$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa File: 3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa (raw, json) Hash identifier: UQ+n7yw5kxfSi7HbLPQvRlXwjuSEFVQV5+SPEmr23rc= Subject key identifier: F5:99:8F:93:A6:EC:8A:60:3C:E9:F5:1D:BC:1A:49:0A:2C:6B:36:0F Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584DBD059E58CB199E8AFBBEA080 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:9e:58:cb:19:9e:8a:fb:be:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=bb4ce99d-e046-4436-ad7f-2517b8f36872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:20:5a:68:ec:14:6d:27:cf:55:73:54:1f: 0f:f0:3d:29:ef:04:01:a9:81:1d:4e:77:8f:f8:dd: 10:01:6a:5f:9e:95:f8:cb:9d:89:5b:3a:6d:98:60: 3e:08:bf:b3:09:81:7b:55:39:9e:74:0a:d2:2c:27: c9:bd:b6:50:11:d7:3b:ae:5b:69:4c:e4:7e:12:68: 3d:6f:f2:ae:97:e5:06:d8:6b:df:b2:e0:94:bb:41: 07:93:e2:b9:74:f9:9c:88:6e:eb:39:2b:92:39:62: aa:ed:19:a5:e8:82:ed:89:43:2d:ca:81:4c:15:7f: 3d:8a:ca:d1:06:0b:86:49:6e:30:39:4e:4f:ba:93: 28:1e:80:aa:27:00:54:dc:81:9a:27:05:a4:99:5e: 09:46:02:0b:c1:5a:9a:3f:75:03:56:69:6b:0c:9f: d0:70:00:73:94:2c:1e:1a:bb:47:71:c3:8b:17:2f: fe:19:d9:0b:ff:82:7a:3c:f1:9e:8d:dc:74:0f:66: 9d:e3:fd:5c:16:2f:a7:48:79:fd:58:f7:dc:0f:03: b5:ac:51:a3:05:0a:54:31:7c:ae:1b:35:c4:0c:55: 4b:0f:f4:8a:55:13:81:3b:13:c3:cb:67:6b:6d:70: 83:51:79:9c:10:84:2f:00:66:52:6d:6e:e8:22:61: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:8F:93:A6:EC:8A:60:3C:E9:F5:1D:BC:1A:49:0A:2C:6B:36:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:b0:94:72:74:8e:d5:7b:53:79:8d:b9:9d:ff:31:9d:a0: b4:16:ae:a4:b1:f6:a5:58:dd:a9:c6:6e:7e:fc:e9:b2:26:d4: a8:23:e6:d9:a1:03:b2:4c:62:2a:33:f2:67:6e:11:2e:a1:c4: b5:2b:18:d4:a9:48:f9:74:2c:bd:0b:29:cb:df:2e:b8:c3:61: 96:89:37:5f:f6:5b:58:a1:97:49:72:2b:d6:d8:c0:92:81:74: d4:f6:01:9c:d0:da:40:f0:a3:08:fc:3f:04:20:bc:f0:c8:b4: 86:6f:b7:64:82:0c:71:fd:77:f2:59:39:0c:36:37:0f:78:87: 46:91:e1:15:a6:8f:64:ea:a3:10:fe:f7:38:dc:f6:d0:f0:81: 34:85:1c:24:ee:12:ff:1e:62:44:d0:0e:7b:d5:53:07:06:d3: ba:e7:22:3a:c8:3f:b6:98:ca:84:15:70:7e:38:27:2d:3e:04: 87:57:96:c5:5c:7a:30:dc:a4:2b:a2:e1:f1:89:66:b2:da:40: f1:88:8c:aa:55:0e:dc:4f:26:85:d3:e6:05:be:f1:ef:bd:49: fe:58:f0:66:26:13:f1:92:89:95:cc:e1:21:87:f3:b1:3e:03: 3a:7e:da:c7:a5:ff:d1:fc:fe:3a:9f:75:f0:04:ee:23:d2:ce: 59:97:fc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZ5Yyxmeivu+oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YmI0Y2U5OWQtZTA0Ni00NDM2LWFkN2YtMjUxN2I4ZjM2ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy4gWmjsFG0nz1VzVB8P8D0p7wQBqYEdTneP +N0QAWpfnpX4y52JWzptmGA+CL+zCYF7VTmedArSLCfJvbZQEdc7rltpTOR+Emg9 b/Kul+UG2GvfsuCUu0EHk+K5dPmciG7rOSuSOWKq7Rml6ILtiUMtyoFMFX89isrR BguGSW4wOU5PupMoHoCqJwBU3IGaJwWkmV4JRgILwVqaP3UDVmlrDJ/QcABzlCwe GrtHccOLFy/+GdkL/4J6PPGejdx0D2ad4/1cFi+nSHn9WPfcDwO1rFGjBQpUMXyu GzXEDFVLD/SKVROBOxPDy2drbXCDUXmcEIQvAGZSbW7oImFYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWZj5Om7IpgPOn1HbwaSQosazYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvM2ZhNzJkMTYtZWJkNy0z ZjkyLTgyZDQtNTM5ZjNhYmU3OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVesJRydI7Ve1N5jbmd/zGdoLQWrqSx9qVY3anGbn786bIm1Kgj5tmh A7JMYioz8mduES6hxLUrGNSpSPl0LL0LKcvfLrjDYZaJN1/2W1ihl0lyK9bYwJKB dNT2AZzQ2kDwowj8PwQgvPDItIZvt2SCDHH9d/JZOQw2Nw94h0aR4RWmj2TqoxD+ 9zjc9tDwgTSFHCTuEv8eYkTQDnvVUwcG07rnIjrIP7aYyoQVcH44Jy0+BIdXlsVc ejDcpCui4fGJZrLaQPGIjKpVDtxPJoXT5gW+8e+9Sf5Y8GYmE/GSiZXM4SGH87E+ Azp+2sel/9H8/jqfdfAE7iPSzlmX/OA= -----END CERTIFICATE-----Generated at Wed May 13 04:35:48 2026 by rpki-client