$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/097b4e35-5c74-36f0-8a40-6fdc8df25d60.roa File: 097b4e35-5c74-36f0-8a40-6fdc8df25d60.roa (raw, json) Hash identifier: ZuIr5Xk+7CNhGcGtxI7GnQlhwgpIb2/vtrgQAoXwcvQ= Subject key identifier: 8E:62:F8:98:96:DE:B0:91:8F:E0:AC:BC:DF:06:84:7E:9E:08:36:77 Certificate issuer: /CN=38ff65e7-808c-4e75-8bd7-a984fae5b900 Certificate serial: 010D0C9F4328584D49F507909894F309B9FC04C0 Authority key identifier: CF:13:A5:EE:66:15:E0:FC:E4:03:14:02:2E:1E:DD:58:56:62:B5:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/097b4e35-5c74-36f0-8a40-6fdc8df25d60.roa Signing time: Wed 25 Mar 2026 19:49:17 +0000 ROA not before: Wed 25 Mar 2026 19:49:17 +0000 ROA not after: Tue 23 Jun 2026 19:49:17 +0000 asID: 6248 IP address blocks: 158.51.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/38ff65e7-808c-4e75-8bd7-a984fae5b900.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/38ff65e7-808c-4e75-8bd7-a984fae5b900.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:f5:07:90:98:94:f3:09:b9:fc:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ff65e7-808c-4e75-8bd7-a984fae5b900 Validity Not Before: Mar 25 19:49:17 2026 GMT Not After : Jun 23 19:49:17 2026 GMT Subject: CN=397e9f91-a032-4cde-961b-281fab8a7751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:19:a7:6b:18:97:f4:40:09:21:40:ee:da: 38:25:0e:e9:df:b8:c8:fc:28:68:87:7c:96:6e:ca: 4b:15:cf:3b:c0:50:d5:8f:fb:5d:ba:5c:bb:c7:cb: c5:7c:2f:89:3a:7d:c1:61:a4:05:a0:33:04:64:0c: b2:90:20:f8:20:b3:e4:54:7b:f6:fc:14:2d:03:81: e8:5d:70:23:9c:58:8c:6a:df:b0:fd:90:55:d3:7e: 9e:b7:3a:a1:5d:a9:7a:49:28:4d:b5:50:ba:13:6c: a3:4c:bd:19:1a:85:00:fc:05:46:88:42:3c:85:74: 94:45:31:b3:d1:dd:dc:f2:b8:2d:5d:2c:d2:7c:6a: c2:b4:4e:20:34:c9:0e:1c:6e:53:b4:61:24:a2:5c: 73:01:0f:f3:c5:aa:db:07:4f:31:78:0a:5b:d4:de: 6d:a0:e0:be:6e:6d:48:f4:ed:82:ec:7b:23:9a:2b: fb:8a:21:b0:0b:aa:21:ea:fb:96:c7:51:54:c2:85: a2:ed:7c:78:ec:1b:de:d9:d9:ae:5f:b7:62:87:24: b9:f8:fc:eb:ae:80:a3:83:44:6a:97:db:c1:34:0c: f3:ed:3f:2f:aa:4f:b8:89:3b:aa:a9:12:e2:8e:b6: a2:66:6c:88:bd:83:67:be:6f:ae:78:8a:c3:ee:4f: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:F8:98:96:DE:B0:91:8F:E0:AC:BC:DF:06:84:7E:9E:08:36:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/097b4e35-5c74-36f0-8a40-6fdc8df25d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900/38ff65e7-808c-4e75-8bd7-a984fae5b900.crl X509v3 Authority Key Identifier: keyid:CF:13:A5:EE:66:15:E0:FC:E4:03:14:02:2E:1E:DD:58:56:62:B5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38ff65e7-808c-4e75-8bd7-a984fae5b900.cer sbgp-ipAddrBlock: critical IPv4: 158.51.