$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa File: 0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa (raw, json) Hash identifier: Z6vpPCS2YaUJy6Vwp0vNfp0d0k+vBtC/lwbK5hv87bI= Subject key identifier: 8C:C9:EC:23:A5:D5:F4:51:1A:F7:36:E9:BD:7E:A2:A7:C0:9E:A5:8D Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584D5F7FA93567118C998D802D80 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 2581 IP address blocks: 161.203.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a9:35:67:11:8c:99:8d:80:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=2a657c03-82f0-4700-bf33-3bdf28042a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:38:e7:9c:c6:6f:83:67:06:3c:dd:24:dd: 69:69:81:85:98:a2:a7:bc:e2:11:31:f6:bf:f5:ca: b4:8c:4e:d1:19:f2:a8:59:8a:84:3e:58:b2:07:2f: 11:de:57:35:7d:99:3f:51:c9:fb:78:78:0d:29:a3: fd:bd:5b:2c:ac:62:6b:c0:d7:46:4b:12:60:a0:d7: 15:bb:7b:81:d0:ee:95:bf:df:39:ac:01:cc:e2:95: f9:32:95:9f:a3:09:22:bd:1d:60:2d:63:a6:c3:01: de:57:20:cd:05:f3:03:29:a1:34:43:f1:1a:d6:83: d5:fe:90:2d:fc:c6:50:39:bd:be:f9:e8:97:19:64: 4f:9b:ad:dd:aa:78:da:cd:c5:84:35:22:9f:ab:4f: 10:eb:2b:8e:af:15:bf:41:04:5f:a7:eb:13:05:09: 73:d0:18:2e:75:1a:12:e1:95:37:93:a9:d4:fc:40: 76:69:c1:1d:4b:c7:29:df:c0:bd:44:c1:4d:d3:b5: c9:26:89:b0:06:c4:c4:61:bd:f8:b8:74:eb:ee:49: e4:13:86:9e:de:74:a0:3e:27:55:10:b0:3c:5e:7d: 9e:61:70:4a:48:f4:d4:40:3b:1d:60:32:04:15:ea: 41:1c:10:86:d7:02:9c:39:5e:7d:df:49:4a:07:0f: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:EC:23:A5:D5:F4:51:1A:F7:36:E9:BD:7E:A2:A7:C0:9E:A5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:61:d8:84:9d:27:ed:42:4c:8b:e8:31:ec:25:fe:23:2d:84: 40:bb:a3:b8:8a:7a:ef:7c:df:ae:9b:af:34:9e:14:76:9a:2b: eb:8a:e9:29:9a:c6:fb:50:b6:94:a1:5d:ac:b0:3a:b1:3f:2d: 30:e0:59:bd:34:e7:96:a4:5b:7f:ec:5f:c5:ca:76:9b:9a:9e: ae:fa:36:42:22:f7:cf:eb:78:27:ba:56:d2:f4:b1:ac:61:26: 92:91:8a:30:03:e1:d4:0d:c6:12:96:36:95:ab:ce:68:f4:a4: 53:30:0d:a7:9e:9b:45:70:95:37:c7:b6:ab:07:00:85:5d:0e: 29:c6:2f:98:60:ef:75:4b:11:69:a1:23:88:d3:89:94:e5:74: 92:20:a8:f2:36:c4:e9:5a:1a:b5:76:6f:21:18:67:d1:86:9d: bf:5b:ac:10:97:d7:6a:bb:56:a7:7d:ae:ea:b4:ea:65:72:8e: 52:12:23:97:01:5c:8b:79:a8:16:5f:36:2b:70:9e:cf:2d:34: e0:e8:af:78:51:26:b3:50:75:a7:eb:3d:5d:f2:24:3f:31:c8: fe:8d:27:7b:e5:16:dd:4f:d6:3f:f1:22:d9:11:86:07:d7:a3: 71:36:bc:c9:a5:97:fc:11:cb:28:21:81:20:a3:ec:e9:78:16: 28:1f:18:a1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1ff6k1ZxGMmY2ALYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MmE2NTdjMDMtODJmMC00NzAwLWJmMzMtM2JkZjI4MDQyYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGM455zGb4NnBjzdJN1paYGFmKKnvOIRMfa/ 9cq0jE7RGfKoWYqEPliyBy8R3lc1fZk/Ucn7eHgNKaP9vVssrGJrwNdGSxJgoNcV u3uB0O6Vv985rAHM4pX5MpWfowkivR1gLWOmwwHeVyDNBfMDKaE0Q/Ea1oPV/pAt /MZQOb2++eiXGWRPm63dqnjazcWENSKfq08Q6yuOrxW/QQRfp+sTBQlz0BgudRoS 4ZU3k6nU/EB2acEdS8cp38C9RMFN07XJJomwBsTEYb34uHTr7knkE4ae3nSgPidV ELA8Xn2eYXBKSPTUQDsdYDIEFepBHBCG1wKcOV5930lKBw+74QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIzJ7COl1fRRGvc26b1+oqfAnqWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvMGM0YTYyMDAtNWZmYS0z YTJiLThiN2EtOWRkMzQzMWY4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAocswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAY2HYhJ0n7UJMi+gx7CX+Iy2EQLujuIp673zfrpuvNJ4Udpor64rpKZrG +1C2lKFdrLA6sT8tMOBZvTTnlqRbf+xfxcp2m5qervo2QiL3z+t4J7pW0vSxrGEm kpGKMAPh1A3GEpY2lavOaPSkUzANp56bRXCVN8e2qwcAhV0OKcYvmGDvdUsRaaEj iNOJlOV0kiCo8jbE6VoatXZvIRhn0Yadv1usEJfXartWp32u6rTqZXKOUhIjlwFc i3moFl82K3Cezy004OiveFEms1B1p+s9XfIkPzHI/o0ne+UW3U/WP/Ei2RGGB9ej cTa8yaWX/BHLKCGBIKPs6XgWKB8YoQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:45 2026 by rpki-client