$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa File: 24e50275-08d8-38a2-a053-3a76fa2cbac3.roa (raw, json) Hash identifier: sRKdWF6L+X3BtFS1c/11+HygbRIyjE8n1KypRv8Znwg= Subject key identifier: 30:0D:9C:3F:ED:DC:3C:46:84:BE:26:11:21:09:E0:4F:28:A3:84:BE Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584D9A200D3DA7FC724E583FB200 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 396982 IP address blocks: 161.38.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0d:3d:a7:fc:72:4e:58:3f:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=1a4ca3c6-42dc-41fe-9554-fcf34db04131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:7a:c2:72:53:a2:bb:41:97:4c:21:ea:b6: 88:11:bc:6f:d5:73:50:11:e7:02:55:f1:3c:a7:e8: a0:16:6f:59:ce:f0:d7:c7:d0:6b:ff:58:ab:44:65: f7:2b:7a:42:2d:d9:84:ad:d9:df:0e:2c:cb:78:1e: 22:7d:7c:ab:e5:59:cd:b3:9e:91:18:17:12:d7:cf: 2d:5f:ba:78:5c:b8:4f:34:06:27:2e:69:53:a3:0a: 68:49:d8:48:c1:af:d5:a8:1e:ea:fc:62:aa:cb:51: 95:08:de:0d:cb:3a:78:7d:24:d1:fa:d8:7f:e2:6f: b6:45:34:71:f9:62:e4:f4:26:87:16:1b:21:b2:1d: b8:db:bd:19:80:08:63:55:fa:1c:58:30:87:c5:1a: 10:45:ae:a7:e9:c0:88:a2:61:83:16:a2:22:79:15: e8:d0:a8:60:2e:23:b8:1a:58:a2:12:79:c3:dd:b5: cb:39:07:d1:36:aa:56:d0:76:d6:bb:78:66:2c:f2: 46:38:b4:e6:86:a7:19:ba:da:5b:b5:81:40:72:25: c9:94:07:51:2c:70:40:73:61:93:49:47:cd:af:55: c2:2a:60:ad:04:5a:cc:e8:09:b3:c0:71:02:ca:ea: 89:6e:94:93:13:bb:c8:c5:d8:01:4f:ae:1b:1a:fe: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:9C:3F:ED:DC:3C:46:84:BE:26:11:21:09:E0:4F:28:A3:84:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 161.38.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:36:a5:5a:2c:d9:57:d5:63:1d:5e:01:e7:72:c8:a5:28:c8: 5f:7f:8a:10:9d:3d:81:2e:66:eb:61:50:f0:53:ed:c3:08:e5: 2f:87:e6:4c:de:1a:4e:83:54:0a:69:fd:c3:c0:7b:d6:c3:e4: 43:7a:c4:8c:6f:eb:1d:71:56:1a:2e:76:3e:90:80:f3:cc:04: df:85:ea:15:d2:78:53:1d:6c:4c:cd:4d:a2:ce:c2:27:0d:7c: f3:a5:a9:8f:10:5f:ea:2d:3c:f4:bc:73:31:95:e3:e0:47:1e: 31:db:de:fb:88:77:1d:08:61:00:f0:a4:6b:e8:c1:9a:23:77: 0f:b1:e2:f5:b4:8c:cc:2d:9b:cf:3a:4c:69:86:a2:b2:84:82: d1:6f:7d:45:c8:39:89:16:41:2f:03:fe:93:a0:07:9e:de:44: 5a:39:96:1f:1d:07:ba:19:5b:f3:c8:9e:31:19:da:1e:98:42: 05:26:c9:0c:e8:9b:44:30:29:35:50:4e:d2:95:59:51:73:1d: ca:15:44:11:00:32:9f:63:3c:25:a4:aa:57:40:18:c5:8b:60: 5e:44:80:5f:c7:44:43:88:8e:66:ee:8c:e2:14:89:de:da:ad: 80:98:15:b9:6d:48:eb:31:ef:67:14:35:cf:c4:81:1c:68:d7: 73:7c:d3:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIA09p/xyTlg/sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MWE0Y2EzYzYtNDJkYy00MWZlLTk1NTQtZmNmMzRkYjA0MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Z6wnJTortBl0wh6raIEbxv1XNQEecCVfE8 p+igFm9ZzvDXx9Br/1irRGX3K3pCLdmErdnfDizLeB4ifXyr5VnNs56RGBcS188t X7p4XLhPNAYnLmlTowpoSdhIwa/VqB7q/GKqy1GVCN4Nyzp4fSTR+th/4m+2RTRx +WLk9CaHFhshsh24270ZgAhjVfocWDCHxRoQRa6n6cCIomGDFqIieRXo0KhgLiO4 GliiEnnD3bXLOQfRNqpW0HbWu3hmLPJGOLTmhqcZutpbtYFAciXJlAdRLHBAc2GT SUfNr1XCKmCtBFrM6AmzwHECyuqJbpSTE7vIxdgBT64bGv6/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDANnD/t3DxGhL4mESEJ4E8oo4S+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMjRlNTAyNzUtMDhkOC0z OGEyLWEwNTMtM2E3NmZhMmNiYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ2pVos2VfVYx1eAedyyKUoyF9/ihCdPYEuZuthUPBT7cMI5S+H5kze Gk6DVApp/cPAe9bD5EN6xIxv6x1xVhoudj6QgPPMBN+F6hXSeFMdbEzNTaLOwicN fPOlqY8QX+otPPS8czGV4+BHHjHb3vuIdx0IYQDwpGvowZojdw+x4vW0jMwtm886 TGmGorKEgtFvfUXIOYkWQS8D/pOgB57eRFo5lh8dB7oZW/PInjEZ2h6YQgUmyQzo m0QwKTVQTtKVWVFzHcoVRBEAMp9jPCWkqldAGMWLYF5EgF/HREOIjmbujOIUid7a rYCYFbltSOsx72cUNc/EgRxo13N8014= -----END CERTIFICATE-----Generated at Wed May 13 13:22:29 2026 by rpki-client