$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/12577103-8be0-3559-8831-cfaabf5e3e13.roa File: 12577103-8be0-3559-8831-cfaabf5e3e13.roa (raw, json) Hash identifier: o5+mt+oyoror0NVtwEfSkUrAeXnAE5MlLJqvFjP9toY= Subject key identifier: B5:1B:34:A1:9B:BF:68:B4:94:D3:3E:8F:B0:21:9D:97:E8:D6:42:02 Certificate issuer: /CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Certificate serial: 010D0C9F4328584D982EB3A607156CE5959BB180 Authority key identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/12577103-8be0-3559-8831-cfaabf5e3e13.roa Signing time: Wed 22 Apr 2026 20:18:33 +0000 ROA not before: Wed 22 Apr 2026 20:18:33 +0000 ROA not after: Tue 21 Jul 2026 20:18:33 +0000 asID: 14618 IP address blocks: 161.210.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:2e:b3:a6:07:15:6c:e5:95:9b:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Validity Not Before: Apr 22 20:18:33 2026 GMT Not After : Jul 21 20:18:33 2026 GMT Subject: CN=c332b4c3-f28f-47dd-812f-2ab6d2d1c655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:cd:65:c8:96:5c:fd:1c:a4:e7:a4:3a:d4: 83:0d:c9:e8:0b:9c:dd:eb:88:8d:18:74:6e:e9:ef: 8c:8a:1c:58:e6:af:0a:4d:2d:ad:49:e9:3c:2e:27: 06:20:05:82:a7:83:de:99:34:0b:97:e1:8c:ff:0a: 72:a3:30:23:f7:ab:6c:88:91:d8:1b:06:e9:c0:d9: 7b:41:b3:2d:92:c6:42:c7:20:9e:13:9b:2d:55:c5: f0:dc:7b:96:bd:80:87:42:ae:97:12:20:b3:c8:f6: f1:4b:e8:c4:3d:5f:28:22:ec:e1:cc:09:3e:a7:53: 6a:a5:c7:b5:cd:a8:66:61:e0:d2:c7:c7:d9:23:19: f2:ce:03:da:86:07:6c:6f:1d:f7:79:7a:7b:3b:0b: bd:9f:9f:8a:04:69:eb:35:9d:84:e8:3d:4a:b8:af: 9d:26:84:c4:fb:5d:0c:84:9b:4e:46:1e:b3:0e:9a: e0:fa:9d:52:b3:72:6c:bb:3b:02:55:c6:f6:46:95: 75:63:d3:09:78:4c:d6:aa:c0:11:36:84:80:74:c2: 6b:e0:e5:5f:ed:28:d3:9b:39:01:29:bb:53:7b:41: c3:aa:05:5f:4f:a3:cf:5c:18:3f:24:9d:08:ad:64: 2a:3a:85:ee:b6:7e:cb:d0:83:b3:a2:cd:bb:54:80: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1B:34:A1:9B:BF:68:B4:94:D3:3E:8F:B0:21:9D:97:E8:D6:42:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/12577103-8be0-3559-8831-cfaabf5e3e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl X509v3 Authority Key Identifier: keyid:6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer sbgp-ipAddrBlock: critical IPv4: 161.210.