$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa File: 9685251b-82c4-3025-86c9-cb5bf2145c58.roa (raw, json) Hash identifier: K1db7G5gSM+eP6OfmY5txXggl3JUg4gnzzwholQLEY8= Subject key identifier: 5F:B7:A0:5A:8A:22:32:E2:3A:A5:9F:84:18:92:CF:44:FE:20:F8:D5 Certificate issuer: /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62 Certificate serial: 010D0C9F4328584DC6CAFE8041649E7378867700 Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 16437 IP address blocks: 162.247.220.0/23 maxlen: 23 162.247.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fe:80:41:64:9e:73:78:86:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=baaca572-c506-4d7e-a684-3c37cb716fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:b5:9e:40:22:dc:02:8a:b4:0e:83:b6:6a: f3:7b:62:a7:f7:f5:dd:17:e4:7a:ee:64:04:46:00: 07:5e:de:75:6f:77:5b:d2:f8:44:fb:31:2b:23:98: 12:69:d9:40:39:32:68:39:c6:eb:84:16:ad:49:1e: 1a:3b:3f:33:31:bf:1d:06:f4:4d:5f:d5:18:80:2b: 2b:33:0f:b4:15:6b:eb:45:cc:f1:15:a0:cf:72:e6: 8a:f5:1e:61:00:14:74:15:e9:cd:41:2d:dc:d9:f7: 0b:9b:b5:54:73:c3:aa:49:86:8f:46:ab:46:74:0e: 95:a4:fe:00:8c:45:87:a0:9d:66:8b:dc:7e:dc:d7: 6f:d1:9a:c6:01:57:7b:23:4c:ef:e9:ae:09:d4:0b: 0e:9d:e9:12:70:0c:91:07:6a:d8:77:6e:e7:ce:53: 20:12:f7:2a:db:98:00:dc:75:3f:8d:3b:ec:a5:31: 9c:21:f4:0b:96:61:f4:16:a7:0b:c8:94:eb:0b:73: 62:9a:86:3a:35:7c:72:55:e0:a2:38:e2:13:ef:52: cf:5e:9f:56:30:25:03:d4:63:00:82:af:52:21:0e: 2f:67:87:22:38:6c:b8:c4:19:92:24:5e:17:83:bb: 64:37:06:cc:fd:ca:99:12:21:9b:b4:d9:ab:26:43: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:A0:5A:8A:22:32:E2:3A:A5:9F:84:18:92:CF:44:FE:20:F8:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl X509v3 Authority Key Identifier: keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer sbgp-ipAddrBlock: critical IPv4: 162.247.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:be:5b:4d:97:2e:88:b5:07:3d:ce:4e:9c:bd:7e:71:58:ca: 8a:55:df:30:0a:d3:e4:f3:fd:fc:35:4e:7e:e8:c4:cb:4f:c2: 77:27:8e:43:56:6b:ab:ad:97:b3:b8:e3:34:cc:54:79:90:2e: cf:e1:e5:30:8c:5d:84:23:e1:86:c1:a7:1c:f9:24:f4:06:e4: 35:b4:11:36:8d:1e:14:34:70:c6:30:95:b4:39:8a:b0:60:80: 9e:6f:e9:9e:ef:ec:9d:61:d2:48:81:02:58:fd:54:d1:07:81: 07:6e:a4:06:0e:ee:a3:2b:3e:f0:5f:6a:64:2c:c4:eb:95:0f: d1:7f:47:89:fa:8f:65:cd:da:c9:ad:b3:97:23:11:72:64:17: ba:4d:11:33:4f:b3:dc:7d:33:f8:92:c5:41:40:a7:55:83:d7: bf:4b:0a:99:59:8a:f8:f5:7c:10:35:05:6a:62:fd:8a:49:22: 85:83:81:18:80:6e:68:2d:45:94:4e:29:f5:6a:82:73:ef:6e: 9d:b0:3b:c8:3d:3b:22:44:47:59:9c:58:98:15:26:7d:b2:18: 8e:a9:6a:1f:45:2e:8d:5a:d8:46:48:41:c1:bb:7b:56:e5:dd: 38:d2:b0:36:62:80:bb:47:a4:99:7e:8c:65:fe:4e:de:75:90: a7:73:df:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyv6AQWSec3iGdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJmZGZlNmEtYmMyYy00MTgwLWJjNWQtN2JkNmRlNWNm YTYyMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk YmFhY2E1NzItYzUwNi00ZDdlLWE2ODQtM2MzN2NiNzE2ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin21nkAi3AKKtA6Dtmrze2Kn9/XdF+R67mQE RgAHXt51b3db0vhE+zErI5gSadlAOTJoOcbrhBatSR4aOz8zMb8dBvRNX9UYgCsr Mw+0FWvrRczxFaDPcuaK9R5hABR0FenNQS3c2fcLm7VUc8OqSYaPRqtGdA6VpP4A jEWHoJ1mi9x+3Ndv0ZrGAVd7I0zv6a4J1AsOnekScAyRB2rYd27nzlMgEvcq25gA 3HU/jTvspTGcIfQLlmH0FqcLyJTrC3NimoY6NXxyVeCiOOIT71LPXp9WMCUD1GMA gq9SIQ4vZ4ciOGy4xBmSJF4Xg7tkNwbM/cqZEiGbtNmrJkNb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+3oFqKIjLiOqWfhBiSz0T+IPjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZk ZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2ZGU1Y2ZhNjIvOTY4NTI1MWItODJjNC0z MDI1LTg2YzktY2I1YmYyMTQ1YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGJmZGZlNmEtYmMyYy00MTgwLWJj NWQtN2JkNmRlNWNmYTYyLzBiZmRmZTZhLWJjMmMtNDE4MC1iYzVkLTdiZDZkZTVj ZmE2Mi5jcmwwHwYDVR0jBBgwFoAUTbUvRrI70QyJnoiDdxKwfisk6gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZkZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2 ZGU1Y2ZhNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq+W02XLoi1Bz3OTpy9fnFYyopV3zAK0+Tz/fw1Tn7oxMtPwncnjkNW a6utl7O44zTMVHmQLs/h5TCMXYQj4YbBpxz5JPQG5DW0ETaNHhQ0cMYwlbQ5irBg gJ5v6Z7v7J1h0kiBAlj9VNEHgQdupAYO7qMrPvBfamQsxOuVD9F/R4n6j2XN2smt s5cjEXJkF7pNETNPs9x9M/iSxUFAp1WD179LCplZivj1fBA1BWpi/YpJIoWDgRiA bmgtRZROKfVqgnPvbp2wO8g9OyJER1mcWJgVJn2yGI6pah9FLo1a2EZIQcG7e1bl 3TjSsDZigLtHpJl+jGX+Tt51kKdz3zU= -----END CERTIFICATE-----Generated at Wed May 13 11:48:09 2026 by rpki-client