$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa File: 576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json) Hash identifier: F/qCjgsVx3flHn61D+CLAQrU3VBw+SJi1ERSEoEV5Qc= Subject key identifier: 9E:8D:42:C2:82:BD:79:5C:03:9F:10:B4:D9:D9:24:BE:9A:30:91:68 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584D746FC52045CAD986C7DA3740 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 8075 IP address blocks: 161.221.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c5:20:45:ca:d9:86:c7:da:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=fbb9bf66-a2be-4ba2-a0ae-fa918cde3b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:b2:64:7f:ec:ce:3f:04:95:42:be:44:a3: 26:4d:4e:c2:41:45:e5:f9:d3:2d:00:b2:b7:f3:90: 7f:a6:55:c9:a8:78:48:85:d4:22:a7:50:5c:ea:62: 57:f7:12:e8:36:b9:09:13:f1:38:7b:38:d8:d7:7c: a0:30:c9:6c:22:4b:64:96:a3:bc:23:a4:ab:ec:e7: ce:ee:55:11:c8:8b:69:48:ed:69:ff:36:80:01:50: df:dd:00:7f:cf:2d:da:27:6d:07:d8:29:d8:8a:a3: 90:03:91:8a:05:78:f4:d2:42:ff:3f:7a:e6:42:b1: 54:07:3d:d3:67:b4:79:d0:97:0e:a2:9f:37:fd:b7: 6e:12:2a:bc:c5:d8:39:a7:53:f1:80:c0:39:f4:03: d2:f7:b4:84:66:a6:8b:bd:93:54:6c:28:66:f8:3e: b4:8f:fb:8b:48:79:49:f4:56:27:3f:eb:53:de:62: 3e:59:85:a7:9a:1a:8e:00:01:4b:7a:f7:49:db:7f: c6:c6:7e:ea:b9:69:06:d0:69:27:ce:9d:db:0d:65: 04:f1:b8:7c:b5:f1:38:e7:a3:11:b8:89:0d:43:45: 7d:ff:65:8b:ed:c6:2a:1e:2b:46:56:53:3f:5a:49: f3:16:4c:f2:93:3a:a1:9f:91:7d:a8:15:d0:0e:51: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:42:C2:82:BD:79:5C:03:9F:10:B4:D9:D9:24:BE:9A:30:91:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:55:ce:78:29:82:d6:1d:4a:8f:ec:f9:09:fd:5f:9d:8d:92: 47:ec:4a:15:fb:cd:6a:92:d4:9c:7d:93:57:a4:14:bd:de:6b: b2:72:17:d2:d8:ce:4d:b4:7d:6b:56:9d:92:16:1f:ba:99:10: d9:27:43:a2:8a:6f:aa:9c:aa:0c:5e:34:e1:cc:8f:b7:fe:0a: ea:bb:66:f8:59:68:59:76:57:6f:e4:61:9d:5b:61:4d:8b:ed: 8a:73:27:90:80:ed:18:b8:34:30:dc:37:b8:b8:91:e5:ca:39: ac:2a:e6:ec:60:f2:9b:04:73:b5:60:2a:b3:58:64:5a:ae:f9: 0d:08:44:22:e0:fa:7a:42:9b:a5:1b:75:be:34:15:0a:25:2d: 58:e8:11:d9:7d:4a:ed:69:e8:84:bb:32:29:dd:e3:11:bd:75: 22:62:03:da:f6:d5:be:c8:c1:cd:d1:9d:bd:df:3d:f8:dc:d0: b8:31:9b:bc:62:1f:d8:db:bc:cf:75:a7:94:0f:f3:c0:d4:77: da:c6:e3:c0:7c:8c:69:01:84:06:0f:b3:48:f6:ad:fd:8d:07: b8:01:94:23:a2:d4:fb:a4:d7:ee:98:77:17:23:ea:04:cd:ec: ab:57:13:9c:f4:dc:0a:d0:1f:26:1e:cf:f9:ed:20:2e:46:18: 01:2f:58:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8UgRcrZhsfaN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZmJiOWJmNjYtYTJiZS00YmEyLWEwYWUtZmE5MThjZGUzYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3SyZH/szj8ElUK+RKMmTU7CQUXl+dMtALK3 85B/plXJqHhIhdQip1Bc6mJX9xLoNrkJE/E4ezjY13ygMMlsIktklqO8I6Sr7OfO 7lURyItpSO1p/zaAAVDf3QB/zy3aJ20H2CnYiqOQA5GKBXj00kL/P3rmQrFUBz3T Z7R50JcOop83/bduEiq8xdg5p1PxgMA59APS97SEZqaLvZNUbChm+D60j/uLSHlJ 9FYnP+tT3mI+WYWnmhqOAAFLevdJ23/Gxn7quWkG0Gknzp3bDWUE8bh8tfE456MR uIkNQ0V9/2WL7cYqHitGVlM/WknzFkzykzqhn5F9qBXQDlFnLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6NQsKCvXlcA58QtNnZJL6aMJFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvNTc2ZWJmZWEtZjdmMi0z NmYyLWIwYzgtMWQ3Mzg5MDc2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9VzngpgtYdSo/s+Qn9X52NkkfsShX7zWqS1Jx9k1ekFL3ea7JyF9LY zk20fWtWnZIWH7qZENknQ6KKb6qcqgxeNOHMj7f+Cuq7ZvhZaFl2V2/kYZ1bYU2L 7YpzJ5CA7Ri4NDDcN7i4keXKOawq5uxg8psEc7VgKrNYZFqu+Q0IRCLg+npCm6Ub db40FQolLVjoEdl9Su1p6IS7Mind4xG9dSJiA9r21b7Iwc3Rnb3fPfjc0Lgxm7xi H9jbvM91p5QP88DUd9rG48B8jGkBhAYPs0j2rf2NB7gBlCOi1Puk1+6Ydxcj6gTN 7KtXE5z03ArQHyYez/ntIC5GGAEvWEQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:58:55 2026 by rpki-client