$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa File: 0be8454d-aa3f-3887-b929-e6f6935a2918.roa (raw, json) Hash identifier: K+h41RuRRvDHsrqTdiMozyYbdxvgLCd9zfLhpH5ejUY= Subject key identifier: 22:E0:17:5E:FF:EC:01:E3:8C:A4:DD:26:F2:2A:1F:3B:57:1B:CE:A4 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D037CF9F5665AF76480181900 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 171.161.20.0/22 maxlen: 22 171.161.20.0/24 maxlen: 24 171.161.21.0/24 maxlen: 24 171.161.22.0/24 maxlen: 24 171.161.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f9:f5:66:5a:f7:64:80:18:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=250651fb-bc00-4af2-81a4-1e917180cf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:f8:83:17:ca:c2:9d:f0:ec:93:d5:67:2d: e6:c3:bd:47:57:c2:33:85:a8:00:6d:0b:f4:8a:4a: 70:50:c9:e8:57:c6:41:42:84:9e:63:90:94:2c:59: a9:b0:1f:df:43:56:04:92:4e:1b:86:db:20:36:ff: 5c:27:0f:4c:ca:17:54:40:30:0d:0b:bc:a8:86:6e: b5:31:41:40:cb:0d:39:3b:ff:65:fd:ca:15:ab:b5: 74:10:61:a5:c4:d6:4f:8f:99:48:db:9c:8b:82:ac: 7c:b1:25:dd:e9:f8:f2:6a:8f:d2:33:b5:f7:64:3f: 09:c8:ca:4c:d2:47:bc:96:9c:c9:fe:75:bf:c3:2c: 0d:ea:da:00:e6:56:83:4c:06:20:0c:5c:fc:90:c4: 51:c8:14:fc:30:74:20:61:b6:0f:01:d9:f4:1a:24: 90:64:18:95:b3:3d:9a:f1:d9:ff:6f:4d:95:16:c8: 85:3b:12:32:68:4c:74:a4:eb:53:6f:1b:ca:86:07: 68:07:06:9b:f2:b1:c5:01:3a:5a:87:80:4c:ba:df: 34:c2:d9:cc:a4:ac:af:91:32:37:75:51:ff:fa:d8: 37:47:69:55:a8:1c:0a:77:f2:66:68:59:d6:86:96: 17:79:0f:a4:6a:d1:9c:17:07:3e:1b:17:3f:47:dc: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:17:5E:FF:EC:01:E3:8C:A4:DD:26:F2:2A:1F:3B:57:1B:CE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f8:24:c0:7a:92:89:5e:6e:13:71:67:27:61:e7:5e:00:ee: 6d:33:2e:06:93:88:a7:b4:d8:95:fa:6d:43:3d:67:6b:e8:3d: 8e:41:c8:35:66:d0:16:92:29:66:98:b1:cf:1b:e3:a8:5c:d9: 16:24:73:4b:f0:16:6a:98:34:0f:ca:01:ec:2b:ec:3a:2a:99: 51:cd:5a:f8:64:0d:30:ae:e1:4e:b1:cf:9f:3c:e6:29:fd:34: 70:9d:47:d9:7a:d8:97:74:68:3c:1c:81:35:56:ca:1e:82:69: ee:80:bc:8a:8f:24:0c:4d:6a:ed:8e:1e:13:06:b8:e0:1c:c6: 38:76:69:21:e1:2c:fe:25:9e:68:fe:04:e9:1c:bb:5b:b1:5c: 99:37:bf:a1:ef:ef:45:45:61:77:ea:31:62:af:be:df:19:c7: c9:11:51:c0:2b:d7:34:4b:c0:73:bb:10:f1:04:33:d1:e3:bd: 99:05:e7:46:ce:4b:b7:a8:d0:c4:4f:4a:bb:58:bc:fa:2b:32: 62:e7:e4:e6:d0:ff:15:e2:f2:cc:8e:55:78:0d:ca:dc:75:fc: da:fd:e0:0f:13:1f:14:5f:e6:36:b0:71:bd:94:68:4c:4d:67: c4:ac:37:96:96:81:27:c6:cd:fe:17:1a:f3:cc:a6:c7:4e:93: f0:af:2d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPn1Zlr3ZIAYGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MjUwNjUxZmItYmMwMC00YWYyLTgxYTQtMWU5MTcxODBjZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbr4gxfKwp3w7JPVZy3mw71HV8IzhagAbQv0 ikpwUMnoV8ZBQoSeY5CULFmpsB/fQ1YEkk4bhtsgNv9cJw9MyhdUQDANC7yohm61 MUFAyw05O/9l/coVq7V0EGGlxNZPj5lI25yLgqx8sSXd6fjyao/SM7X3ZD8JyMpM 0ke8lpzJ/nW/wywN6toA5laDTAYgDFz8kMRRyBT8MHQgYbYPAdn0GiSQZBiVsz2a 8dn/b02VFsiFOxIyaEx0pOtTbxvKhgdoBwab8rHFATpah4BMut80wtnMpKyvkTI3 dVH/+tg3R2lVqBwKd/JmaFnWhpYXeQ+katGcFwc+Gxc/R9xswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLgF17/7AHjjKTdJvIqHztXG86kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGJlODQ1NGQtYWEzZi0z ODg3LWI5MjktZTZmNjkzNWEyOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv4JMB6kolebhNxZydh514A7m0zLgaTiKe02JX6bUM9Z2voPY5ByDVm 0BaSKWaYsc8b46hc2RYkc0vwFmqYNA/KAewr7DoqmVHNWvhkDTCu4U6xz5885in9 NHCdR9l62Jd0aDwcgTVWyh6Cae6AvIqPJAxNau2OHhMGuOAcxjh2aSHhLP4lnmj+ BOkcu1uxXJk3v6Hv70VFYXfqMWKvvt8Zx8kRUcAr1zRLwHO7EPEEM9HjvZkF50bO S7eo0MRPSrtYvPorMmLn5ObQ/xXi8syOVXgNytx1/Nr94A8THxRf5jawcb2UaExN Z8SsN5aWgSfGzf4XGvPMpsdOk/CvLZg= -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:28 2026 by rpki-client