:6a:e4:f7:88:7b:ba:3f:28:08:f8:9a:0b:1f: da:72:09:dc:cc:c9:c4:ec:ef:6c:69:b9:6e:10:76: 8b:af:30:b8:4a:5a:ec:3d:f9:20:97:df:c6:41:e9: 6b:ce:c0:15:6e:da:bc:5d:8c:00:5e:9e:d1:4a:87: 6c:96:37:53:07:f6:96:e7:0d:d6:2b:85:a6:4b:1c: d6:da:6e:3b:e6:fd:92:07:31:7b:2e:9c:41:b8:13: 3f:b7:42:10:81:2d:a2:30:83:f8:c2:1f:9e:77:44: 15:a6:6f:7a:2d:53:1f:30:28:76:81:ea:3a:a1:08: 83:db:5f:ea:b9:8d:39:65:c6:ed:ef:d7:10:40:66: 89:14:6c:ef:51:2c:a1:60:13:5b:0f:32:d7:30:19: 24:25:c1:e6:c1:32:0d:f2:8f:df:3e:dc:ba:61:a4: c8:0a:3e:61:c8:38:1b:0e:ee:9e:e5:2d:40:94:d2: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DE:A3:CC:6A:E1:0E:AA:1A:5C:89:2F:5B:C0:B5:5C:5B:5E:AE:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:45:e5:8c:a1:70:cd:ae:3f:db:61:b8:73:a3:b8:cf:d0:a7: 1a:c5:ea:e3:9c:72:88:e6:54:be:52:54:c8:f2:fa:44:84:94: 5d:e1:7a:99:17:02:2e:f8:d2:ba:ae:9b:f3:7a:24:c1:f9:2c: a6:d8:92:30:f3:68:47:b8:eb:ab:08:70:50:9c:8f:4a:a9:ed: f0:75:78:47:35:0c:bd:af:2b:31:93:49:bd:1c:9e:d7:7e:21: 43:1e:f3:4c:c9:28:bd:67:44:b2:76:bc:19:92:ac:aa:f6:02: 0d:2c:c8:59:26:6b:13:c0:2e:53:98:d5:2a:11:b7:a2:77:ec: 2f:6e:e8:5e:cb:71:36:fc:8c:83:e0:69:04:e5:7b:07:cc:81: d3:82:2c:b8:75:2b:56:76:72:0c:ea:6f:a9:64:8d:7d:e3:57: 2a:04:29:7e:7c:86:aa:47:35:0d:fa:c4:22:65:00:90:27:22: 78:47:dc:74:55:4f:82:b5:1a:3c:8f:62:2c:06:e1:22:c4:76: 6c:1b:48:ae:19:ba:d3:35:f0:5e:86:da:ad:e4:d4:90:e3:7e: 51:8a:b4:19:da:29:40:3d:03:0d:2c:ae:67:0c:b1:8d:9e:64: d3:a1:65:6b:fb:f2:c2:e8:d7:03:ac:67:b8:6d:7b:a9:75:5e: 07:cd:6b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAm6teZTMVM7fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MDZmMmQ1YWQtNTQ0Mi00ZDcyLWE4ZGUtYjkwMzA2ZmY4MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4kegKtJ6jOuQAvuB8NlNpuEheLRgKXKNVbW j0COw6t2wFMvCnyNm7eVu5J+mCaun1O8vfVaX3up70HisAbzWudZLO73HcVoBF1P u2rk94h7uj8oCPiaCx/acgnczMnE7O9sabluEHaLrzC4SlrsPfkgl9/GQelrzsAV btq8XYwAXp7RSodsljdTB/aW5w3WK4WmSxzW2m475v2SBzF7LpxBuBM/t0IQgS2i MIP4wh+ed0QVpm96LVMfMCh2geo6oQiD21/quY05Zcbt79cQQGaJFGzvUSyhYBNb DzLXMBkkJcHmwTIN8o/fPty6YaTICj5hyDgbDu6e5S1AlNJMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLveo8xq4Q6qGlyJL1vAtVxbXq4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNF5YyhcM2uP9thuHOjuM/QpxrF6uOccojmVL5SVMjy+kSElF3hepkX Ai740rqum/N6JMH5LKbYkjDzaEe466sIcFCcj0qp7fB1eEc1DL2vKzGTSb0cntd+ IUMe80zJKL1nRLJ2vBmSrKr2Ag0syFkmaxPALlOY1SoRt6J37C9u6F7LcTb8jIPg aQTlewfMgdOCLLh1K1Z2cgzqb6lkjX3jVyoEKX58hqpHNQ36xCJlAJAnInhH3HRV T4K1GjyPYiwG4SLEdmwbSK4ZutM18F6G2q3k1JDjflGKtBnaKUA9Aw0srmcMsY2e ZNOhZWv78sLo1wOsZ7hte6l1XgfNa4o= -----END CERTIFICATE-----Generated at Wed May 13 15:48:38 2026 by rpki-client