$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: LbMRgVKe9NuQCaAn3mCSx2MH8188i/aPOdCqJKBi6PA= Subject key identifier: A2:7D:75:9D:EC:57:6E:05:D7:64:D9:40:FC:26:74:D2:2C:09:25:A1 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2644B44F405D2223F1BB6500 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b4:4f:40:5d:22:23:f1:bb:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=6282b3ad-7866-439c-9194-941f5b04b42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:ad:36:38:04:e7:80:aa:ef:d3:9d:e7:e0: 4a:0a:c2:eb:9f:a0:d9:5c:4d:92:d9:74:74:2c:b1: 09:a7:33:cf:bd:a0:30:8c:64:e5:bc:16:09:78:84: 35:1d:6f:a6:58:40:31:80:38:ab:00:3d:f2:9d:97: 85:13:cf:80:79:4f:92:f5:24:20:57:d7:e8:0a:70: 86:dd:13:74:20:ef:20:99:f2:f8:52:a5:89:f8:49: ea:ce:50:21:11:51:2d:ed:11:b1:68:61:f5:da:ab: 8b:43:28:5e:1e:4f:8d:c1:7b:00:d7:b7:e4:43:16: 0a:15:f3:89:99:e2:06:e6:da:42:09:4d:73:29:d2: dd:84:ce:98:9b:a4:e8:13:c2:92:43:03:ed:75:89: ad:e7:96:3c:8f:99:8f:63:1b:bc:e9:b6:a8:64:8a: b1:3c:1a:30:94:a9:35:18:ce:37:9d:34:7f:72:92: 57:fe:8c:df:83:da:84:d1:c4:76:92:aa:e7:de:60: e1:a1:a6:43:48:41:14:85:ae:5e:23:87:f5:b8:e4: fa:6a:60:cf:3b:e3:a5:7c:d1:71:ac:8e:b9:ac:98: cd:b2:4c:18:51:35:a7:b2:2c:8b:5b:6b:2c:fd:1d: 82:ca:f9:b6:a7:12:ae:20:83:33:e4:62:d1:93:46: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:75:9D:EC:57:6E:05:D7:64:D9:40:FC:26:74:D2:2C:09:25:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9c:e3:87:e0:bd:42:2a:a5:f4:09:48:bd:d3:dc:f1:e5:79: c0:b0:db:4a:fd:17:37:c7:36:bb:aa:06:7b:52:79:35:29:1d: 78:cb:22:ae:12:8f:b2:2c:39:18:15:62:11:9a:64:cd:84:53: 51:38:df:ad:39:61:b6:f4:af:90:b0:bf:27:72:b5:fe:62:e0: cd:66:29:33:c3:19:a0:a0:51:96:e5:06:cc:31:81:c0:2f:f2: 5d:f1:e8:15:d7:e1:0e:d7:12:c2:6b:1f:2a:e6:ee:82:25:a2: 80:96:ef:8a:13:af:49:8a:fb:ca:a3:0f:28:54:6b:41:18:f1: e9:4a:da:7c:0c:4a:61:15:f9:f1:1c:da:10:50:c2:f0:cf:ca: 71:94:0f:99:c5:3a:45:75:f3:14:c6:7b:10:61:bc:41:35:2b: 90:41:57:30:84:11:ca:ee:eb:f1:63:e7:6f:7a:11:c5:ab:09: 67:c3:e0:5e:2f:6b:6d:fb:01:1e:fd:21:b7:59:34:04:4f:8f: a6:09:de:cb:71:76:ce:c6:62:08:87:2c:51:e3:ea:01:4d:99: ef:e3:af:4f:d2:e2:1e:21:03:c7:a2:dd:a6:f9:5a:ab:e8:7b: 98:17:f7:e6:3b:8e:ea:19:c9:3d:19:8a:80:ec:c5:39:e7:71: ff:b1:2c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLRPQF0iI/G7ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NjI4MmIzYWQtNzg2Ni00MzljLTkxOTQtOTQxZjViMDRiNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweWtNjgE54Cq79Od5+BKCsLrn6DZXE2S2XR0 LLEJpzPPvaAwjGTlvBYJeIQ1HW+mWEAxgDirAD3ynZeFE8+AeU+S9SQgV9foCnCG 3RN0IO8gmfL4UqWJ+EnqzlAhEVEt7RGxaGH12quLQyheHk+NwXsA17fkQxYKFfOJ meIG5tpCCU1zKdLdhM6Ym6ToE8KSQwPtdYmt55Y8j5mPYxu86baoZIqxPBowlKk1 GM43nTR/cpJX/ozfg9qE0cR2kqrn3mDhoaZDSEEUha5eI4f1uOT6amDPO+OlfNFx rI65rJjNskwYUTWnsiyLW2ss/R2Cyvm2pxKuIIMz5GLRk0ZmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ9dZ3sV24F12TZQPwmdNIsCSWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOc44fgvUIqpfQJSL3T3PHlecCw20r9FzfHNruqBntSeTUpHXjLIq4S j7IsORgVYhGaZM2EU1E43605Ybb0r5Cwvydytf5i4M1mKTPDGaCgUZblBswxgcAv 8l3x6BXX4Q7XEsJrHyrm7oIlooCW74oTr0mK+8qjDyhUa0EY8elK2nwMSmEV+fEc 2hBQwvDPynGUD5nFOkV18xTGexBhvEE1K5BBVzCEEcru6/Fj5296EcWrCWfD4F4v a237AR79IbdZNARPj6YJ3stxds7GYgiHLFHj6gFNme/jr0/S4h4hA8ei3ab5Wqvo e5gX9+Y7juoZyT0ZioDsxTnncf+xLPA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:17 2026 by rpki-client