$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/54a88472-270e-315a-aa46-e66e78a52e9d.roa File: 54a88472-270e-315a-aa46-e66e78a52e9d.roa (raw, json) Hash identifier: 1UA7kNYJ3nfCsFqEp7m1E0TVWXfZIPgSVdaQiLzmGK4= Subject key identifier: 06:41:1F:7E:8E:88:72:E2:D4:B4:74:4D:05:AC:0F:41:78:C9:0E:5A Certificate issuer: /CN=fbd0620c-9989-4147-9e69-5c9cef88b718 Certificate serial: 010D0C9F4328584D624A5D062C33EA4EAA264300 Authority key identifier: 86:03:87:30:DB:B5:7F:F9:9B:D4:A9:0C:FA:7C:6F:2B:B8:D3:45:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/54a88472-270e-315a-aa46-e66e78a52e9d.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 401716 IP address blocks: 161.108.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/fbd0620c-9989-4147-9e69-5c9cef88b718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/fbd0620c-9989-4147-9e69-5c9cef88b718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5d:06:2c:33:ea:4e:aa:26:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd0620c-9989-4147-9e69-5c9cef88b718 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=06140d1f-7cb5-4d6f-a30d-b816e47e1a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:82:c4:92:53:0a:0b:6d:85:ff:f6:3f:de: dc:0e:a9:ab:a3:da:85:c7:ba:4a:b8:b6:c8:e8:e8: 4b:e9:96:fc:69:75:62:59:e2:e9:e8:fb:d9:92:55: 7a:24:0a:69:0a:58:29:33:75:3c:d4:34:73:7c:14: 2b:c7:aa:0c:a1:28:ca:f6:ab:0e:cb:7b:b9:6c:9e: 37:79:18:7b:f4:5a:be:40:2d:2e:47:72:43:4f:31: 4e:c6:9a:01:70:ab:47:ad:40:53:2d:b0:72:84:59: cf:92:73:d2:5d:64:11:ea:da:95:13:5e:2a:37:49: f1:7e:0f:c8:29:a6:f1:ac:17:fb:94:f4:02:09:47: 7b:cb:06:62:7e:8b:0d:3d:1a:2b:d8:cb:f8:d9:dd: f3:2c:cb:05:86:13:56:bb:27:dd:d3:ea:72:ad:75: 37:92:8d:18:ab:2c:7f:eb:92:03:94:10:24:ce:b8: df:a7:c8:21:6a:02:e0:6f:1c:3a:a6:d5:98:7f:da: 25:50:c9:63:c8:a2:87:13:cb:95:3a:29:7a:6e:74: 56:93:f8:c0:d6:b0:6d:44:6d:34:4e:0f:b8:19:62: 44:ea:31:48:61:ff:10:8d:f1:0a:cb:90:a8:d2:37: 80:4f:cd:a9:64:98:6b:28:50:b2:44:16:cd:67:34: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:41:1F:7E:8E:88:72:E2:D4:B4:74:4D:05:AC:0F:41:78:C9:0E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/54a88472-270e-315a-aa46-e66e78a52e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/fbd0620c-9989-4147-9e69-5c9cef88b718.crl X509v3 Authority Key Identifier: keyid:86:03:87:30:DB:B5:7F:F9:9B:D4:A9:0C:FA:7C:6F:2B:B8:D3:45:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718.cer sbgp-ipAddrBlock: critical IPv4: 161.108.