$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa File: fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa (raw, json) Hash identifier: GlAExvKdOP1zd2rQnxn7/hF5ytHsDt104dLVSh6pUGE= Subject key identifier: 90:B5:C8:E0:F7:E2:B0:48:14:9B:D9:DA:06:B6:60:37:89:CA:7B:6D Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584D5F7FA8FFBAF67D0BC551D980 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 209 IP address blocks: 161.203.14.0/23 maxlen: 23 161.203.16.0/23 maxlen: 23 161.203.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a8:ff:ba:f6:7d:0b:c5:51:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=ea7cb52d-fb47-437f-aea4-3277343af90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:cc:c5:9f:00:cb:12:26:ff:d1:73:5b:0c: 0a:30:10:1e:76:a5:fa:5e:a9:d1:fa:0f:8b:60:94: 09:dc:e3:da:0c:4f:4a:4b:17:8a:31:61:73:0e:04: 32:04:2e:6b:d5:af:95:61:dc:a2:40:0d:90:bb:cc: 5e:82:a0:b2:84:fb:be:1f:d1:20:fe:d7:5c:3d:c2: 60:97:9c:84:5e:3f:e1:39:7d:a4:f2:6c:20:28:ba: 01:c1:66:f4:12:7f:fa:25:49:96:7a:bb:3b:c7:bb: c7:83:c1:ba:89:9e:c0:a9:0f:23:f0:94:71:24:c6: bd:7b:8e:ab:d4:ef:a2:f7:3a:53:a6:24:c2:4d:b4: 77:6a:9e:5e:e8:c3:d2:77:b7:d3:b4:15:d9:a8:e8: e8:a8:73:1b:0a:13:a2:71:76:af:38:e5:b8:69:69: c9:ef:6a:cb:c2:22:8d:a9:fa:8e:22:b4:79:26:84: 40:60:dc:63:14:10:40:9c:72:e3:d8:8b:72:5c:b7: e3:e3:c9:70:97:04:64:7f:80:8b:d1:5f:8b:24:92: a4:18:e2:fe:da:09:55:8e:47:56:58:6c:ec:b7:3b: 6e:ef:e2:d2:32:45:85:eb:06:85:6d:55:e4:24:94: 99:84:ae:0a:f4:2e:7c:a9:3d:39:39:d1:a1:41:18: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B5:C8:E0:F7:E2:B0:48:14:9B:D9:DA:06:B6:60:37:89:CA:7B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.14.0-161.203.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:24:5e:75:3a:0a:07:db:f3:9d:63:6f:4a:98:81:c6:11:d2: b2:c7:45:d4:2b:a5:d0:10:51:09:20:8a:bf:ae:9d:aa:44:9f: 35:ae:db:e0:82:6e:df:da:f4:2d:85:25:63:d9:1f:9e:ba:a7: e3:41:8d:f0:33:3e:43:25:68:ba:5c:ef:f1:62:51:58:6d:4c: 97:fa:6d:cd:ab:2d:e3:a8:b8:27:c9:29:10:cc:a7:0f:75:f2: 34:8e:d0:b4:e4:2d:b1:91:e5:e8:3a:1a:dd:16:2b:3c:0d:46: 29:74:30:71:6d:80:0d:5a:61:d4:48:77:59:74:3d:3d:64:9f: a9:33:ac:56:b5:a7:cd:76:3f:5b:21:fb:c2:8f:97:e4:69:40: 3f:5c:ec:b1:62:3f:93:be:83:11:17:d2:70:b0:07:73:1c:06: 60:ce:bb:f3:f7:52:3f:b9:e5:ba:9d:1c:82:79:b4:c2:15:3e: 44:79:5b:78:e4:29:31:31:9b:ba:5c:1d:1c:7d:eb:b9:5b:c9: 09:ab:b5:2b:00:a0:92:e1:7f:91:32:99:a8:9e:4e:3a:35:d7: e0:1d:18:5c:5d:59:c6:c2:ef:80:89:28:30:02:a9:ef:51:0e: a0:37:35:94:33:82:b9:f7:03:fe:84:72:34:eb:82:5a:9e:f0: 0b:5f:8c:10 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1ff6j/uvZ9C8VR2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZWE3Y2I1MmQtZmI0Ny00MzdmLWFlYTQtMzI3NzM0M2FmOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwbMxZ8AyxIm/9FzWwwKMBAedqX6XqnR+g+L YJQJ3OPaDE9KSxeKMWFzDgQyBC5r1a+VYdyiQA2Qu8xegqCyhPu+H9Eg/tdcPcJg l5yEXj/hOX2k8mwgKLoBwWb0En/6JUmWers7x7vHg8G6iZ7AqQ8j8JRxJMa9e46r 1O+i9zpTpiTCTbR3ap5e6MPSd7fTtBXZqOjoqHMbChOicXavOOW4aWnJ72rLwiKN qfqOIrR5JoRAYNxjFBBAnHLj2ItyXLfj48lwlwRkf4CL0V+LJJKkGOL+2glVjkdW WGzstztu7+LSMkWF6waFbVXkJJSZhK4K9C58qT05OdGhQRje+wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJC1yOD34rBIFJvZ2ga2YDeJynttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvZmE2YTVlZTctZmYzZS0z YzlhLTk1ZGYtZjQ1ZmQ0MzYzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGhyw4D BAKhyxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMyRedToKB9vznWNvSpiBxhHSssdF1Cul0BBRCSCKv66d qkSfNa7b4IJu39r0LYUlY9kfnrqn40GN8DM+QyVoulzv8WJRWG1Ml/ptzast46i4 J8kpEMynD3XyNI7QtOQtsZHl6Doa3RYrPA1GKXQwcW2ADVph1Eh3WXQ9PWSfqTOs VrWnzXY/WyH7wo+X5GlAP1zssWI/k76DERfScLAHcxwGYM678/dSP7nlup0cgnm0 whU+RHlbeOQpMTGbulwdHH3ruVvJCau1KwCgkuF/kTKZqJ5OOjXX4B0YXF1ZxsLv gIkoMAKp71EOoDc1lDOCufcD/oRyNOuCWp7wC1+MEA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:41 2026 by rpki-client