$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa File: d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa (raw, json) Hash identifier: 91tCMGlzCBVQ6R1WxAYOHj4Brr5FwCwazcnIzj09F0M= Subject key identifier: BF:55:33:17:B6:60:E1:83:72:0F:2E:24:57:B1:95:81:40:56:DD:BC Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584D6515154FDC4D48342A242C00 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 52347 IP address blocks: 162.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:15:4f:dc:4d:48:34:2a:24:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=4c80ffc3-bf60-4845-8e68-47f0787b3abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:61:b4:27:ec:27:08:bc:12:47:74:41:c8: 3a:90:3b:03:93:48:a4:c9:89:58:0e:71:95:98:1a: 53:f6:54:c2:38:5b:df:b9:16:8f:97:e4:2d:7c:77: dd:01:9b:57:84:e2:53:e4:b6:03:5e:5e:ef:a8:c9: 69:79:42:f7:f2:bd:86:db:2a:97:c5:13:ae:8d:96: e8:2c:51:70:70:01:bf:4d:de:60:ec:52:27:dc:79: 59:f3:24:47:00:f6:ec:91:73:a7:bb:6f:e5:a6:7e: 73:5d:b0:49:8f:96:64:51:fc:12:77:44:51:47:97: b1:88:f4:b0:cd:a6:ec:e5:4e:da:78:73:d3:66:09: 99:e9:5c:82:ea:8a:c0:c0:77:fd:de:90:eb:e1:d2: c8:a5:b3:8d:e0:4c:56:2f:d1:8c:2c:a2:2c:1c:25: ce:b3:ad:06:65:cc:07:ad:12:91:35:5e:91:82:2f: fb:6c:1a:c9:88:c1:85:48:6d:2c:59:7e:1b:50:5f: 6c:c9:eb:2d:d7:b1:3b:bf:90:a4:43:ae:db:99:5b: e3:2d:03:eb:b7:3b:c5:a6:37:23:21:a1:45:90:98: ca:a0:43:5c:c5:95:a5:fa:4e:27:6e:4e:c1:8b:07: 6b:af:3e:14:58:de:82:78:f2:0e:1e:85:cd:ab:4b: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:55:33:17:B6:60:E1:83:72:0F:2E:24:57:B1:95:81:40:56:DD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:27:88:b9:94:bc:c5:57:b5:50:53:80:45:b3:f1:e8:94:89: 71:38:06:d8:be:ab:20:84:95:d3:42:20:85:fe:27:e3:2c:9d: f6:4a:eb:0e:21:3f:4f:77:93:66:9e:0f:48:28:06:2c:4d:ad: 5b:ad:08:b3:1c:5d:a6:c1:ed:2a:a0:e8:1e:72:13:d4:3d:e2: 39:e9:5a:23:15:83:ba:fa:2a:56:50:91:b4:3a:fe:71:1c:86: 58:78:12:67:0e:e2:59:87:41:e1:c0:92:c0:3f:96:69:64:49: c6:8d:c9:27:00:59:fb:d5:e1:6d:ec:13:99:ed:cf:13:1e:f2: 80:e7:50:09:a6:3a:af:62:b0:01:32:28:6e:02:93:dd:c4:f4: e7:7a:23:4f:73:e7:33:fe:8b:4b:a5:f7:29:df:93:b6:a6:c9: a5:f3:13:bf:cb:26:46:fb:9d:44:a4:61:f3:77:53:ff:98:0a: 9e:56:93:21:b3:de:80:e8:f2:ac:50:40:7a:df:98:01:a5:6d: 92:74:27:21:36:36:d5:07:45:d1:82:22:68:13:71:a3:5e:05: fd:eb:96:97:22:87:77:f6:2a:58:08:82:e2:f7:80:e6:74:3a: dd:ea:c0:82:04:c1:86:05:fd:f6:3a:6b:11:fb:06:5b:4a:9d: 81:d2:90:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRVP3E1INCokLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NGM4MGZmYzMtYmY2MC00ODQ1LThlNjgtNDdmMDc4N2IzYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSdhtCfsJwi8Ekd0Qcg6kDsDk0ikyYlYDnGV mBpT9lTCOFvfuRaPl+QtfHfdAZtXhOJT5LYDXl7vqMlpeUL38r2G2yqXxROujZbo LFFwcAG/Td5g7FIn3HlZ8yRHAPbskXOnu2/lpn5zXbBJj5ZkUfwSd0RRR5exiPSw zabs5U7aeHPTZgmZ6VyC6orAwHf93pDr4dLIpbON4ExWL9GMLKIsHCXOs60GZcwH rRKRNV6Rgi/7bBrJiMGFSG0sWX4bUF9syest17E7v5CkQ67bmVvjLQPrtzvFpjcj IaFFkJjKoENcxZWl+k4nbk7Biwdrrz4UWN6CePIOHoXNq0vevwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9VMxe2YOGDcg8uJFexlYFAVt28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZDg2NmRjYjQtN2JiMC0z Mzg1LWEzMDQtZTZkN2MzNTg4YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgniLmUvMVXtVBTgEWz8eiUiXE4Bti+qyCEldNCIIX+J+MsnfZK6w4h P093k2aeD0goBixNrVutCLMcXabB7Sqg6B5yE9Q94jnpWiMVg7r6KlZQkbQ6/nEc hlh4EmcO4lmHQeHAksA/lmlkScaNyScAWfvV4W3sE5ntzxMe8oDnUAmmOq9isAEy KG4Ck93E9Od6I09z5zP+i0ul9ynfk7amyaXzE7/LJkb7nUSkYfN3U/+YCp5WkyGz 3oDo8qxQQHrfmAGlbZJ0JyE2NtUHRdGCImgTcaNeBf3rlpcih3f2KlgIguL3gOZ0 Ot3qwIIEwYYF/fY6axH7BltKnYHSkAA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:24 2026 by rpki-client