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:de:98:2b:53:04:ce:9b:2d:59:d5:16:ea:aa:40:23:e8:03: 9b:d1:c1:61:35:ca:2c:6c:87:7a:f3:6c:9c:60:da:99:b0:fe: ac:7b:5a:d0:d8:b4:8a:ce:17:57:12:7d:59:05:73:be:cf:6c: ae:cf:51:d3:40:0c:e2:83:66:bf:a0:e3:e6:0a:5c:71:80:da: 96:13:01:93:48:80:2d:e2:3e:79:1f:ef:bc:14:ea:96:81:2e: ad:2d:c6:b5:0d:08:55:ec:36:0c:8e:0b:d4:8e:01:da:1d:fb: bb:c8:9e:1f:29:6d:0b:dd:63:84:0e:74:90:9a:01:b8:ec:50: 6b:40:4a:7e:17:9c:ae:2d:07:6a:90:12:5c:e9:a7:45:eb:1f: 3b:6f:c8:a0:c5:b0:c1:54:e6:2f:ad:f9:93:ea:8e:31:55:0e: 5e:87:f9:00:69:f5:b1:15:03:81:f1:fc:64:25:76:3d:9b:2d: 5d:95:7c:ca:54:b2:b8:7d:62:b9:a8:84:3b:26:97:4d:a4:a4: f7:a7:83:04:18:98:4c:fa:2b:26:64:b7:25:62:e4:cd:e4:c9: a5:a6:9e:13:e4:49:46:66:96:c7:94:a6:8c:5c:39:6e:ab:d7: 0b:01:76:38:0d:4d:44:a3:50:01:77:0f:b1:9c:a0:32:de:61: d3:8b:8a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1J9QeQmJTzCbn8BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmZjY1ZTctODA4Yy00ZTc1LThiZDctYTk4NGZhZTVi OTAwMB4XDTI2MDMyNTE5NDkxN1oXDTI2MDYyMzE5NDkxN1owLzEtMCsGA1UEAxMk Mzk3ZTlmOTEtYTAzMi00Y2RlLTk2MWItMjgxZmFiOGE3NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjQZp2sYl/RACSFA7to4JQ7p37jI/Choh3yW bspLFc87wFDVj/tduly7x8vFfC+JOn3BYaQFoDMEZAyykCD4ILPkVHv2/BQtA4Ho XXAjnFiMat+w/ZBV036etzqhXal6SShNtVC6E2yjTL0ZGoUA/AVGiEI8hXSURTGz 0d3c8rgtXSzSfGrCtE4gNMkOHG5TtGEkolxzAQ/zxarbB08xeApb1N5toOC+bm1I 9O2C7Hsjmiv7iiGwC6oh6vuWx1FUwoWi7Xx47Bve2dmuX7dihyS5+PzrroCjg0Rq l9vBNAzz7T8vqk+4iTuqqRLijraiZmyIvYNnvm+ueIrD7k9lPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5i+JiW3rCRj+CsvN8GhH6eCDZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOGZm NjVlNy04MDhjLTRlNzUtOGJkNy1hOTg0ZmFlNWI5MDAvMDk3YjRlMzUtNWM3NC0z NmYwLThhNDAtNmZkYzhkZjI1ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzhmZjY1ZTctODA4Yy00ZTc1LThi ZDctYTk4NGZhZTViOTAwLzM4ZmY2NWU3LTgwOGMtNGU3NS04YmQ3LWE5ODRmYWU1 YjkwMC5jcmwwHwYDVR0jBBgwFoAUzxOl7mYV4PzkAxQCLh7dWFZitSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOGZmNjVlNy04MDhjLTRlNzUtOGJkNy1hOTg0 ZmFlNWI5MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjOxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfemCtTBM6bLVnVFuqqQCPoA5vRwWE1yixsh3rzbJxg2pmw/qx7WtDY tIrOF1cSfVkFc77PbK7PUdNADOKDZr+g4+YKXHGA2pYTAZNIgC3iPnkf77wU6paB Lq0txrUNCFXsNgyOC9SOAdod+7vInh8pbQvdY4QOdJCaAbjsUGtASn4XnK4tB2qQ Elzpp0XrHztvyKDFsMFU5i+t+ZPqjjFVDl6H+QBp9bEVA4Hx/GQldj2bLV2VfMpU srh9YrmohDsml02kpPengwQYmEz6KyZktyVi5M3kyaWmnhPkSUZmlseUpoxcOW6r 1wsBdjgNTUSjUAF3D7GcoDLeYdOLitU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:06:54 2026 by rpki-client