$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f0ff3164-a2e0-3240-b978-89947b2e57c4.roa File: f0ff3164-a2e0-3240-b978-89947b2e57c4.roa (raw, json) Hash identifier: fjtX3/jafW+NLL9/vM8JIrVLxPAsgoc+uQi9xLn5llw= Subject key identifier: C7:5E:5B:08:41:07:91:3D:CC:A9:6E:F5:C7:FD:C3:57:2C:12:F3:12 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D20AF4CFEFE23DC86FD590EF0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f0ff3164-a2e0-3240-b978-89947b2e57c4.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 10794 IP address blocks: 171.161.196.0/22 maxlen: 22 171.161.196.0/24 maxlen: 24 171.161.197.0/24 maxlen: 24 171.161.198.0/24 maxlen: 24 171.161.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4c:fe:fe:23:dc:86:fd:59:0e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=77ae23ba-34df-4d87-abfb-0e52a7f65ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:0a:97:9b:bc:c3:3c:a1:9c:35:3b:8f:61: 64:3a:2d:cf:4d:b7:9a:14:a4:f4:a4:46:7a:ae:a6: 00:25:64:47:5a:c6:75:99:8a:a0:7e:23:df:96:73: 7b:e9:61:d0:09:0f:3d:71:aa:3a:f9:b7:11:82:4d: ea:8f:51:c8:da:ff:be:c7:9a:1e:2c:5d:d9:31:aa: 61:bb:0f:d5:79:fc:d7:51:59:58:76:fc:54:b6:38: 01:94:a8:43:4c:c3:d1:90:90:bc:26:2d:94:0d:77: ba:93:ce:b9:16:ab:4d:a0:23:ba:a6:7b:9f:55:66: d6:8a:52:10:c9:98:80:6c:34:83:5e:dc:db:a3:60: 20:ba:9c:56:25:d0:30:84:ad:ea:1f:bc:03:36:fb: d2:42:77:26:a5:18:bf:f7:72:e6:ff:71:b3:83:3d: 22:11:02:99:5c:ab:d6:74:e0:49:aa:ff:bf:15:b1: 7b:41:b8:a1:06:0a:23:0c:f4:3c:f7:da:09:a2:0f: 2f:b3:41:d6:db:42:60:1b:84:55:73:44:7d:29:0c: 5f:6c:24:48:df:d1:8a:e6:3d:3d:e2:3f:86:e9:bb: cf:cb:0f:1c:1a:0d:9c:d1:94:56:4d:bc:c8:93:8a: 94:17:06:d8:9d:34:9c:c9:1a:e8:c9:99:3d:a2:c1: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:5B:08:41:07:91:3D:CC:A9:6E:F5:C7:FD:C3:57:2C:12:F3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f0ff3164-a2e0-3240-b978-89947b2e57c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6f:f8:bf:33:24:40:5d:2b:8e:d2:96:57:56:0b:ba:6d:87: 7e:cf:48:fd:48:dd:d6:24:70:8c:d3:a8:46:ef:d9:97:cb:84: fa:bc:af:73:f9:71:db:f5:c1:55:c1:11:d0:9b:51:36:42:34: e7:a7:84:be:09:c5:00:07:18:b7:fb:7d:76:40:f0:35:69:cd: 43:28:5a:75:80:47:e9:0a:c5:56:d8:24:18:a6:9d:21:1e:a6: 9e:0e:bf:7d:29:82:50:56:62:af:eb:24:24:40:d4:59:fe:9e: 79:77:0d:70:22:ee:fc:ac:6e:79:7e:f1:8d:d6:b8:e1:a9:e7: 3d:fb:db:b6:86:2d:9d:85:1e:04:f2:59:ca:d4:df:90:5c:60: 8d:e4:59:f6:34:9d:d2:7e:f9:f4:f6:77:f9:7f:b3:c9:5f:59: 2c:29:30:39:92:e1:8e:72:09:41:5b:87:00:32:13:a7:de:11: 54:77:16:44:57:e0:30:b4:1a:09:41:2e:e0:a4:75:ad:c2:5d: 3b:c7:56:e8:b2:b5:ab:f2:a5:23:35:ad:8f:2c:0d:41:ba:6e: 39:07:be:f5:11:dd:43:55:08:f4:da:bf:2d:87:ed:52:8c:b9: eb:c5:6b:88:d2:c3:04:21:7c:d3:55:aa:11:4c:7b:5f:38:ac: 02:85:ba:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0z+/iPchv1ZDvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NzdhZTIzYmEtMzRkZi00ZDg3LWFiZmItMGU1MmE3ZjY1Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiggKl5u8wzyhnDU7j2FkOi3PTbeaFKT0pEZ6 rqYAJWRHWsZ1mYqgfiPflnN76WHQCQ89cao6+bcRgk3qj1HI2v++x5oeLF3ZMaph uw/VefzXUVlYdvxUtjgBlKhDTMPRkJC8Ji2UDXe6k865FqtNoCO6pnufVWbWilIQ yZiAbDSDXtzbo2AgupxWJdAwhK3qH7wDNvvSQncmpRi/93Lm/3Gzgz0iEQKZXKvW dOBJqv+/FbF7QbihBgojDPQ899oJog8vs0HW20JgG4RVc0R9KQxfbCRI39GK5j09 4j+G6bvPyw8cGg2c0ZRWTbzIk4qUFwbYnTScyRroyZk9osGncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdeWwhBB5E9zKlu9cf9w1csEvMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZjBmZjMxNjQtYTJlMC0z MjQwLWI5NzgtODk5NDdiMmU1N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBv+L8zJEBdK47SlldWC7pth37PSP1I3dYkcIzTqEbv2ZfLhPq8r3P5 cdv1wVXBEdCbUTZCNOenhL4JxQAHGLf7fXZA8DVpzUMoWnWAR+kKxVbYJBimnSEe pp4Ov30pglBWYq/rJCRA1Fn+nnl3DXAi7vysbnl+8Y3WuOGp5z3727aGLZ2FHgTy WcrU35BcYI3kWfY0ndJ++fT2d/l/s8lfWSwpMDmS4Y5yCUFbhwAyE6feEVR3FkRX 4DC0GglBLuCkda3CXTvHVuiytavypSM1rY8sDUG6bjkHvvUR3UNVCPTavy2H7VKM uevFa4jSwwQhfNNVqhFMe184rAKFulQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:43 2026 by rpki-client