$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa File: 0a304ecb-2ccf-3f21-870f-038dc352281a.roa (raw, json) Hash identifier: rqu5YNnEgv86j7H0IQS0KVQQb+XXyf84Q/NOPiudn+8= Subject key identifier: 6F:58:E3:D4:C8:B2:D5:D0:45:A2:B1:0F:AA:74:1B:1B:1C:0F:4E:20 Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584D3E0017D42308E57D875509C0 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 40343 IP address blocks: 201.159.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:17:d4:23:08:e5:7d:87:55:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=fb00f2c2-abf0-4f49-a6bb-3e69ec4c8f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:99:c3:46:7f:27:fb:6f:1c:fb:dd:1c:28: 2f:1e:e6:28:15:c8:04:f6:4a:58:f9:46:fd:d8:58: 0c:ed:9d:d2:e0:7d:39:9a:5e:71:a2:d1:2e:35:5e: 1c:34:26:85:29:a4:4f:2f:90:91:2e:12:7f:ef:ea: 35:19:04:10:1a:c7:b8:5f:fd:4f:d9:51:12:b5:ba: 5d:c6:e2:20:0c:70:1f:73:35:5b:30:f3:3c:72:d4: 5c:e9:e8:33:e4:a3:5c:d2:b0:63:56:b7:2a:01:16: c2:3e:8b:12:9a:4b:ec:75:16:45:ed:cf:34:ec:66: a6:a3:b0:dc:75:30:17:d6:76:27:24:32:67:c8:ca: 04:cc:81:9f:0c:0d:f1:51:38:c7:72:bc:f6:4a:1c: a2:ec:21:85:96:48:96:03:74:3e:01:4e:59:b8:49: d1:b3:c1:80:23:a0:7d:11:81:d2:03:3a:b0:cf:d0: 05:a8:05:1f:8f:64:d2:c8:a0:17:b9:46:e9:85:3a: ca:69:28:6a:e0:00:b3:0e:62:b3:e9:96:73:97:c3: 5a:e5:98:7f:7e:3c:16:6b:ba:70:09:02:b4:74:cd: 28:2e:36:29:e1:03:25:ea:63:7c:9b:44:8b:f7:73: 17:2d:0f:67:74:50:85:24:e1:ec:be:5d:a5:dc:60: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:58:E3:D4:C8:B2:D5:D0:45:A2:B1:0F:AA:74:1B:1B:1C:0F:4E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 201.159.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d6:1d:64:ff:38:a6:4f:2e:b8:a1:25:cd:44:c3:00:48:e7: 46:ef:8c:83:2d:41:4c:6c:3f:5a:60:39:b5:0b:90:21:86:08: 3f:0b:44:62:d8:10:6c:b2:13:c8:db:3d:fb:e6:9d:39:8a:0f: 81:54:f8:93:8f:28:77:6d:68:ae:e3:e9:bf:ac:74:f1:c3:55: 04:1c:36:57:93:a2:fd:eb:01:78:27:4f:2f:54:19:cb:95:36: 8c:07:07:52:7c:9e:1d:d6:f7:21:38:00:96:7e:a5:30:19:74: 1b:07:0e:91:83:4d:b8:cb:11:3e:35:32:ef:78:bd:42:48:8a: 0a:99:63:09:a3:17:30:34:42:3a:83:d0:db:d9:88:75:41:8c: a6:1e:b9:8f:da:55:f9:5d:63:40:45:84:25:a6:93:69:1d:7d: db:d1:ca:50:c4:be:e8:db:4e:5b:65:2b:fb:5c:d9:d3:19:29: 5e:b6:b6:71:2e:8f:c0:63:53:24:be:6f:98:a0:10:e1:64:48: 92:cd:18:bf:1a:cb:ac:ca:70:f0:c2:b3:0d:ed:b8:4b:b9:27: fc:01:e8:af:99:c2:11:c8:43:4d:b4:b7:b7:2a:90:8f:c9:a6: 28:9b:0a:e6:67:10:a8:7f:f6:7c:30:28:c6:56:5c:4a:c1:00: 75:dd:0d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABfUIwjlfYdVCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmIwMGYyYzItYWJmMC00ZjQ5LWE2YmItM2U2OWVjNGM4ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WZw0Z/J/tvHPvdHCgvHuYoFcgE9kpY+Ub9 2FgM7Z3S4H05ml5xotEuNV4cNCaFKaRPL5CRLhJ/7+o1GQQQGse4X/1P2VEStbpd xuIgDHAfczVbMPM8ctRc6egz5KNc0rBjVrcqARbCPosSmkvsdRZF7c807Gamo7Dc dTAX1nYnJDJnyMoEzIGfDA3xUTjHcrz2Shyi7CGFlkiWA3Q+AU5ZuEnRs8GAI6B9 EYHSAzqwz9AFqAUfj2TSyKAXuUbphTrKaShq4ACzDmKz6ZZzl8Na5Zh/fjwWa7pw CQK0dM0oLjYp4QMl6mN8m0SL93MXLQ9ndFCFJOHsvl2l3GBW6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9Y49TIstXQRaKxD6p0GxscD04gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvMGEzMDRlY2ItMmNjZi0z ZjIxLTg3MGYtMDM4ZGMzNTIyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyZ9HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvWHWT/OKZPLrihJc1EwwBI50bvjIMtQUxsP1pgObULkCGGCD8LRGLY EGyyE8jbPfvmnTmKD4FU+JOPKHdtaK7j6b+sdPHDVQQcNleTov3rAXgnTy9UGcuV NowHB1J8nh3W9yE4AJZ+pTAZdBsHDpGDTbjLET41Mu94vUJIigqZYwmjFzA0QjqD 0NvZiHVBjKYeuY/aVfldY0BFhCWmk2kdfdvRylDEvujbTltlK/tc2dMZKV62tnEu j8BjUyS+b5igEOFkSJLNGL8ay6zKcPDCsw3tuEu5J/wB6K+ZwhHIQ020t7cqkI/J piibCuZnEKh/9nwwKMZWXErBAHXdDQ8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:39:07 2026 by rpki-client