$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa File: 38d95139-c9aa-35c6-98f7-0599639ee4a3.roa (raw, json) Hash identifier: k+w3RQDe+s7E/RPAV4Oe/NQmF+7KMcFUNQ5uBIfkHRc= Subject key identifier: A6:E0:65:2E:6E:A4:19:FC:62:4E:17:1F:BD:49:5A:2E:8F:6A:26:01 Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F4328584D9E502B7D1C104D054EEF7000 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2b:7d:1c:10:4d:05:4e:ef:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=70546f5e-211d-4658-83a0-b2c670f9c800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:99:7e:4a:cb:f7:38:7f:de:82:7a:ce:6a: 7e:22:d8:a0:61:1a:dd:a9:02:a0:33:6f:12:17:b3: a3:f4:89:60:33:27:7a:c3:90:e4:e6:24:c6:ce:76: e8:d8:27:10:7c:d0:8c:65:60:7d:3d:be:75:73:a0: 58:69:97:7c:8d:87:7c:6c:ac:db:41:87:6b:74:21: e8:79:7e:9a:aa:74:87:1a:be:b8:a3:2c:38:af:ab: e1:78:45:fc:df:a9:37:9b:75:74:50:d6:4b:c7:d7: 2a:69:de:d7:9d:82:f9:b1:79:a8:5e:24:36:b5:1a: 40:3a:d3:86:5b:6f:76:34:f0:3d:4f:99:db:63:f9: 82:7b:0e:f2:59:60:8e:73:4e:7d:09:5f:09:77:05: 32:55:1b:fd:98:c5:61:cd:43:f7:fc:89:65:13:58: 51:a0:cc:96:e0:c9:91:62:02:c2:f4:60:02:87:e3: 6d:8f:19:d4:04:66:57:aa:43:7e:11:4f:61:bb:83: 36:96:f5:16:d8:b8:84:6d:9b:b3:0a:84:0c:48:e2: 7d:8d:e8:de:a0:3a:6e:b2:58:0d:e3:d1:94:01:49: 04:19:ee:5e:86:b6:7e:e4:ef:99:ba:6b:23:4d:2c: c8:e7:e0:c3:e7:44:0e:5f:1b:d8:d7:09:31:99:12: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:65:2E:6E:A4:19:FC:62:4E:17:1F:BD:49:5A:2E:8F:6A:26:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d8:ac:11:48:a2:4a:03:9e:3d:73:8e:0f:15:46:f6:41:de: 40:4a:6a:ca:d4:67:d0:fe:88:d4:87:44:db:c2:79:ff:d2:5b: 89:eb:29:c2:b8:43:2c:d4:09:2d:a1:6b:32:3e:7d:69:e5:7e: c9:bb:67:83:2b:03:57:c9:ee:11:41:2d:46:36:2d:3c:83:4e: d7:5b:6f:37:65:a6:f2:e0:45:73:3a:b1:8b:f6:8a:56:98:cf: 00:01:0b:84:d0:9c:90:4e:8a:8c:d8:e0:30:af:e4:61:c5:48: b9:d5:20:c1:51:fc:3b:d7:f3:1d:f0:c4:03:7b:26:54:aa:ae: f1:16:cf:b3:06:04:cd:b5:89:47:03:4a:5f:c7:fc:ff:53:54: 45:0c:48:1a:ac:5f:4e:09:dd:ec:db:bc:b7:2e:e0:b0:24:74: f6:e3:6e:e8:c1:e7:2c:3d:48:0b:5c:82:e5:7a:db:2a:3a:55: 54:bd:88:d7:fb:a6:19:89:b7:c8:08:88:91:ae:43:60:bf:49: 70:3e:1f:a8:d0:7e:bd:fa:2c:10:20:4d:0d:9e:56:05:1c:6d: 0c:79:18:97:ee:ed:20:44:6a:93:fa:ed:2a:b5:eb:2f:e2:b7: f1:bf:f4:75:87:11:f4:8e:df:d0:51:55:80:82:f0:46:17:7e: f1:4d:53:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCt9HBBNBU7vcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NzA1NDZmNWUtMjExZC00NjU4LTgzYTAtYjJjNjcwZjljODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLaZfkrL9zh/3oJ6zmp+ItigYRrdqQKgM28S F7Oj9IlgMyd6w5Dk5iTGznbo2CcQfNCMZWB9Pb51c6BYaZd8jYd8bKzbQYdrdCHo eX6aqnSHGr64oyw4r6vheEX836k3m3V0UNZLx9cqad7XnYL5sXmoXiQ2tRpAOtOG W292NPA9T5nbY/mCew7yWWCOc059CV8JdwUyVRv9mMVhzUP3/IllE1hRoMyW4MmR YgLC9GACh+NtjxnUBGZXqkN+EU9hu4M2lvUW2LiEbZuzCoQMSOJ9jejeoDpuslgN 49GUAUkEGe5ehrZ+5O+ZumsjTSzI5+DD50QOXxvY1wkxmRLmqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbgZS5upBn8Yk4XH71JWi6PaiYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvMzhkOTUxMzktYzlhYS0z NWM2LTk4ZjctMDU5OTYzOWVlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/YrBFIokoDnj1zjg8VRvZB3kBKasrUZ9D+iNSHRNvCef/SW4nrKcK4 QyzUCS2hazI+fWnlfsm7Z4MrA1fJ7hFBLUY2LTyDTtdbbzdlpvLgRXM6sYv2ilaY zwABC4TQnJBOiozY4DCv5GHFSLnVIMFR/DvX8x3wxAN7JlSqrvEWz7MGBM21iUcD Sl/H/P9TVEUMSBqsX04J3ezbvLcu4LAkdPbjbujB5yw9SAtcguV62yo6VVS9iNf7 phmJt8gIiJGuQ2C/SXA+H6jQfr36LBAgTQ2eVgUcbQx5GJfu7SBEapP67Sq16y/i t/G/9HWHEfSO39BRVYCC8EYXfvFNU0g= -----END CERTIFICATE-----Generated at Wed May 13 08:49:17 2026 by rpki-client