$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa File: 3fa7443b-c654-356b-b2d2-4470e41cbde8.roa (raw, json) Hash identifier: 3ioj+reEYTXwbDhJ0aJUBfj3PhuWYlE30Ddsj2u2YTU= Subject key identifier: BB:D9:67:C0:47:64:04:29:AA:AD:00:9D:77:70:62:5C:31:53:24:0D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A9701B986E9DA1DD9AB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.153.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:97:01:b9:86:e9:da:1d:d9:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=d848f94d-c3b6-4379-9a11-edf683c103c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:66:59:74:13:a3:24:5d:26:61:c1:60:0c: 8e:2e:4e:d3:76:3d:b9:c4:7f:7d:b8:ef:df:1a:10: 59:c9:f8:10:90:38:bb:de:e3:73:c5:39:8c:fd:f1: c8:15:fd:6e:c1:e3:9e:eb:7d:6d:9a:4e:81:4a:f6: 07:35:59:c1:1f:93:7b:88:23:bd:e9:5a:47:e1:09: 90:65:cb:3b:71:2a:88:f9:44:bd:31:40:10:95:88: 03:5b:ba:e9:dd:b7:b5:ae:c6:43:17:2b:3d:aa:17: 92:f6:80:58:39:ca:16:b0:d6:d7:21:5e:f6:66:bf: 04:f9:39:33:61:a7:c8:43:02:a6:c1:6c:39:32:00: cd:b8:f9:cb:e4:06:ba:c7:f6:7f:af:56:41:14:ff: c6:29:f2:9c:3f:c2:dc:6b:11:72:bc:a7:6c:87:1a: fd:5a:0e:9e:3a:9e:42:d7:44:f5:50:05:21:dc:3e: 39:91:6c:66:c4:2a:e0:45:97:10:53:12:32:a9:bf: 2b:f9:cf:ff:25:a2:31:0e:c9:33:4c:e5:17:5a:29: ea:a1:95:a2:0b:4f:36:c6:a3:4f:ef:9d:69:2d:23: bf:ef:57:ca:95:05:fb:34:9e:82:bb:45:09:bd:6b: 6e:c4:e3:09:56:3a:7e:9b:bd:60:1d:31:7d:31:d1: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D9:67:C0:47:64:04:29:AA:AD:00:9D:77:70:62:5C:31:53:24:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bd:dc:27:16:68:ce:b1:91:e5:e8:b9:4a:ad:17:e4:6c:58: ea:81:e6:ae:ce:f2:d9:5c:72:a8:ef:1f:68:9f:4a:a0:6c:fd: b4:d2:c6:30:3b:81:b3:ce:ce:76:45:4f:70:4b:47:45:86:ac: 26:14:ea:e8:eb:41:bf:bf:a2:9b:b5:e2:36:0e:21:0b:b9:58: 4b:a0:36:35:e6:4d:6b:00:10:7b:d0:eb:8e:b7:fb:19:ef:be: 69:5a:a3:4d:e6:50:15:50:11:d3:60:39:07:ef:09:d4:b4:b3: a9:16:e4:33:3c:2a:37:2b:90:37:21:48:b3:a6:08:4e:c0:d0: 41:60:73:35:85:cd:b3:ec:42:e9:0c:24:98:e1:37:86:5a:26: c0:81:58:15:0b:80:4b:62:a0:ab:7e:93:b8:57:b3:c7:11:97: aa:04:ac:e8:dd:4a:4e:9e:da:56:b5:b1:8e:07:09:76:85:fe: a6:3a:44:2d:e4:be:99:f3:85:71:79:1a:f6:0a:c2:67:a3:79: c9:3a:28:12:ad:82:21:9f:ed:48:62:ad:42:ea:49:67:4f:46: 52:f9:85:05:0c:64:46:56:c4:40:2c:8e:b0:98:1e:93:90:59: 55:28:a8:46:09:d0:a7:8d:35:d2:9f:8d:93:eb:96:68:83:db: b5:d9:75:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpcBuYbp2h3Zq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDg0OGY5NGQtYzNiNi00Mzc5LTlhMTEtZWRmNjgzYzEwM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8tmWXQToyRdJmHBYAyOLk7Tdj25xH99uO/f GhBZyfgQkDi73uNzxTmM/fHIFf1uweOe631tmk6BSvYHNVnBH5N7iCO96VpH4QmQ Zcs7cSqI+US9MUAQlYgDW7rp3be1rsZDFys9qheS9oBYOcoWsNbXIV72Zr8E+Tkz YafIQwKmwWw5MgDNuPnL5Aa6x/Z/r1ZBFP/GKfKcP8LcaxFyvKdshxr9Wg6eOp5C 10T1UAUh3D45kWxmxCrgRZcQUxIyqb8r+c//JaIxDskzTOUXWinqoZWiC082xqNP 751pLSO/71fKlQX7NJ6Cu0UJvWtuxOMJVjp+m71gHTF9MdH5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvZZ8BHZAQpqq0AnXdwYlwxUyQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZhNzQ0M2ItYzY1NC0z NTZiLWIyZDItNDQ3MGU0MWNiZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHoZkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy93CcWaM6xkeXouUqtF+RsWOqB5q7O8tlccqjvH2ifSqBs/bTSxjA7 gbPOznZFT3BLR0WGrCYU6ujrQb+/opu14jYOIQu5WEugNjXmTWsAEHvQ6463+xnv vmlao03mUBVQEdNgOQfvCdS0s6kW5DM8KjcrkDchSLOmCE7A0EFgczWFzbPsQukM JJjhN4ZaJsCBWBULgEtioKt+k7hXs8cRl6oErOjdSk6e2la1sY4HCXaF/qY6RC3k vpnzhXF5GvYKwmejeck6KBKtgiGf7UhirULqSWdPRlL5hQUMZEZWxEAsjrCYHpOQ WVUoqEYJ0KeNNdKfjZPrlmiD27XZdUg= -----END CERTIFICATE-----Generated at Wed May 13 06:52:06 2026 by rpki-client