$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa File: 33da5a36-c016-3582-bf59-0f9738d7f8bd.roa (raw, json) Hash identifier: NY/D771KoExJXgll5uPryMf3nUcedx+kQsUE1ZCLwzw= Subject key identifier: BE:67:92:05:07:BB:4D:99:34:73:E3:98:4E:7A:48:30:B2:FA:65:D9 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584D651519DA204DFB288AD1DB00 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 6253 IP address blocks: 161.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:19:da:20:4d:fb:28:8a:d1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=6d4a36c9-74db-42a9-80ec-6a7d658f5301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:d6:56:40:a1:9a:79:2a:fd:d3:c5:73:38: 9a:7f:83:34:4c:ea:30:2e:99:e7:e1:35:1e:22:37: 02:b7:5a:24:12:f0:f2:3b:e0:56:c6:20:e7:69:f5: 46:df:01:66:c5:d7:8c:ba:ee:e5:bb:68:91:4f:b0: 84:1f:7b:7c:d4:68:47:88:f7:8c:4a:ef:fe:17:df: c1:69:fe:06:1c:de:51:91:6e:cb:36:f7:ec:b2:ee: 06:bf:de:a4:b9:e6:4c:77:e0:75:b1:f8:1d:d9:73: aa:39:44:07:f5:9c:21:e7:f8:0f:a2:73:72:53:0c: 09:5f:e8:62:39:1f:ce:df:27:58:9c:67:d1:ba:67: 75:f1:ef:a7:cf:6a:90:ea:63:aa:41:df:9e:0f:0b: f2:4c:21:2f:bc:cb:13:76:cf:ce:68:95:0b:e4:64: 51:05:f9:6a:70:cd:80:d2:5b:ec:e1:30:de:13:8f: 8b:f2:3d:1d:ba:cd:e4:12:66:ed:05:e4:25:33:4c: ea:d6:5c:e5:a9:e7:94:5b:52:8d:4b:e4:cd:7c:38: 42:82:e8:74:10:7a:98:32:bf:29:91:f9:7c:7c:ec: f6:10:cc:27:c7:c9:f7:79:f5:98:e5:82:78:84:30: f1:5d:2c:e1:54:f2:4d:45:85:e6:d3:61:2e:5b:ad: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:92:05:07:BB:4D:99:34:73:E3:98:4E:7A:48:30:B2:FA:65:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e1:57:83:32:a4:ae:27:9a:a3:9b:8d:77:c1:8e:29:42:83: 28:8e:13:1f:5f:8f:ef:bf:97:9d:00:99:c8:fd:f7:17:f6:a3: e8:99:b1:40:2f:40:d1:f3:9b:fc:98:46:56:f4:1f:0b:a7:e6: 28:0e:2a:95:34:15:f4:d4:8f:16:c2:4c:a1:82:9d:8c:21:b5: 44:13:df:17:03:18:4f:dd:3e:3d:38:08:8b:b4:2e:e1:df:7d: 08:b2:23:92:f6:d0:b2:96:e9:d9:ef:cb:3f:a8:82:3c:af:6a: 03:d3:c7:d1:57:b3:8e:6a:d1:12:22:25:c9:74:00:f3:d5:c2: 28:1c:59:79:5e:84:a9:0f:4e:62:72:21:87:9f:ae:22:18:2a: 7c:cc:d5:62:01:24:9a:03:49:b3:8e:22:1d:5c:d1:7e:40:18: 79:62:d6:db:9e:d3:5e:20:a2:1b:38:07:d7:37:36:32:67:0e: 3e:ba:73:f1:84:3c:90:39:bd:90:d8:9a:01:bb:e4:fa:f8:29: 28:17:92:ff:de:b5:87:44:95:bb:b6:35:0b:cc:5c:13:c8:9b: 17:9e:09:c8:0e:e9:39:0a:6d:4c:2e:e6:78:c6:61:69:16:fc: a3:63:30:0b:e9:b2:df:d8:e8:eb:1a:8e:b6:a9:05:2f:84:ec: de:be:4e:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1lFRnaIE37KIrR2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NmQ0YTM2YzktNzRkYi00MmE5LTgwZWMtNmE3ZDY1OGY1MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LWVkChmnkq/dPFcziaf4M0TOowLpnn4TUe IjcCt1okEvDyO+BWxiDnafVG3wFmxdeMuu7lu2iRT7CEH3t81GhHiPeMSu/+F9/B af4GHN5RkW7LNvfssu4Gv96kueZMd+B1sfgd2XOqOUQH9Zwh5/gPonNyUwwJX+hi OR/O3ydYnGfRumd18e+nz2qQ6mOqQd+eDwvyTCEvvMsTds/OaJUL5GRRBflqcM2A 0lvs4TDeE4+L8j0dus3kEmbtBeQlM0zq1lzlqeeUW1KNS+TNfDhCguh0EHqYMr8p kfl8fOz2EMwnx8n3efWY5YJ4hDDxXSzhVPJNRYXm02EuW63+yQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL5nkgUHu02ZNHPjmE56SDCy+mXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMzNkYTVhMzYtYzAxNi0z NTgyLWJmNTktMGY5NzM4ZDdmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoZcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEApuFXgzKkrieao5uNd8GOKUKDKI4TH1+P77+XnQCZyP33F/aj6JmxQC9A 0fOb/JhGVvQfC6fmKA4qlTQV9NSPFsJMoYKdjCG1RBPfFwMYT90+PTgIi7Qu4d99 CLIjkvbQspbp2e/LP6iCPK9qA9PH0VezjmrREiIlyXQA89XCKBxZeV6EqQ9OYnIh h5+uIhgqfMzVYgEkmgNJs44iHVzRfkAYeWLW257TXiCiGzgH1zc2MmcOPrpz8YQ8 kDm9kNiaAbvk+vgpKBeS/961h0SVu7Y1C8xcE8ibF54JyA7pOQptTC7meMZhaRb8 o2MwC+my39jo6xqOtqkFL4Ts3r5OQQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:57 2026 by rpki-client