$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa File: b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa (raw, json) Hash identifier: p3ymo+NYOXT/hGF6pJ+xfyzKDwBUyjTnJTZYeYVwnJs= Subject key identifier: 88:DE:7E:E8:6E:CB:D7:23:A8:B8:3D:CC:A8:1E:15:85:4C:4B:02:25 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584E104ECDC1D9DCFCC2F4DB6150 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 16570 IP address blocks: 164.153.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:cd:c1:d9:dc:fc:c2:f4:db:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=f8cf1629-9ece-4c7c-9717-a3354eb7c816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:d2:9e:76:30:43:5b:75:7b:dd:eb:e9:86: 77:3f:71:38:79:02:1f:77:99:26:b8:f5:2f:59:85: 69:17:69:4c:9b:34:2b:2b:d0:e8:a6:07:3c:3b:49: fd:5f:69:4a:92:21:c5:70:63:61:05:11:e4:60:8f: 26:72:45:78:36:43:c2:29:70:d5:54:f8:46:75:4b: 64:dc:40:8f:e5:a7:22:ea:c5:6d:3e:18:12:dd:48: 8e:18:d1:0f:a8:27:50:42:1d:47:97:f2:41:95:6c: c3:3d:f5:29:6c:b4:32:c0:c1:34:4d:61:c0:dc:ae: ed:e0:29:93:be:b5:47:1a:d6:94:67:c2:ff:e2:99: 8e:f2:e6:18:62:3b:ff:55:d8:93:64:ac:95:58:e4: 9d:11:cd:59:fa:e3:c7:e2:bd:1c:46:c4:f2:0e:7e: e4:94:1e:90:77:25:04:1e:87:0e:74:c9:bc:14:a6: c6:ea:4f:76:56:41:87:99:22:bb:6e:e2:1b:5d:67: 36:d8:36:e4:22:bc:4c:3d:08:36:00:e1:4c:83:bd: d3:9e:0a:7e:ca:9e:8f:9f:9b:5d:54:8e:24:9d:4c: ed:3b:ea:46:48:5c:fe:d0:9a:ed:a8:a9:3e:71:1b: 88:79:c1:82:0f:21:2d:c2:78:8b:02:e4:93:de:82: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DE:7E:E8:6E:CB:D7:23:A8:B8:3D:CC:A8:1E:15:85:4C:4B:02:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:9c:11:25:59:81:ad:64:14:a9:71:30:a2:7e:81:62:c7:81: 46:f8:39:36:f0:a6:98:2a:f4:cf:e3:57:03:46:48:97:bd:6f: 8e:a0:a2:43:e8:33:bc:8c:10:0c:8a:8e:0a:6a:c6:3b:ab:0d: 22:11:b5:12:97:ff:4b:77:d1:66:eb:c3:ea:d3:e9:b2:6d:ad: f2:27:4a:ff:eb:8a:da:df:ff:65:a0:3e:1e:9e:10:56:46:f5: 1b:34:c6:a8:68:16:11:da:a3:ae:24:2e:b9:23:22:f2:c2:3a: 8e:72:d4:d7:8b:ce:b8:8a:41:0a:da:d6:34:4d:99:92:b5:ca: 03:44:51:75:77:f6:c5:13:c7:9e:52:44:81:5a:05:8b:1a:18: 56:e2:c8:ad:20:17:93:34:3a:35:f4:94:6c:0e:ff:b5:f8:d4: 69:53:e4:6c:4f:ea:95:27:ce:0e:99:46:4a:a0:3e:d2:46:7c: 7c:50:da:32:ec:05:80:59:d8:c7:d4:ca:a5:83:e6:b1:b5:3f: 5d:a0:06:73:28:3d:8d:3b:9e:de:f0:45:4a:dc:67:d1:fe:e5: 69:8b:89:76:9e:0f:f0:36:6a:79:7d:f0:a5:ad:c6:f4:96:c7: a5:44:2b:f5:35:ee:99:e2:c6:68:e6:84:ca:70:21:be:09:ed: 27:00:d2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTs3B2dz8wvTbYVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjhjZjE2MjktOWVjZS00YzdjLTk3MTctYTMzNTRlYjdjODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE3SnnYwQ1t1e93r6YZ3P3E4eQIfd5kmuPUv WYVpF2lMmzQrK9Dopgc8O0n9X2lKkiHFcGNhBRHkYI8mckV4NkPCKXDVVPhGdUtk 3ECP5aci6sVtPhgS3UiOGNEPqCdQQh1Hl/JBlWzDPfUpbLQywME0TWHA3K7t4CmT vrVHGtaUZ8L/4pmO8uYYYjv/VdiTZKyVWOSdEc1Z+uPH4r0cRsTyDn7klB6QdyUE HocOdMm8FKbG6k92VkGHmSK7buIbXWc22DbkIrxMPQg2AOFMg73Tngp+yp6Pn5td VI4knUztO+pGSFz+0JrtqKk+cRuIecGCDyEtwniLAuST3oL/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjefuhuy9cjqLg9zKgeFYVMSwIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYjJkZTVkYTItZTYyZS0z ZDc4LWJkOTItMGYxYjFiNDIwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWcESVZga1kFKlxMKJ+gWLHgUb4OTbwppgq9M/jVwNGSJe9b46gokPo M7yMEAyKjgpqxjurDSIRtRKX/0t30Wbrw+rT6bJtrfInSv/ritrf/2WgPh6eEFZG 9Rs0xqhoFhHao64kLrkjIvLCOo5y1NeLzriKQQra1jRNmZK1ygNEUXV39sUTx55S RIFaBYsaGFbiyK0gF5M0OjX0lGwO/7X41GlT5GxP6pUnzg6ZRkqgPtJGfHxQ2jLs BYBZ2MfUyqWD5rG1P12gBnMoPY07nt7wRUrcZ9H+5WmLiXaeD/A2anl98KWtxvSW x6VEK/U17pnixmjmhMpwIb4J7ScA0ic= -----END CERTIFICATE-----Generated at Sat Jun 13 08:35:40 2026 by rpki-client