$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa File: 368a512c-e23e-3f44-82ee-4544cde2afd8.roa (raw, json) Hash identifier: pzA0ZnktO++diNaqdnCBV2TT7TAd7btqGF1EUKUC8Ds= Subject key identifier: 0C:91:BF:D2:E0:8A:AE:B0:BE:FD:61:37:54:B1:A1:F7:1D:1F:74:0F Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584D7748042199DF44CB70A22500 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa Signing time: Sat 11 Apr 2026 01:27:52 +0000 ROA not before: Sat 11 Apr 2026 01:27:52 +0000 ROA not after: Fri 10 Jul 2026 01:27:52 +0000 asID: 22616 IP address blocks: 161.151.200.0/22 maxlen: 24 161.151.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:48:04:21:99:df:44:cb:70:a2:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Apr 11 01:27:52 2026 GMT Not After : Jul 10 01:27:52 2026 GMT Subject: CN=b4775dcb-7f2e-44a3-bc0a-453507c78426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:b4:cd:e9:9c:f6:13:39:44:a6:79:d7:5e: 98:01:fb:5b:d7:81:9a:19:77:ae:27:e0:f8:86:85: 2f:f1:f3:a6:12:07:9c:06:5f:c1:4f:8e:99:f7:ba: 8b:e8:df:be:3d:0a:65:c3:83:7c:9d:af:1d:b5:f2: ba:5a:70:40:67:df:b1:3f:cf:66:86:26:34:3e:ca: c9:30:37:ce:22:8c:cb:af:c9:d7:3b:bc:61:99:42: 63:fa:4f:59:14:3c:b5:c9:6a:4b:1d:58:53:30:51: bf:ab:8c:c3:b5:c2:75:c3:bd:35:ef:36:02:b4:3b: 49:c0:a0:6a:c4:54:b7:a5:2b:f7:c2:39:10:4d:e7: b7:17:57:59:fa:51:a7:a0:a3:10:71:1b:c1:ca:f0: 52:f0:e3:ba:f4:63:98:f5:e2:ca:a4:53:ca:6f:12: 00:91:9c:5f:e5:45:a7:2a:58:46:73:6d:a2:95:eb: c1:32:da:92:39:6f:7a:cd:00:a9:14:e6:01:7b:f0: e9:67:7f:f1:53:35:cb:92:ec:24:c6:44:d6:7d:53: 3e:e2:8b:2b:ba:fa:23:31:b2:45:2d:6a:c7:92:59: 45:de:ac:2e:23:d7:82:32:d4:d5:5e:22:88:e2:cd: fc:f0:80:52:3b:30:cd:6a:f0:97:c7:51:f0:ae:4e: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:BF:D2:E0:8A:AE:B0:BE:FD:61:37:54:B1:A1:F7:1D:1F:74:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.200.0/22 161.151.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ee:5e:e4:3e:7a:a1:40:03:09:79:35:8b:c2:ca:73:0b:dc: 52:80:b8:d5:7f:41:21:6e:91:e5:79:db:18:fc:98:92:ea:d1: 5c:89:d0:6e:ac:3a:de:9d:dd:cc:79:14:94:5b:40:a6:2c:3e: 3b:d1:e3:64:d8:24:45:d1:47:f5:01:70:c9:2f:c7:46:a5:54: 90:6e:87:9b:db:d1:a8:4c:1a:46:e1:b0:f7:d8:2d:10:74:19: cd:f7:a5:80:2a:aa:53:c0:70:e8:bf:0d:d6:32:16:2c:b9:02: ce:53:fc:d8:9a:a1:78:73:35:76:2a:50:c3:32:c6:61:9c:86: e9:a3:d9:06:c4:16:74:6b:35:cf:48:c7:71:b1:a5:7e:15:c7: 9e:a3:e5:36:94:6f:2c:d7:a6:26:28:30:1c:6b:39:18:35:2a: c2:48:89:f9:4f:96:c9:f8:bc:0b:33:29:5b:9a:e8:7d:a6:43: 45:b3:b3:86:ae:6b:74:e7:dc:7c:9c:9c:2c:ae:05:dd:42:88: 9a:5d:49:8f:e8:8c:76:6d:76:8b:c3:58:9b:14:88:00:bf:8c: cb:e8:7e:c6:a5:57:31:41:9f:00:f5:62:39:8f:05:79:de:01: fc:a5:65:87:4a:00:2e:02:5a:1e:33:bf:c9:e1:f7:69:b3:3b: f0:b2:ce:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE13SAQhmd9Ey3CiJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDQxMTAxMjc1MloXDTI2MDcxMDAxMjc1MlowLzEtMCsGA1UEAxMk YjQ3NzVkY2ItN2YyZS00NGEzLWJjMGEtNDUzNTA3Yzc4NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOS0zemc9hM5RKZ5116YAftb14GaGXeuJ+D4 hoUv8fOmEgecBl/BT46Z97qL6N++PQplw4N8na8dtfK6WnBAZ9+xP89mhiY0PsrJ MDfOIozLr8nXO7xhmUJj+k9ZFDy1yWpLHVhTMFG/q4zDtcJ1w7017zYCtDtJwKBq xFS3pSv3wjkQTee3F1dZ+lGnoKMQcRvByvBS8OO69GOY9eLKpFPKbxIAkZxf5UWn KlhGc22ilevBMtqSOW96zQCpFOYBe/DpZ3/xUzXLkuwkxkTWfVM+4osruvojMbJF LWrHkllF3qwuI9eCMtTVXiKI4s388IBSOzDNavCXx1Hwrk4E5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAyRv9Lgiq6wvv1hN1SxofcdH3QPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMzY4YTUxMmMtZTIzZS0z ZjQ0LTgyZWUtNDU0NGNkZTJhZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoZfIAwQB oZfsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC/uXuQ+eqFAAwl5NYvCynML3FKAuNV/QSFukeV52xj8mJLq 0VyJ0G6sOt6d3cx5FJRbQKYsPjvR42TYJEXRR/UBcMkvx0alVJBuh5vb0ahMGkbh sPfYLRB0Gc33pYAqqlPAcOi/DdYyFiy5As5T/NiaoXhzNXYqUMMyxmGchumj2QbE FnRrNc9Ix3GxpX4Vx56j5TaUbyzXpiYoMBxrORg1KsJIiflPlsn4vAszKVua6H2m Q0Wzs4aua3Tn3HycnCyuBd1CiJpdSY/ojHZtdovDWJsUiAC/jMvofsalVzFBnwD1 YjmPBXneAfylZYdKAC4CWh4zv8nh92mzO/Cyziw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:28:59 2026 by rpki-client