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d5:86:3c:81:6a:0f:fc:b3:80:1f:b3:f6:1a:aa:bd:d4:52: ba:d6:ea:53:fc:e2:61:d2:b1:d8:86:7e:61:93:0b:28:af:0a: 4d:8d:60:33:82:0d:4f:78:de:41:ff:3c:de:08:a4:53:5b:aa: d9:c2:5e:16:11:9e:72:cb:dd:39:63:eb:63:46:fe:3b:a1:ed: f5:71:59:a3:c6:22:f1:cd:5b:a4:c8:48:36:36:37:be:b9:55: 0a:e0:99:19:b4:df:ce:54:e0:2c:19:62:62:7d:50:9e:cc:1b: dd:39:8a:97:16:ee:27:41:4c:b3:0b:b5:5c:d3:4a:0d:84:96: 57:b1:60:b2:42:55:ef:f6:fd:45:d0:ce:f3:bc:f7:d4:1c:e3: 23:c1:61:88:82:37:14:94:6e:47:a0:cb:eb:d6:39:91:cc:eb: 44:0b:2a:49:61:ed:06:a3:b4:46:37:b3:e4:39:52:66:23:96: 40:a9:06:73:6d:86:81:a7:42:e7:76:e4:84:fa:83:d6:7f:b2: 49:2a:fe:bc:9e:7f:7f:58:ae:66:b6:c9:b6:12:6c:2d:8b:89: 3f:cd:e3:4e:04:71:b4:d2:eb:69:de:2b:ca:ad:4a:43:3c:27: 3b:50:ec:8a:71:87:90:72:65:14:f7:40:4c:4c:e8:96:25:e0: 65:19:83:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSl0GLDPqTqomQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJkMDYyMGMtOTk4OS00MTQ3LTllNjktNWM5Y2VmODhi NzE4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk MDYxNDBkMWYtN2NiNS00ZDZmLWEzMGQtYjgxNmU0N2UxYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TaCxJJTCgtthf/2P97cDqmro9qFx7pKuLbI 6OhL6Zb8aXViWeLp6PvZklV6JAppClgpM3U81DRzfBQrx6oMoSjK9qsOy3u5bJ43 eRh79Fq+QC0uR3JDTzFOxpoBcKtHrUBTLbByhFnPknPSXWQR6tqVE14qN0nxfg/I KabxrBf7lPQCCUd7ywZifosNPRor2Mv42d3zLMsFhhNWuyfd0+pyrXU3ko0Yqyx/ 65IDlBAkzrjfp8ghagLgbxw6ptWYf9olUMljyKKHE8uVOil6bnRWk/jA1rBtRG00 Tg+4GWJE6jFIYf8QjfEKy5Co0jeAT82pZJhrKFCyRBbNZzSNzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZBH36OiHLi1LR0TQWsD0F4yQ5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmQw NjIwYy05OTg5LTQxNDctOWU2OS01YzljZWY4OGI3MTgvNTRhODg0NzItMjcwZS0z MTVhLWFhNDYtZTY2ZTc4YTUyZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJkMDYyMGMtOTk4OS00MTQ3LTll NjktNWM5Y2VmODhiNzE4L2ZiZDA2MjBjLTk5ODktNDE0Ny05ZTY5LTVjOWNlZjg4 YjcxOC5jcmwwHwYDVR0jBBgwFoAUhgOHMNu1f/mb1KkM+nxvK7jTRSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmQwNjIwYy05OTg5LTQxNDctOWU2OS01Yzlj ZWY4OGI3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoWymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3VhjyBag/8s4Afs/Yaqr3UUrrW6lP84mHSsdiGfmGTCyivCk2NYDOC DU943kH/PN4IpFNbqtnCXhYRnnLL3Tlj62NG/juh7fVxWaPGIvHNW6TISDY2N765 VQrgmRm0385U4CwZYmJ9UJ7MG905ipcW7idBTLMLtVzTSg2EllexYLJCVe/2/UXQ zvO899Qc4yPBYYiCNxSUbkegy+vWOZHM60QLKklh7QajtEY3s+Q5UmYjlkCpBnNt hoGnQud25IT6g9Z/skkq/ryef39Yrma2ybYSbC2LiT/N404EcbTS62neK8qtSkM8 JztQ7Ipxh5ByZRT3QExM6JYl4GUZg9U= -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:45 2026 by rpki-client