$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa File: 7774879b-9330-3b7e-ae8b-286b0014a62e.roa (raw, json) Hash identifier: d83kHmNEz1HaR6JDAlMm1qbVXpGw3W00jbbq0rEyBXs= Subject key identifier: C5:EA:C8:97:6E:05:D6:AC:46:9A:77:60:0E:3C:65:AC:12:14:E4:8D Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584D44FA4A350DFA569FBCA7C300 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 202 IP address blocks: 161.151.162.0/23 maxlen: 24 161.151.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4a:35:0d:fa:56:9f:bc:a7:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=fa34209c-f8d4-4acc-aa24-16ea37bf9824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:0f:85:86:19:ad:72:c9:52:ba:74:36:b4: fb:3b:cd:57:24:01:81:61:d8:3d:22:50:ad:26:21: e5:53:a1:4f:dd:52:9d:25:2f:6b:a9:09:b5:a6:b4: b2:ef:30:ca:fe:7f:c3:c7:e3:f7:e4:bc:d0:74:93: 82:38:90:1c:e0:96:ef:19:1a:33:24:ca:a5:d0:52: 08:cb:1c:a0:6d:1f:d1:f8:e2:4f:97:c5:90:e7:9d: b6:d1:11:ff:a8:e9:50:1d:08:a4:a2:a1:ce:0d:b2: bd:95:65:c5:e4:94:1e:ec:34:46:71:bb:01:e0:bd: 21:b0:03:50:ec:f4:85:4a:9f:be:d1:21:65:34:f7: 47:15:9e:55:d1:45:c1:31:55:ae:3f:ca:4f:df:8e: 8a:f7:53:a3:a6:3a:5b:7b:63:d9:0f:3e:b6:0f:26: 58:c7:0e:d9:f5:00:bd:48:fe:85:28:7e:46:87:9e: 26:46:8a:a2:ee:bd:ff:0b:64:c3:5f:10:7a:6f:8c: 0f:b2:15:83:8b:9d:54:47:e4:f8:be:1d:2b:67:11: 67:95:5b:52:6a:3e:39:d3:2e:e7:09:9c:17:7b:b3: 2f:a8:a1:04:59:79:e2:be:5a:23:f6:26:29:a9:0e: 40:7e:54:44:ff:36:46:6e:dc:e7:bd:86:c6:cf:f5: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:C8:97:6E:05:D6:AC:46:9A:77:60:0E:3C:65:AC:12:14:E4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.162.0/23 161.151.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:30:01:74:33:0a:77:11:9f:d0:d0:cd:c6:d8:dd:97:92:6f: 3b:86:7f:58:c7:8b:ff:70:ea:e1:b3:7c:97:6d:1e:c9:a5:f0: ca:36:c3:58:3e:a5:0a:21:6d:9d:4c:c8:27:36:13:22:65:30: ac:d6:18:4b:61:b3:2a:dd:e8:78:c9:46:07:fd:e4:fb:03:6f: 04:83:70:fd:50:17:cc:5a:46:21:72:4c:ed:09:69:0d:04:04: 44:8b:dd:2a:74:e0:7b:54:1e:27:e8:0b:99:ac:50:dc:c5:55: 0c:0e:6a:5b:06:01:a0:56:0d:95:52:54:2b:4b:71:91:69:46: 33:6a:e6:7e:03:fc:d2:c2:1a:d8:92:19:9b:d7:e4:bc:aa:1d: 27:c6:d3:45:f0:b5:ec:07:44:15:c1:d3:7e:f8:ff:18:40:72: cb:99:85:6d:da:f6:86:4d:79:c3:8c:91:e2:89:db:72:24:e9: 61:76:51:11:51:1e:53:86:98:45:84:60:e4:4e:eb:27:98:80: 31:7c:62:6a:d7:a0:4e:50:26:7b:4b:b9:ec:77:4a:71:9d:51: ea:81:a0:8d:3d:46:07:5b:8f:4b:77:eb:0e:89:2c:4c:bf:42: 1a:64:7c:d9:8a:c9:9f:ae:16:96:db:bd:2d:32:5e:b8:b6:c7: bb:e2:b9:16 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1E+ko1DfpWn7ynwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZmEzNDIwOWMtZjhkNC00YWNjLWFhMjQtMTZlYTM3YmY5ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAQPhYYZrXLJUrp0NrT7O81XJAGBYdg9IlCt JiHlU6FP3VKdJS9rqQm1prSy7zDK/n/Dx+P35LzQdJOCOJAc4JbvGRozJMql0FII yxygbR/R+OJPl8WQ55220RH/qOlQHQikoqHODbK9lWXF5JQe7DRGcbsB4L0hsANQ 7PSFSp++0SFlNPdHFZ5V0UXBMVWuP8pP346K91Ojpjpbe2PZDz62DyZYxw7Z9QC9 SP6FKH5Gh54mRoqi7r3/C2TDXxB6b4wPshWDi51UR+T4vh0rZxFnlVtSaj450y7n CZwXe7MvqKEEWXnivloj9iYpqQ5AflRE/zZGbtznvYbGz/W5awIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMXqyJduBdasRpp3YA48ZawSFOSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvNzc3NDg3OWItOTMzMC0z YjdlLWFlOGItMjg2YjAwMTRhNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZeiAwQB oZf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH4wAXQzCncRn9DQzcbY3ZeSbzuGf1jHi/9w6uGzfJdtHsml 8Mo2w1g+pQohbZ1MyCc2EyJlMKzWGEthsyrd6HjJRgf95PsDbwSDcP1QF8xaRiFy TO0JaQ0EBESL3Sp04HtUHifoC5msUNzFVQwOalsGAaBWDZVSVCtLcZFpRjNq5n4D /NLCGtiSGZvX5LyqHSfG00XwtewHRBXB0374/xhAcsuZhW3a9oZNecOMkeKJ23Ik 6WF2URFRHlOGmEWEYORO6yeYgDF8YmrXoE5QJntLuex3SnGdUeqBoI09Rgdbj0t3 6w6JLEy/QhpkfNmKyZ+uFpbbvS0yXri2x7viuRY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:11 2026 by rpki-client