$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa File: b6c83c5d-996f-3027-b27f-293ced5d93f1.roa (raw, json) Hash identifier: fIfruZV1D51Wvygwuir+6AGhKGsMcU9nkilwlpzGyPo= Subject key identifier: 39:27:A5:FC:20:6C:B3:C8:B7:07:31:CC:9A:65:D0:98:A9:9C:33:9A Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584D492A4225E8F7B2002FDF8600 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 18914 IP address blocks: 162.219.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:42:25:e8:f7:b2:00:2f:df:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=9ae92465-31d5-4d34-8f07-04babcd06256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:9d:bf:ca:e2:34:b3:f6:14:09:59:aa:6e: 12:a9:85:6a:2e:2c:bd:c6:8a:22:98:36:68:2f:ad: aa:f7:79:fc:ec:0e:ec:3e:a2:b0:2d:43:8c:0d:95: 3b:14:34:22:28:2e:f5:0b:2f:53:16:b6:64:0c:d2: 1f:20:0f:80:01:69:68:e1:3e:f2:e8:1a:73:6c:cd: 37:4c:3c:89:d2:5e:25:af:15:59:bb:dd:e6:00:c0: bf:47:cf:22:99:84:16:26:e2:21:bb:56:db:83:56: 37:02:72:e1:e7:0d:f8:51:f7:ef:3c:d0:fd:77:d0: 5e:14:dc:e7:de:34:8a:76:ab:03:86:1f:85:24:ae: da:51:99:57:62:94:21:fe:de:08:20:8a:7a:48:38: 98:e2:f6:e8:4d:30:c1:76:c8:e4:a6:b5:60:c5:a4: 2c:22:80:11:16:66:fb:d7:56:9a:57:6c:ed:71:86: f6:ca:76:d5:5f:e7:c7:4c:0f:0d:90:6e:69:9d:a2: 6d:6d:48:ed:d2:a6:91:7f:4a:94:c7:fa:38:a3:9b: e1:b0:60:29:73:86:f8:c2:9a:1c:8f:cf:40:59:7c: 25:39:8b:a2:3c:64:7f:90:5d:ef:60:c8:0c:76:1c: 3c:53:39:75:68:04:c7:1f:5e:66:60:0c:f6:94:cf: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:27:A5:FC:20:6C:B3:C8:B7:07:31:CC:9A:65:D0:98:A9:9C:33:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 162.219.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:2c:0e:e1:ff:4f:40:e2:53:b2:09:63:24:65:c1:b4:83: d2:3d:ca:d1:8d:64:99:13:4c:bb:76:38:01:28:e8:7e:92:45: 01:92:11:4d:e7:54:f6:56:66:89:9d:07:6c:0e:f2:5f:47:45: ff:35:55:bd:d8:2a:0c:f4:b8:54:6f:9a:57:91:b8:ac:04:de: 93:d8:8a:42:89:65:22:6e:5d:b5:c3:2f:04:50:5e:52:d4:76: 63:b3:6c:60:26:d8:92:98:59:fb:e3:f5:fd:a5:6e:64:3a:7c: 99:f5:42:b1:ab:05:16:c9:96:2f:62:4f:83:b4:b4:01:01:c9: 71:11:cb:7d:9f:18:db:21:a8:d1:e4:f5:ba:db:41:00:78:68: 18:7e:e9:7d:02:4e:ce:89:a2:6b:52:86:76:aa:80:04:6d:1f: 15:56:be:1d:12:ee:28:78:b7:6b:d4:05:c2:be:39:41:b0:fe: 1f:bd:03:4a:85:c5:1f:1d:06:7b:bf:3b:c5:fe:77:7b:8a:43: b6:c5:a3:73:fa:d9:ab:e6:27:af:0c:f1:5f:85:1e:eb:1f:b3: 42:ba:81:9d:d2:68:53:4a:61:43:db:0c:84:5c:79:1e:62:78: ed:24:f7:82:65:5b:ae:99:40:6c:12:52:57:a4:45:b9:2c:03: 3d:a8:e4:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkIl6PeyAC/fhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OWFlOTI0NjUtMzFkNS00ZDM0LThmMDctMDRiYWJjZDA2MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLWdv8riNLP2FAlZqm4SqYVqLiy9xooimDZo L62q93n87A7sPqKwLUOMDZU7FDQiKC71Cy9TFrZkDNIfIA+AAWlo4T7y6BpzbM03 TDyJ0l4lrxVZu93mAMC/R88imYQWJuIhu1bbg1Y3AnLh5w34UffvPND9d9BeFNzn 3jSKdqsDhh+FJK7aUZlXYpQh/t4IIIp6SDiY4vboTTDBdsjkprVgxaQsIoARFmb7 11aaV2ztcYb2ynbVX+fHTA8NkG5pnaJtbUjt0qaRf0qUx/o4o5vhsGApc4b4wpoc j89AWXwlOYuiPGR/kF3vYMgMdhw8Uzl1aATHH15mYAz2lM9FPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDknpfwgbLPItwcxzJpl0JipnDOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvYjZjODNjNWQtOTk2Zi0z MDI3LWIyN2YtMjkzY2VkNWQ5M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbXLA7h/09A4lOyCWMkZcG0g9I9ytGNZJkTTLt2OAEo6H6SRQGSEU3n VPZWZomdB2wO8l9HRf81Vb3YKgz0uFRvmleRuKwE3pPYikKJZSJuXbXDLwRQXlLU dmOzbGAm2JKYWfvj9f2lbmQ6fJn1QrGrBRbJli9iT4O0tAEByXERy32fGNshqNHk 9brbQQB4aBh+6X0CTs6JomtShnaqgARtHxVWvh0S7ih4t2vUBcK+OUGw/h+9A0qF xR8dBnu/O8X+d3uKQ7bFo3P62avmJ68M8V+FHusfs0K6gZ3SaFNKYUPbDIRceR5i eO0k94JlW66ZQGwSUlekRbksAz2o5N0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:47 2026 by rpki-client