$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa File: fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json) Hash identifier: 46ATIRVJFjhW6Jamtclvp/vzdWLuU8t5el2S9baISIs= Subject key identifier: E1:7E:8A:ED:89:6F:C7:D2:82:25:82:04:1C:76:46:95:F6:20:04:F6 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584D44FA4A5025069C3726C2E8D8 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 203 IP address blocks: 161.151.162.0/23 maxlen: 24 161.151.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4a:50:25:06:9c:37:26:c2:e8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=11b22fe3-fbea-41c6-9c25-9d336f060a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:a9:8f:3c:32:8a:c8:23:b3:b2:f3:b0:51: 60:61:28:6f:80:b0:92:4e:53:76:e7:49:68:11:af: 7d:26:c0:cb:ad:e0:11:1a:8e:2e:ad:81:cb:80:82: 5e:04:61:1a:29:3d:4a:62:17:1a:e8:d2:9e:7c:db: e9:9e:c6:d2:ac:4f:82:8b:fe:f3:7f:41:e9:24:92: 3c:a6:ba:6c:e1:cb:e2:25:21:0f:20:1d:fb:b3:86: ed:4c:da:11:51:80:fa:53:3c:1b:75:a6:cc:2d:ea: b5:dd:01:ee:45:42:45:3e:90:62:f1:ce:b9:3b:08: 20:f0:c8:4d:3b:9c:91:ec:cc:b0:d7:a0:d4:21:a7: 70:db:8b:23:da:cd:a3:04:86:0e:36:7e:a0:cc:53: 2c:ff:eb:40:95:a2:d8:66:77:b3:ca:21:35:7c:bf: df:4d:16:88:be:d8:67:5c:32:cc:01:db:db:fd:44: 17:09:b7:20:56:b0:6e:14:e8:b8:c0:ff:e8:cb:f7: 29:2a:e5:6d:30:79:1c:89:b0:85:ec:a8:6b:35:d3: 5b:2f:3b:85:fe:e6:63:c8:19:e1:7e:db:b2:64:b3: 96:56:3d:fe:e0:e7:49:8c:d5:b4:85:86:6a:bc:35: e7:c3:d3:3b:bc:5e:f1:08:a9:89:23:2f:fc:b1:d7: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7E:8A:ED:89:6F:C7:D2:82:25:82:04:1C:76:46:95:F6:20:04:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.162.0/23 161.151.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:f6:b2:b2:c9:b1:c5:5a:bf:5e:d3:7a:66:11:46:2d:e4:25: 59:e7:b6:62:c7:a6:b9:c3:3e:7c:2c:67:1e:16:4c:99:58:2a: 8d:af:c2:b6:d7:02:5b:bd:d8:aa:4e:2c:47:be:23:92:23:a6: 68:38:47:cd:a7:91:a3:88:a1:5d:b1:ce:93:03:bc:0a:9a:24: f1:23:99:e0:c6:03:41:19:fa:05:9b:f3:72:04:0b:06:eb:47: d5:2e:16:c3:d5:d5:a4:87:aa:f1:99:25:79:f9:bb:f6:c5:6d: 07:1a:d1:4e:1c:13:9a:cd:0c:52:ca:1e:f3:74:e8:fe:fa:05: 85:bc:46:4a:b9:b8:ff:fa:09:37:20:04:b4:c9:c2:fd:45:2f: 10:96:92:1e:58:eb:3b:ff:e9:6e:03:ae:85:10:ca:08:46:ce: 2a:f2:63:b3:34:9d:e7:ee:5f:29:44:c3:c3:4c:9c:ab:66:ae: e6:15:2d:6d:c2:bb:2d:80:87:73:0c:30:cb:72:c0:89:9c:d4: b5:72:99:96:d0:8a:54:67:0c:c2:c8:1f:84:d4:8b:61:64:be: 0b:b5:84:df:43:2e:68:41:bd:60:6d:f0:bb:1e:c5:a6:ff:66: b5:32:c3:eb:35:9e:76:51:50:72:ed:14:f9:bf:23:47:95:94: c9:6e:c1:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1E+kpQJQacNybC6NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTFiMjJmZTMtZmJlYS00MWM2LTljMjUtOWQzMzZmMDYwYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT6pjzwyisgjs7LzsFFgYShvgLCSTlN250lo Ea99JsDLreARGo4urYHLgIJeBGEaKT1KYhca6NKefNvpnsbSrE+Ci/7zf0HpJJI8 prps4cviJSEPIB37s4btTNoRUYD6UzwbdabMLeq13QHuRUJFPpBi8c65Owgg8MhN O5yR7Myw16DUIadw24sj2s2jBIYONn6gzFMs/+tAlaLYZnezyiE1fL/fTRaIvthn XDLMAdvb/UQXCbcgVrBuFOi4wP/oy/cpKuVtMHkcibCF7KhrNdNbLzuF/uZjyBnh ftuyZLOWVj3+4OdJjNW0hYZqvDXnw9M7vF7xCKmJIy/8sdeGuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOF+iu2Jb8fSgiWCBBx2RpX2IAT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvZmQwNWRkOTgtMzA3My0z ODY4LWEyMDItMGE2YzRmMDQxODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZeiAwQB oZf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALb2srLJscVav17TemYRRi3kJVnntmLHprnDPnwsZx4WTJlY Ko2vwrbXAlu92KpOLEe+I5Ijpmg4R82nkaOIoV2xzpMDvAqaJPEjmeDGA0EZ+gWb 83IECwbrR9UuFsPV1aSHqvGZJXn5u/bFbQca0U4cE5rNDFLKHvN06P76BYW8Rkq5 uP/6CTcgBLTJwv1FLxCWkh5Y6zv/6W4DroUQyghGziryY7M0nefuXylEw8NMnKtm ruYVLW3Cuy2Ah3MMMMtywImc1LVymZbQilRnDMLIH4TUi2Fkvgu1hN9DLmhBvWBt 8Lsexab/ZrUyw+s1nnZRUHLtFPm/I0eVlMluweA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:56 2026 by rpki-client