$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa File: 67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa (raw, json) Hash identifier: H30ghaRDFHIeMcDI5Br+qdM6Ox63qHSN3Gb3PmsvLsg= Subject key identifier: 20:82:05:A8:A9:9B:69:2E:22:B5:3B:F1:4F:75:B4:8B:77:54:18:80 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584DF6E791D0E39507732F009600 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa Signing time: Tue 26 May 2026 18:37:01 +0000 ROA not before: Tue 26 May 2026 18:37:01 +0000 ROA not after: Mon 24 Aug 2026 18:37:01 +0000 asID: 31898 IP address blocks: 162.210.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:e7:91:d0:e3:95:07:73:2f:00:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: May 26 18:37:01 2026 GMT Not After : Aug 24 18:37:01 2026 GMT Subject: CN=5eb6d963-4d77-4291-b4fa-164d05f3c437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:df:6f:83:d9:14:29:b8:4d:4a:e3:fe:b6: ce:42:8f:20:00:5d:67:46:d5:90:0d:fb:cf:17:c7: 65:1c:83:5f:4f:11:37:71:a8:f2:55:f1:36:fc:d8: 07:a6:70:91:9c:e5:2c:3f:d5:da:6e:79:21:f6:91: ce:71:92:fc:1e:40:90:d7:83:cc:ae:15:c1:14:5c: 44:c1:39:59:88:86:28:9d:3f:da:c8:ee:f1:91:f9: 68:b1:04:1d:be:67:e3:c1:eb:a3:d7:0a:28:d0:5f: eb:62:31:69:66:a7:a3:6d:ba:cc:bc:0e:73:e6:f6: d3:75:ea:f6:e5:87:09:48:af:7a:b4:2a:00:c4:17: 1b:f8:3a:76:54:42:af:e5:00:93:4c:4e:86:e2:7e: 2b:e5:58:51:9a:4f:69:89:6d:47:d0:d1:10:99:d1: d4:ac:27:75:a3:c2:94:c3:5c:12:16:4e:da:8e:eb: 47:6a:56:fa:0a:55:54:98:ad:7e:9c:26:cb:5b:07: 3e:34:56:4d:50:a5:e4:02:aa:f7:45:dd:05:b6:fa: 60:82:8b:e4:50:61:04:25:56:00:d3:b6:5a:55:74: 45:a0:45:76:e5:23:54:8c:bb:52:7f:22:90:45:fe: 3f:c5:c2:6f:bf:9e:a9:d8:20:d3:9b:a0:fb:f1:a2: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:05:A8:A9:9B:69:2E:22:B5:3B:F1:4F:75:B4:8B:77:54:18:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.210.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:93:9e:01:34:9d:0d:73:2f:e6:d9:a5:e8:76:04:e7:91:4f: 31:46:8e:27:a7:ec:a3:83:67:66:43:73:76:b0:19:1f:89:c1: c8:23:44:76:a1:d3:fa:4c:69:40:0d:15:bc:42:54:58:b3:e5: cd:87:37:df:0f:1d:b0:ef:8e:d9:c9:4f:18:cd:5e:18:d0:43: fe:a9:f4:ea:38:0d:ba:ca:b8:ec:85:7b:0f:6d:a1:49:36:81: 1c:a5:d9:b9:90:a6:e5:ef:b2:ac:ab:38:f1:37:ee:f5:5b:9b: c9:02:7f:27:7d:94:6d:5a:74:83:b6:bc:e9:1c:47:8c:aa:0e: a8:9d:d6:d9:38:b5:21:ec:21:48:f8:35:c2:31:7a:07:a1:19: 5a:1f:76:17:f2:70:e5:a4:3e:71:bf:53:5c:6a:e2:79:22:3b: c2:14:54:fe:1b:f2:44:1f:6b:04:60:09:22:46:49:4e:dc:0f: f9:29:31:87:fa:fd:50:8b:6a:a7:5d:9f:b4:64:62:a8:d8:9a: eb:05:8d:49:a9:7a:ac:81:d5:96:2e:c6:c0:9a:35:d0:91:a5: 48:2a:64:d3:4f:2e:3a:92:58:a9:18:46:c3:1f:02:e7:2f:f9: d1:ec:c9:5c:f4:16:47:0f:05:be:44:2f:75:88:8c:90:79:70: a9:6e:9c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3255HQ45UHcy8AlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDUyNjE4MzcwMVoXDTI2MDgyNDE4MzcwMVowLzEtMCsGA1UEAxMk NWViNmQ5NjMtNGQ3Ny00MjkxLWI0ZmEtMTY0ZDA1ZjNjNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDXfb4PZFCm4TUrj/rbOQo8gAF1nRtWQDfvP F8dlHINfTxE3cajyVfE2/NgHpnCRnOUsP9Xabnkh9pHOcZL8HkCQ14PMrhXBFFxE wTlZiIYonT/ayO7xkflosQQdvmfjweuj1woo0F/rYjFpZqejbbrMvA5z5vbTder2 5YcJSK96tCoAxBcb+Dp2VEKv5QCTTE6G4n4r5VhRmk9piW1H0NEQmdHUrCd1o8KU w1wSFk7ajutHalb6ClVUmK1+nCbLWwc+NFZNUKXkAqr3Rd0FtvpggovkUGEEJVYA 07ZaVXRFoEV25SNUjLtSfyKQRf4/xcJvv56p2CDTm6D78aJo7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCCBaipm2kuIrU78U91tIt3VBiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvNjdhOWNlMTAtNWY5YS0z Njg0LWFjYTYtM2YzNjNlNDRlNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGTngE0nQ1zL+bZpeh2BOeRTzFGjien7KODZ2ZDc3awGR+JwcgjRHah 0/pMaUANFbxCVFiz5c2HN98PHbDvjtnJTxjNXhjQQ/6p9Oo4DbrKuOyFew9toUk2 gRyl2bmQpuXvsqyrOPE37vVbm8kCfyd9lG1adIO2vOkcR4yqDqid1tk4tSHsIUj4 NcIxegehGVofdhfycOWkPnG/U1xq4nkiO8IUVP4b8kQfawRgCSJGSU7cD/kpMYf6 /VCLaqddn7RkYqjYmusFjUmpeqyB1ZYuxsCaNdCRpUgqZNNPLjqSWKkYRsMfAucv +dHsyVz0FkcPBb5EL3WIjJB5cKlunDE= -----END CERTIFICATE-----Generated at Thu May 28 15:24:16 2026 by rpki-client