$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: EbD1wCWnbioP8AnNxP5hNZy64Sq4udXEzNeyQU9SuTY= Subject key identifier: 2B:A6:6B:7D:F0:C4:9E:F9:F4:5B:65:3F:64:50:43:4C:47:7F:1E:7D Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584F71ED8B37D32F05146E6B0ED8 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:8b:37:d3:2f:05:14:6e:6b:0e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=e206bbb0-deb3-4e0a-accd-129f89af3d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:78:07:cc:7a:8d:bd:9f:56:7f:86:99:a4: f8:c3:64:af:c9:94:f0:24:6d:21:f2:e8:6e:32:27: d1:c6:44:ac:69:ed:9c:04:78:d5:3f:2d:28:8a:73: c8:63:cc:c2:f5:80:9b:92:41:d7:fa:e7:98:86:01: 53:91:c2:b1:79:87:3b:fd:f2:1c:eb:06:da:75:5e: e4:45:21:c6:68:3e:75:c9:66:80:fa:af:d1:ab:e9: fb:16:39:9b:0c:5e:ce:71:49:ad:2e:c3:fd:80:6b: b3:c2:4a:df:e4:fb:13:1d:b8:56:06:56:2d:af:94: af:ba:e2:7a:d4:f5:a1:52:a8:63:5e:d5:ef:6b:ba: 5b:02:4e:7f:25:20:0d:0a:07:f5:9c:a6:e0:00:67: 09:ac:50:36:45:64:ab:31:22:b5:72:d2:ff:ff:74: 7e:21:e8:1f:1b:57:98:3b:ea:2a:46:c4:bd:b5:eb: 24:43:7a:65:fd:06:e9:41:1a:fa:e6:1e:10:4c:de: 31:98:ed:0d:9d:cb:1d:4e:3c:3e:bc:c5:24:67:51: 0a:76:56:6d:d4:d2:37:2f:e4:4b:14:37:3c:73:01: 18:57:57:67:75:f7:55:26:43:1e:01:f3:d7:a1:03: 9f:b8:25:15:a8:ee:c3:71:ab:0e:67:f2:c7:04:35: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A6:6B:7D:F0:C4:9E:F9:F4:5B:65:3F:64:50:43:4C:47:7F:1E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:b8:42:6d:79:be:55:52:66:dc:8e:b9:83:01:eb:e9:07:cc: 71:71:e7:20:b2:50:c0:0c:83:3c:e8:5a:78:78:66:f6:94:4a: f5:3e:51:95:36:86:56:3b:d3:1e:55:bd:2c:cf:55:71:af:23: 45:68:db:1b:93:b2:bc:f2:fc:7e:c7:30:08:5e:f3:84:4c:32: 35:8d:1c:02:be:59:89:18:23:db:50:e9:66:72:e9:cb:9a:a0: 20:6f:17:78:5e:ad:9d:6e:cb:2d:a6:27:e8:3a:97:3c:65:1f: 6c:ce:16:61:48:d0:2e:25:5c:eb:cf:07:97:cb:ff:94:95:64: c8:8a:19:15:36:5a:a0:76:3d:d6:d7:65:f1:17:9f:5f:58:12: 9e:c3:e9:6c:dc:e7:11:be:ae:d7:c6:46:3a:45:a5:ca:8b:24: 60:bc:25:bd:9e:11:ca:a4:53:7f:fe:d3:b1:42:a7:53:3d:f4: 17:ef:2f:91:b5:1a:bb:e3:5b:07:d1:71:b5:92:4d:6f:5d:00: b6:a3:66:aa:22:e1:9c:89:d0:bb:0b:3b:a0:4e:87:67:95:6d: 2b:9b:4d:94:e8:c7:a2:b6:46:ea:54:de:4f:d2:68:49:02:fb: e7:49:43:3f:1f:65:17:f2:f6:55:e4:2e:6d:5d:8d:ab:10:8d: 42:7a:5a:44 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9x7Ys30y8FFG5rDtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZTIwNmJiYjAtZGViMy00ZTBhLWFjY2QtMTI5Zjg5YWYzZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDR4B8x6jb2fVn+GmaT4w2SvyZTwJG0h8uhu MifRxkSsae2cBHjVPy0oinPIY8zC9YCbkkHX+ueYhgFTkcKxeYc7/fIc6wbadV7k RSHGaD51yWaA+q/Rq+n7FjmbDF7OcUmtLsP9gGuzwkrf5PsTHbhWBlYtr5SvuuJ6 1PWhUqhjXtXva7pbAk5/JSANCgf1nKbgAGcJrFA2RWSrMSK1ctL//3R+IegfG1eY O+oqRsS9teskQ3pl/QbpQRr65h4QTN4xmO0NncsdTjw+vMUkZ1EKdlZt1NI3L+RL FDc8cwEYV1dndfdVJkMeAfPXoQOfuCUVqO7DcasOZ/LHBDXnpwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCuma33wxJ759FtlP2RQQ0xHfx59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAyrhCbXm+VVJm3I65gwHr6QfMcXHnILJQ wAyDPOhaeHhm9pRK9T5RlTaGVjvTHlW9LM9Vca8jRWjbG5OyvPL8fscwCF7zhEwy NY0cAr5ZiRgj21DpZnLpy5qgIG8XeF6tnW7LLaYn6DqXPGUfbM4WYUjQLiVc688H l8v/lJVkyIoZFTZaoHY91tdl8RefX1gSnsPpbNznEb6u18ZGOkWlyoskYLwlvZ4R yqRTf/7TsUKnUz30F+8vkbUau+NbB9FxtZJNb10AtqNmqiLhnInQuws7oE6HZ5Vt K5tNlOjHorZG6lTeT9JoSQL750lDPx9lF/L2VeQubV2NqxCNQnpaRA== -----END CERTIFICATE-----Generated at Mon Oct 12 23:07:07 2026 by rpki-client