$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: lthso2f3Av3/RgNnjXOyf0zBnCjjfQol3/WydeaEgvY= Subject key identifier: 47:C1:5C:21:C3:7B:FB:71:73:C4:CF:5E:7A:0B:EB:98:7B:67:BF:B6 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584F7A4D8D00FC9B6CD2FAB6EB00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8d:00:fc:9b:6c:d2:fa:b6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=667fae18-d423-4bf3-9a54-177d056c1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:fe:a4:cc:68:13:b1:a0:2b:74:7b:41:4b: 29:a8:12:e5:6c:6f:c0:22:0e:a6:3c:21:5e:a2:4a: a9:4b:89:3a:12:1d:27:38:b2:fd:f4:4c:8a:2b:a8: 8e:fb:bd:aa:bc:6a:f9:ba:f9:38:42:a6:6f:49:69: db:bd:07:a5:56:3d:45:b1:46:77:be:f1:00:f0:0c: 6b:4e:4d:df:c6:44:81:0a:a4:c7:4e:91:af:60:22: 39:0b:ad:cc:be:b9:c6:d6:28:2d:31:63:a0:04:a2: a5:36:b7:c8:71:f3:dc:b1:3e:3c:65:e3:e7:9f:92: 87:f1:51:68:a6:5f:13:40:87:ec:3a:86:62:7c:8e: 5d:06:b9:1b:cc:a5:44:de:4e:ed:22:da:22:11:90: 4a:3e:bf:45:40:66:32:88:31:75:85:dc:30:a2:e6: d8:4b:09:10:f4:fe:23:ff:e9:be:d7:f1:6e:1f:37: 64:ac:70:1b:c3:85:27:41:f2:f7:47:87:a3:77:c8: 46:e2:b1:f8:54:27:b9:c0:46:37:a3:d9:83:b0:3e: e1:2a:30:f4:27:49:0d:d2:b5:9f:d3:cb:6f:09:b3: 1e:8b:d7:d0:4c:ba:fa:cd:f7:43:d2:dc:49:3d:34: 63:bb:df:9a:91:23:4c:b4:8c:87:41:31:87:39:ea: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C1:5C:21:C3:7B:FB:71:73:C4:CF:5E:7A:0B:EB:98:7B:67:BF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1d:a9:5d:25:d2:24:13:68:86:7c:25:c1:a4:c0:ce:c2:7f: 7a:a1:a7:f4:d0:c4:bd:de:14:9a:b0:97:b1:59:42:0d:32:da: 66:35:60:9c:11:42:8c:71:17:97:1f:8f:c9:23:76:d1:35:59: 87:f8:30:4f:57:c2:af:4b:cf:ed:3e:1d:db:fe:93:cb:69:53: b5:f8:7e:ee:d5:d9:e3:82:58:86:57:37:51:8f:3b:b6:bb:63: 36:75:2c:a6:c2:ee:b2:91:fa:db:ab:5c:f6:40:be:5a:df:9c: d6:09:3c:ad:e3:d5:65:60:54:49:0d:a4:f5:cd:19:25:31:5f: ac:26:46:2e:a5:d8:3b:97:15:54:4f:b8:47:f5:47:9f:b8:72: 40:d7:f0:bf:b7:f6:07:27:fc:48:bb:20:bc:9d:09:67:18:a8: fc:5e:47:0d:e4:dd:0a:8b:44:47:b4:87:81:21:d9:da:eb:1a: a1:02:f8:ee:b0:3c:dc:3e:e0:37:48:f9:d8:5c:c7:c3:46:49: c7:df:8a:06:e9:f9:f5:24:c6:7e:dc:18:2f:c2:a2:68:82:b2: 42:1b:64:3e:1f:78:22:cb:b2:39:19:b4:b3:13:49:e8:9e:54: 22:89:cc:70:5c:52:d5:7e:bd:a8:32:7b:62:52:7c:66:8f:3b: b5:b5:1a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TY0A/Jts0vq26wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjY3ZmFlMTgtZDQyMy00YmYzLTlhNTQtMTc3ZDA1NmMxNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA547+pMxoE7GgK3R7QUspqBLlbG/AIg6mPCFe okqpS4k6Eh0nOLL99EyKK6iO+72qvGr5uvk4QqZvSWnbvQelVj1FsUZ3vvEA8Axr Tk3fxkSBCqTHTpGvYCI5C63MvrnG1igtMWOgBKKlNrfIcfPcsT48ZePnn5KH8VFo pl8TQIfsOoZifI5dBrkbzKVE3k7tItoiEZBKPr9FQGYyiDF1hdwwoubYSwkQ9P4j /+m+1/FuHzdkrHAbw4UnQfL3R4ejd8hG4rH4VCe5wEY3o9mDsD7hKjD0J0kN0rWf 08tvCbMei9fQTLr6zfdD0txJPTRju9+akSNMtIyHQTGHOepvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfBXCHDe/txc8TPXnoL65h7Z7+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgdqV0l0iQTaIZ8JcGkwM7Cf3qhp/TQxL3eFJqwl7FZQg0y2mY1YJwR QoxxF5cfj8kjdtE1WYf4ME9Xwq9Lz+0+Hdv+k8tpU7X4fu7V2eOCWIZXN1GPO7a7 YzZ1LKbC7rKR+turXPZAvlrfnNYJPK3j1WVgVEkNpPXNGSUxX6wmRi6l2DuXFVRP uEf1R5+4ckDX8L+39gcn/Ei7ILydCWcYqPxeRw3k3QqLREe0h4Eh2drrGqEC+O6w PNw+4DdI+dhcx8NGScffigbp+fUkxn7cGC/ComiCskIbZD4feCLLsjkZtLMTSeie VCKJzHBcUtV+vagye2JSfGaPO7W1Gt0= -----END CERTIFICATE-----Generated at Sun Nov 15 15:03:49 2026 by rpki-client