$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa File: b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa (raw, json) Hash identifier: wuctHwiF6Rh7CwlH4PQe0XmxEAkJsad9rQJORUzd3aA= Subject key identifier: 8E:A0:EB:E0:42:BE:09:1E:29:1A:E6:BD:21:71:FC:27:FC:7F:B5:40 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584D300A151FD3B6604ED6274D20 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16570 IP address blocks: 164.153.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:15:1f:d3:b6:60:4e:d6:27:4d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=559d547c-3cf1-47cb-8207-9d07c1ab34d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:c2:bb:b8:bd:52:c2:04:e1:9f:a9:46:13: 5e:e8:84:4c:0d:82:8c:c3:73:56:51:03:23:d4:16: 45:9e:82:56:b2:9a:2b:f3:10:18:bf:2c:43:37:a3: 77:7f:99:9f:90:15:e7:74:7f:49:f6:a4:0c:9f:1a: c1:f3:c4:0b:0f:23:b7:83:d0:1c:ea:65:8b:c1:a3: e5:6d:7c:ea:3e:be:77:cf:67:e3:c0:ef:94:9f:95: 07:c1:af:90:94:ec:ef:df:a6:c1:32:ae:e5:54:e0: 88:b4:4d:12:21:7d:32:4a:d7:3e:d7:4d:eb:ea:13: a9:eb:c7:f0:4b:ab:9d:dd:55:c3:80:a6:1d:e7:a5: 32:56:17:52:49:b3:9d:a3:cc:b9:2f:cb:5d:e9:92: 5b:91:11:65:73:d1:0a:bc:13:bb:93:31:32:ab:83: 0c:35:9b:51:16:30:26:c4:97:e1:41:88:ab:24:8e: a2:dd:fd:54:8d:82:77:c5:d1:d7:93:92:48:da:d9: 59:03:3b:ed:ca:c6:29:95:90:de:a4:08:1d:d8:4e: f8:2a:85:f9:d3:c6:6c:63:30:b9:6d:e4:c7:12:cf: 67:1d:42:99:43:5f:a2:c9:50:f6:ab:7c:1b:77:20: b9:28:b9:05:88:94:3a:ec:29:b9:69:7e:41:2f:62: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:EB:E0:42:BE:09:1E:29:1A:E6:BD:21:71:FC:27:FC:7F:B5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:13:8d:c3:e1:ed:5c:62:51:a5:c0:37:eb:21:df:83:b2:2f: cf:ff:02:e7:7b:62:d2:16:dd:4b:fc:01:c4:35:9b:55:ea:6b: b2:36:5e:91:0f:33:9e:8f:f2:39:af:3a:30:d5:86:1d:d6:62: 3b:d1:9c:29:e6:b0:82:05:d5:54:44:48:35:0d:ed:39:36:c4: 18:02:bc:52:40:0c:df:32:2f:0d:be:29:40:30:67:ea:5f:bf: 68:26:6f:10:cb:d0:6a:8a:60:d3:79:9c:3f:65:d4:26:76:b5: de:42:71:d7:2d:4b:72:e5:95:8a:3f:ca:f8:e4:02:e0:f0:51: 23:5b:43:07:78:dc:f9:6c:1f:bb:5a:da:20:be:a6:3e:f3:21: cc:09:75:b6:d9:ed:0f:9e:e9:1d:b1:e9:82:82:83:44:fc:76: 12:c9:6d:26:01:03:4f:34:c3:44:f7:cd:c0:44:da:bf:70:e3: d2:8a:90:56:64:06:b8:ab:ef:d4:76:22:59:7a:59:86:79:3d: f6:dd:4f:19:1b:b3:4d:4b:f7:00:73:87:1d:67:fe:54:a0:1b: 2e:ff:63:65:39:f0:50:9a:b4:fd:7d:57:38:c2:94:12:6a:01: 81:26:19:2e:c8:7e:47:f3:70:d0:2e:e4:cf:78:62:8e:46:9c: 53:7e:9e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wChUf07ZgTtYnTSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTU5ZDU0N2MtM2NmMS00N2NiLTgyMDctOWQwN2MxYWIzNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDCu7i9UsIE4Z+pRhNe6IRMDYKMw3NWUQMj 1BZFnoJWspor8xAYvyxDN6N3f5mfkBXndH9J9qQMnxrB88QLDyO3g9Ac6mWLwaPl bXzqPr53z2fjwO+Un5UHwa+QlOzv36bBMq7lVOCItE0SIX0yStc+103r6hOp68fw S6ud3VXDgKYd56UyVhdSSbOdo8y5L8td6ZJbkRFlc9EKvBO7kzEyq4MMNZtRFjAm xJfhQYirJI6i3f1UjYJ3xdHXk5JI2tlZAzvtysYplZDepAgd2E74KoX508ZsYzC5 beTHEs9nHUKZQ1+iyVD2q3wbdyC5KLkFiJQ67Cm5aX5BL2ILEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6g6+BCvgkeKRrmvSFx/Cf8f7VAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYjJkZTVkYTItZTYyZS0z ZDc4LWJkOTItMGYxYjFiNDIwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMTjcPh7VxiUaXAN+sh34OyL8//Aud7YtIW3Uv8AcQ1m1Xqa7I2XpEP M56P8jmvOjDVhh3WYjvRnCnmsIIF1VRESDUN7Tk2xBgCvFJADN8yLw2+KUAwZ+pf v2gmbxDL0GqKYNN5nD9l1CZ2td5CcdctS3LllYo/yvjkAuDwUSNbQwd43PlsH7ta 2iC+pj7zIcwJdbbZ7Q+e6R2x6YKCg0T8dhLJbSYBA080w0T3zcBE2r9w49KKkFZk Brir79R2Ill6WYZ5PfbdTxkbs01L9wBzhx1n/lSgGy7/Y2U58FCatP19VzjClBJq AYEmGS7IfkfzcNAu5M94Yo5GnFN+nog= -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:33 2026 by rpki-client