$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa File: 3404db15-b0e9-3f6c-9310-c35968fb799f.roa (raw, json) Hash identifier: Xp739QAfQucx4DWtwtSDRT+LzpYUatjfP5PeSiXv454= Subject key identifier: 4D:12:34:E0:13:24:9F:01:D2:73:8F:59:82:7D:51:68:27:6E:E5:DC Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584D730A7408F154D50D244FA880 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 22125 IP address blocks: 161.150.120.0/23 maxlen: 23 161.150.120.0/24 maxlen: 24 161.150.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:74:08:f1:54:d5:0d:24:4f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=33fdb004-2444-475a-8249-3a699c3ca229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:de:f1:d7:8f:26:88:06:9d:b5:ed:7b:a8: 54:48:c4:ed:a5:c2:fd:5c:23:94:32:83:57:8c:ab: 52:8c:c1:88:66:9a:06:42:98:af:fe:ea:47:48:00: 17:7e:f8:b6:9f:ea:fc:b7:0a:70:ce:2f:8e:6b:14: 1a:2c:e7:41:4a:b7:5b:a9:9c:f6:d5:a1:1e:6c:43: 3e:ce:da:cf:3e:b5:69:29:a2:27:b0:89:5b:3d:30: 70:31:5d:fd:c4:04:d8:2c:fd:99:01:74:b0:4a:ec: 55:a6:1c:ee:61:06:42:2f:6d:b4:46:02:3f:eb:76: 13:50:15:11:2e:02:2b:97:c3:6e:7e:48:e3:ee:0e: 5a:91:96:dd:e3:82:e1:c8:b4:a4:22:fe:3a:3c:fa: f5:57:33:01:c1:d2:ab:a5:f5:f6:bb:1d:5a:3d:7e: ab:f5:5a:e6:3c:eb:bf:81:9d:e3:2d:21:20:75:f6: 28:75:a6:1f:05:4e:de:fa:69:fd:ff:6e:12:d2:a7: 25:ed:ec:06:a9:e8:d0:1e:6c:d2:a7:3c:66:d1:64: c6:ba:e3:94:2d:ed:5c:4f:26:27:42:a3:c1:a4:57: af:1d:09:f3:d6:bd:6d:e5:81:1c:39:27:96:08:1f: a2:8a:f5:4d:a9:3c:ef:8e:80:26:31:eb:cb:55:0d: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:34:E0:13:24:9F:01:D2:73:8F:59:82:7D:51:68:27:6E:E5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:34:12:89:2c:6c:9e:0e:9b:0c:78:7c:52:e6:b8:d6:62:f2: 15:7e:0b:08:28:0a:d9:ec:0a:c4:e3:ea:3d:34:b3:4f:2c:1f: 0b:0c:d3:53:4c:84:94:39:8d:8c:23:38:10:27:24:7c:79:84: 93:dd:a3:86:05:1c:5d:16:a7:00:44:32:db:1b:a0:90:dd:dd: 61:9d:d9:7b:a3:0a:72:12:44:6f:a8:18:1a:63:85:d8:e9:23: 6e:ae:4b:29:19:60:12:cb:d1:28:1d:15:a2:4a:2a:d1:df:ad: 85:a9:b1:75:e7:60:64:70:bc:3a:e1:6b:93:7e:46:ea:ac:a5: 78:ee:18:36:71:77:f9:d0:c3:71:99:d9:c3:0b:c6:5b:d5:e0: 08:a8:db:d2:7f:01:6b:bd:e9:d5:e9:74:ce:39:8d:61:a0:0d: 0f:9d:b5:8e:7a:00:a9:92:70:7a:fc:4c:1b:cf:7c:a2:81:99: cc:ff:be:cd:8c:89:03:53:d7:c3:66:18:d8:39:cf:54:be:95: 1f:44:c0:62:27:55:1a:e1:96:58:54:a5:7a:6a:a0:ca:a5:80: 37:b9:72:25:96:0e:3a:05:32:42:1f:86:3d:f1:b5:e9:bd:50: 79:e7:71:f6:52:65:b5:ef:36:49:1a:77:5a:91:21:50:7f:47: 4f:4b:52:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCnQI8VTVDSRPqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk MzNmZGIwMDQtMjQ0NC00NzVhLTgyNDktM2E2OTljM2NhMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvHe8dePJogGnbXte6hUSMTtpcL9XCOUMoNX jKtSjMGIZpoGQpiv/upHSAAXfvi2n+r8twpwzi+OaxQaLOdBSrdbqZz21aEebEM+ ztrPPrVpKaInsIlbPTBwMV39xATYLP2ZAXSwSuxVphzuYQZCL220RgI/63YTUBUR LgIrl8Nufkjj7g5akZbd44LhyLSkIv46PPr1VzMBwdKrpfX2ux1aPX6r9VrmPOu/ gZ3jLSEgdfYodaYfBU7e+mn9/24S0qcl7ewGqejQHmzSpzxm0WTGuuOULe1cTyYn QqPBpFevHQnz1r1t5YEcOSeWCB+iivVNqTzvjoAmMevLVQ3lKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0SNOATJJ8B0nOPWYJ9UWgnbuXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMzQwNGRiMTUtYjBlOS0z ZjZjLTkzMTAtYzM1OTY4ZmI3OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoZZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ0EoksbJ4Omwx4fFLmuNZi8hV+CwgoCtnsCsTj6j00s08sHwsM01NM hJQ5jYwjOBAnJHx5hJPdo4YFHF0WpwBEMtsboJDd3WGd2XujCnISRG+oGBpjhdjp I26uSykZYBLL0SgdFaJKKtHfrYWpsXXnYGRwvDrha5N+RuqspXjuGDZxd/nQw3GZ 2cMLxlvV4Aio29J/AWu96dXpdM45jWGgDQ+dtY56AKmScHr8TBvPfKKBmcz/vs2M iQNT18NmGNg5z1S+lR9EwGInVRrhllhUpXpqoMqlgDe5ciWWDjoFMkIfhj3xtem9 UHnncfZSZbXvNkkad1qRIVB/R09LUiQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:05 2026 by rpki-client