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:66:65:70:39:9f:57:aa:ca:5d:5b:46:19:58:a7:83:ba:54: 3e:84:aa:b7:33:f9:13:28:41:32:5a:ec:54:c4:da:a9:50:0b: e8:4c:69:da:5d:84:62:ca:16:1a:72:67:1c:6a:cc:e7:fd:d3: d8:fd:7b:40:9b:92:82:40:59:9b:dd:31:15:a5:d3:2b:6d:da: f4:b2:ab:01:12:f9:e2:73:cf:8e:8c:bf:09:b6:45:a8:97:c3: 1d:2a:9f:13:83:b8:39:ee:df:9d:1d:7c:72:8b:7a:2f:39:e7: e5:f4:2c:d9:9e:24:27:17:a2:67:df:9e:54:15:8d:6b:ed:18: 4c:3a:b9:21:56:ad:8b:a5:e9:27:38:80:62:24:b7:dd:55:ee: cb:39:e9:18:d5:9a:fa:d9:40:33:3e:47:93:ef:da:b8:09:a4: d8:34:bf:fa:f1:d0:1a:bb:02:c4:97:46:69:74:8b:2c:95:7f: 01:56:35:85:12:a0:05:c0:b1:76:9f:de:2e:91:d4:c0:ed:9d: 7e:6e:ab:b4:3b:58:0c:92:30:bf:54:b1:ec:f4:43:c4:25:82: 4b:75:20:66:30:fa:a8:36:46:94:9b:07:8d:3b:1c:91:e1:96: 0d:90:ba:8c:36:2f:f2:79:ac:73:7e:d3:f3:5b:47:53:03:ff: 02:1a:b0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YLrOmBxVs5ZWbsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQzMWNjOGEtODViOC00MTdjLTk0ZWItOTEzN2I3ODY0 NjA5MB4XDTI2MDQyMjIwMTgzM1oXDTI2MDcyMTIwMTgzM1owLzEtMCsGA1UEAxMk YzMzMmI0YzMtZjI4Zi00N2RkLTgxMmYtMmFiNmQyZDFjNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6LNZciWXP0cpOekOtSDDcnoC5zd64iNGHRu 6e+MihxY5q8KTS2tSek8LicGIAWCp4PemTQLl+GM/wpyozAj96tsiJHYGwbpwNl7 QbMtksZCxyCeE5stVcXw3HuWvYCHQq6XEiCzyPbxS+jEPV8oIuzhzAk+p1Nqpce1 zahmYeDSx8fZIxnyzgPahgdsbx33eXp7Owu9n5+KBGnrNZ2E6D1KuK+dJoTE+10M hJtORh6zDprg+p1Ss3JsuzsCVcb2RpV1Y9MJeEzWqsARNoSAdMJr4OVf7SjTmzkB KbtTe0HDqgVfT6PPXBg/JJ0IrWQqOoXutn7L0IOzos27VIBBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUbNKGbv2i0lNM+j7AhnZfo1kICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZDMx Y2M4YS04NWI4LTQxN2MtOTRlYi05MTM3Yjc4NjQ2MDkvMTI1NzcxMDMtOGJlMC0z NTU5LTg4MzEtY2ZhYWJmNWUzZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWQzMWNjOGEtODViOC00MTdjLTk0 ZWItOTEzN2I3ODY0NjA5LzlkMzFjYzhhLTg1YjgtNDE3Yy05NGViLTkxMzdiNzg2 NDYwOS5jcmwwHwYDVR0jBBgwFoAUasMgxkLPRZm3ckqec2AMsjlFL9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZDMxY2M4YS04NWI4LTQxN2MtOTRlYi05MTM3 Yjc4NjQ2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAodK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdmZXA5n1eqyl1bRhlYp4O6VD6Eqrcz+RMoQTJa7FTE2qlQC+hMadpd hGLKFhpyZxxqzOf909j9e0CbkoJAWZvdMRWl0ytt2vSyqwES+eJzz46Mvwm2RaiX wx0qnxODuDnu350dfHKLei855+X0LNmeJCcXomffnlQVjWvtGEw6uSFWrYul6Sc4 gGIkt91V7ss56RjVmvrZQDM+R5Pv2rgJpNg0v/rx0Bq7AsSXRml0iyyVfwFWNYUS oAXAsXaf3i6R1MDtnX5uq7Q7WAySML9Usez0Q8Qlgkt1IGYw+qg2RpSbB407HJHh lg2Quow2L/J5rHN+0/NbR1MD/wIasBE= -----END CERTIFICATE-----Generated at Sun May 3 16:10:56 2026 by rpki-client