$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa File: 09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa (raw, json) Hash identifier: aaM5whMCSYd2w8E9HbNah+l71fARpGH4i7aLFTr3MJg= Subject key identifier: 04:F4:5D:09:03:AA:80:3A:96:11:CC:0F:CC:39:AC:E2:02:8B:23:B9 Certificate issuer: /CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Certificate serial: 010D0C9F4328584D982E7455384DBA202F030080 Authority key identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa Signing time: Wed 22 Apr 2026 20:18:03 +0000 ROA not before: Wed 22 Apr 2026 20:18:03 +0000 ROA not after: Tue 21 Jul 2026 20:18:03 +0000 asID: 16509 IP address blocks: 161.210.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:2e:74:55:38:4d:ba:20:2f:03:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Validity Not Before: Apr 22 20:18:03 2026 GMT Not After : Jul 21 20:18:03 2026 GMT Subject: CN=2cb7c97e-939c-4e1a-af2e-5c591f604767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:ce:85:bc:64:5c:b5:1d:1f:20:9f:9f:0b: bf:02:88:fa:bd:9d:d9:74:49:03:9b:07:a3:92:68: 88:8d:8d:63:1a:eb:4d:12:93:20:c7:27:0c:7d:91: 9b:50:54:8a:aa:a3:35:af:b2:d1:af:e1:73:6f:12: a7:b5:e3:26:b1:b8:7b:b4:d2:60:bb:3d:64:c8:8d: 3b:c3:33:04:eb:a0:2d:49:be:02:5f:3f:75:7a:83: c5:eb:37:48:23:ba:ba:a6:5b:6f:39:de:68:f2:01: a6:1b:80:76:cd:96:3d:e2:4c:28:fc:48:ff:d1:59: fa:38:31:1e:54:49:3c:3d:b2:33:d1:2b:36:6d:fd: a1:81:e3:a2:51:e6:58:e7:c1:25:77:64:2e:9a:04: 7a:a6:e7:b0:1e:af:4b:5d:ee:d2:16:70:23:cb:e8: 82:aa:9b:1e:0f:f0:c8:5e:38:1b:9b:11:a0:f8:f0: 48:d7:ee:87:28:8b:3a:c3:c4:2f:50:bf:76:d0:79: 8b:ff:b1:81:68:f6:bb:68:76:0f:81:e0:58:f2:4f: bc:92:cb:0f:62:39:c0:ac:ff:ea:f9:74:37:fa:e2: 1d:08:73:b7:aa:ac:71:11:a4:12:27:55:e2:5c:f1: 8b:1b:e3:b1:65:0f:d9:95:56:ae:b5:37:b7:58:09: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:5D:09:03:AA:80:3A:96:11:CC:0F:CC:39:AC:E2:02:8B:23:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl X509v3 Authority Key Identifier: keyid:6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer sbgp-ipAddrBlock: critical IPv4: 161.210.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1c:48:0c:ae:ae:0c:82:ed:03:24:35:8d:19:a9:66:ba:91: b9:ca:d1:e6:b2:64:86:dd:71:5a:22:75:0a:aa:bb:56:ac:99: ac:eb:86:8e:d0:ea:e1:29:9a:e1:3e:24:b7:04:8d:76:eb:ea: 07:10:a8:d7:dc:c3:5a:40:81:b7:13:16:54:38:87:d5:66:95: 40:ac:eb:6d:29:8c:56:1f:6f:39:6d:98:b1:06:4d:98:e9:68: fc:9e:11:2e:10:11:0f:5b:48:98:88:71:12:ac:9d:35:88:d0: cc:20:f2:8c:a0:43:59:74:f1:07:e6:59:af:e9:8b:a3:df:b6: bc:21:38:5f:9f:ce:b3:78:92:b0:a9:3b:dc:ac:6b:88:83:2e: 8e:a6:1a:91:6b:8c:55:a7:b6:91:e8:d2:fa:7f:d7:5a:fe:d9: 58:26:a5:63:69:2a:61:f2:1b:68:c5:e7:46:fb:37:c0:b2:6e: 4b:61:ed:1c:c0:6d:f3:04:47:fc:02:3e:ac:d3:2d:7c:2d:5a: 74:1e:81:44:b3:f8:c6:43:20:c2:9f:d5:c1:b2:d0:5d:15:51: 16:b1:d4:8a:e0:d8:3f:bc:b1:b7:b9:fb:8c:55:0e:fa:36:b8: 48:dc:f9:24:17:9a:b6:62:e8:73:19:f6:12:47:4d:da:75:79: 25:16:a2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YLnRVOE26IC8DAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQzMWNjOGEtODViOC00MTdjLTk0ZWItOTEzN2I3ODY0 NjA5MB4XDTI2MDQyMjIwMTgwM1oXDTI2MDcyMTIwMTgwM1owLzEtMCsGA1UEAxMk MmNiN2M5N2UtOTM5Yy00ZTFhLWFmMmUtNWM1OTFmNjA0NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDOhbxkXLUdHyCfnwu/Aoj6vZ3ZdEkDmwej kmiIjY1jGutNEpMgxycMfZGbUFSKqqM1r7LRr+FzbxKnteMmsbh7tNJguz1kyI07 wzME66AtSb4CXz91eoPF6zdII7q6pltvOd5o8gGmG4B2zZY94kwo/Ej/0Vn6ODEe VEk8PbIz0Ss2bf2hgeOiUeZY58Eld2QumgR6puewHq9LXe7SFnAjy+iCqpseD/DI XjgbmxGg+PBI1+6HKIs6w8QvUL920HmL/7GBaPa7aHYPgeBY8k+8kssPYjnArP/q +XQ3+uIdCHO3qqxxEaQSJ1XiXPGLG+OxZQ/ZlVautTe3WAke2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT0XQkDqoA6lhHMD8w5rOICiyO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZDMx Y2M4YS04NWI4LTQxN2MtOTRlYi05MTM3Yjc4NjQ2MDkvMDlmMmI1YzUtN2FmYS0z ZjQzLWIwMjMtOTRlYTIyZDZkODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWQzMWNjOGEtODViOC00MTdjLTk0 ZWItOTEzN2I3ODY0NjA5LzlkMzFjYzhhLTg1YjgtNDE3Yy05NGViLTkxMzdiNzg2 NDYwOS5jcmwwHwYDVR0jBBgwFoAUasMgxkLPRZm3ckqec2AMsjlFL9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZDMxY2M4YS04NWI4LTQxN2MtOTRlYi05MTM3 Yjc4NjQ2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAodK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEscSAyurgyC7QMkNY0ZqWa6kbnK0eayZIbdcVoidQqqu1asmazrho7Q 6uEpmuE+JLcEjXbr6gcQqNfcw1pAgbcTFlQ4h9VmlUCs620pjFYfbzltmLEGTZjp aPyeES4QEQ9bSJiIcRKsnTWI0Mwg8oygQ1l08QfmWa/pi6PftrwhOF+fzrN4krCp O9ysa4iDLo6mGpFrjFWntpHo0vp/11r+2VgmpWNpKmHyG2jF50b7N8Cybkth7RzA bfMER/wCPqzTLXwtWnQegUSz+MZDIMKf1cGy0F0VURax1Irg2D+8sbe5+4xVDvo2 uEjc+SQXmrZi6HMZ9hJHTdp1eSUWoqw= -----END CERTIFICATE-----Generated at Sun May 3 14:47:49 2026 by rpki-client