$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa File: 1e162d29-1681-394e-af11-2cac1a16632d.roa (raw, json) Hash identifier: HAzJ5jgF0KrrGwC3Y0Cs/lU/ynyXegDld3Ouf5byIsE= Subject key identifier: 21:67:97:AB:C7:9E:5B:D8:3C:23:98:D4:50:EB:D7:27:FE:55:9F:F1 Certificate issuer: /CN=1023a4c7-42d2-43d3-969f-e275de93e1df Certificate serial: 010D0C9F4328584E15E46F7826870E65C3604CC0 Authority key identifier: 55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 16509 IP address blocks: 151.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:6f:78:26:87:0e:65:c3:60:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1023a4c7-42d2-43d3-969f-e275de93e1df Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=646e20e7-9a4c-4754-8f6f-2045d7b2cc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:17:f1:70:c5:56:61:3f:86:7c:e1:c1:83: 24:89:e2:d0:90:34:11:4c:35:0f:0d:05:c5:c6:86: 80:ff:e8:9b:4a:9a:fe:54:59:b0:5c:6e:dd:ed:5c: 0c:c2:13:3f:1c:4f:c8:9a:2d:78:d4:b9:60:ff:5d: 67:7e:eb:45:f4:a2:18:25:58:85:13:41:eb:db:a0: 03:cf:55:06:6f:f3:c7:af:7a:cf:b0:3d:2e:10:06: 0a:41:e0:f9:ba:bd:2f:5f:c5:1f:a4:7f:ce:4a:9c: 10:1d:a3:b4:e3:eb:78:19:0d:1b:97:c6:29:d9:8d: 31:41:e1:38:ce:0f:41:0a:e7:79:d9:ad:21:45:02: 8d:b1:1b:88:13:6f:84:b7:e4:45:a5:0f:08:96:92: 5b:cf:e4:9f:cd:3d:8b:4a:03:54:fa:75:80:38:f3: 13:fa:ca:8a:1c:a5:86:61:13:08:85:0f:e8:7d:c4: 93:d5:25:6e:b1:86:25:bc:b3:6f:42:fb:e4:54:b6: 03:b6:46:e1:f0:82:52:e7:77:8c:4c:c4:22:b1:51: f3:07:8a:dc:57:ec:7d:b4:66:8b:f9:c1:cc:15:d4: 74:d6:4c:d1:fc:73:06:70:e4:06:d2:15:ab:76:f6: bc:7b:1a:6d:71:ff:ba:7a:5f:21:c7:a7:d5:f1:4f: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:97:AB:C7:9E:5B:D8:3C:23:98:D4:50:EB:D7:27:FE:55:9F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl X509v3 Authority Key Identifier: keyid:55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer sbgp-ipAddrBlock: critical IPv4: 151.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1c:11:78:b2:b1:c0:c4:f0:fe:e2:84:61:d2:b3:93:5e:5a: 26:fe:08:2b:4a:29:33:85:f3:13:db:9f:fe:6d:e7:80:23:27: 92:6e:3e:78:a2:a1:6d:14:20:ce:36:0f:98:a2:6d:1a:83:46: cc:50:8f:51:98:2e:f8:34:de:a8:6f:71:d1:20:37:67:df:84: 79:30:f5:23:1a:5f:34:6c:e1:c1:62:fa:01:bd:cc:36:f7:33: b0:8a:7e:08:80:f2:1a:6b:79:ed:9f:95:17:8e:9c:8b:83:77: 09:a8:00:fd:88:de:01:6a:a9:96:38:74:44:c2:46:98:f9:bc: 16:15:68:66:05:9b:42:f5:9d:25:30:0d:b2:8e:72:f1:72:ea: c8:20:01:95:ce:50:de:7c:4f:e1:3a:89:41:72:2e:fb:fe:bb: 27:cd:f2:23:d2:29:94:00:df:03:93:ce:2d:81:8c:41:d1:c3: 8c:98:ab:82:bf:73:17:dd:61:9a:9d:c9:fb:4c:84:55:fd:25: ab:ab:c8:7c:19:a0:de:92:61:2c:5d:47:41:b3:7d:ad:f8:f0: 3f:2e:60:ad:07:6e:4b:f2:18:92:a3:80:1c:91:96:4b:e7:cc: cc:10:b3:39:2a:e2:f1:79:38:4a:1c:33:f8:b5:8a:67:44:63: 23:04:d6:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5G94JocOZcNgTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAyM2E0YzctNDJkMi00M2QzLTk2OWYtZTI3NWRlOTNl MWRmMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NjQ2ZTIwZTctOWE0Yy00NzU0LThmNmYtMjA0NWQ3YjJjYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GMX8XDFVmE/hnzhwYMkieLQkDQRTDUPDQXF xoaA/+ibSpr+VFmwXG7d7VwMwhM/HE/Imi141Llg/11nfutF9KIYJViFE0Hr26AD z1UGb/PHr3rPsD0uEAYKQeD5ur0vX8UfpH/OSpwQHaO04+t4GQ0bl8Yp2Y0xQeE4 zg9BCud52a0hRQKNsRuIE2+Et+RFpQ8IlpJbz+SfzT2LSgNU+nWAOPMT+sqKHKWG YRMIhQ/ofcST1SVusYYlvLNvQvvkVLYDtkbh8IJS53eMTMQisVHzB4rcV+x9tGaL +cHMFdR01kzR/HMGcOQG0hWrdva8exptcf+6el8hx6fV8U9GOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFnl6vHnlvYPCOY1FDr1yf+VZ/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIz YTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1ZGU5M2UxZGYvMWUxNjJkMjktMTY4MS0z OTRlLWFmMTEtMmNhYzFhMTY2MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTAyM2E0YzctNDJkMi00M2QzLTk2 OWYtZTI3NWRlOTNlMWRmLzEwMjNhNGM3LTQyZDItNDNkMy05NjlmLWUyNzVkZTkz ZTFkZi5jcmwwHwYDVR0jBBgwFoAUVbTRAIg2RF97dJ3absI0YTMKveAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIzYTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1 ZGU5M2UxZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIcEXiyscDE8P7ihGHSs5NeWib+CCtKKTOF8xPbn/5t54AjJ5JuPnii oW0UIM42D5iibRqDRsxQj1GYLvg03qhvcdEgN2ffhHkw9SMaXzRs4cFi+gG9zDb3 M7CKfgiA8hpree2flReOnIuDdwmoAP2I3gFqqZY4dETCRpj5vBYVaGYFm0L1nSUw DbKOcvFy6sggAZXOUN58T+E6iUFyLvv+uyfN8iPSKZQA3wOTzi2BjEHRw4yYq4K/ cxfdYZqdyftMhFX9JauryHwZoN6SYSxdR0Gzfa348D8uYK0HbkvyGJKjgByRlkvn zMwQszkq4vF5OEocM/i1imdEYyME1po= -----END CERTIFICATE-----Generated at Sat Jun 13 14:04:03 2026 by rpki-client