$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/594018b2-cc42-3472-afbb-6941daa36021.roa File: 594018b2-cc42-3472-afbb-6941daa36021.roa (raw, json) Hash identifier: PZVXpPbDrzXZxHVuvO/mfc5bKIkMHPcXpbu/xah9i+4= Subject key identifier: C9:24:D3:6E:65:D9:72:34:2A:FF:13:7B:5D:0C:77:44:FE:F9:2A:09 Certificate issuer: /CN=a6a248a6-cae0-4e08-9f1a-ab65f5e41773 Certificate serial: 010D0C9F4328584D97EC0126EB7786CB5FADB0C0 Authority key identifier: 3C:1D:90:F2:50:74:C2:06:1E:BD:BD:D1:EB:D9:C0:39:E3:EF:67:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/594018b2-cc42-3472-afbb-6941daa36021.roa Signing time: Wed 22 Apr 2026 18:04:09 +0000 ROA not before: Wed 22 Apr 2026 18:04:09 +0000 ROA not after: Tue 21 Jul 2026 18:04:09 +0000 asID: 31991 IP address blocks: 161.210.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:ec:01:26:eb:77:86:cb:5f:ad:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a248a6-cae0-4e08-9f1a-ab65f5e41773 Validity Not Before: Apr 22 18:04:09 2026 GMT Not After : Jul 21 18:04:09 2026 GMT Subject: CN=a12c1c22-9518-4671-99d4-88dd5693e371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0d:02:77:bf:9f:a8:7c:92:64:18:42:b0:f1: aa:f1:4a:85:0a:f1:77:d9:4c:63:c1:ea:21:93:37: a9:22:2f:8b:48:d4:ce:25:7e:00:1d:37:2a:62:d7: 76:e4:0b:10:fd:2a:5b:58:e7:05:f0:08:93:89:8a: 26:65:d1:9e:59:71:69:44:04:39:f6:af:04:43:cb: 55:1f:8b:79:a7:63:e0:39:fd:01:78:57:06:df:24: 27:b1:a5:a6:27:50:c2:0b:5e:bd:bd:39:e0:1e:4a: de:b8:8e:c5:94:7c:51:ce:60:20:19:84:b8:f2:c5: 7e:4f:9e:5f:82:fb:4b:9a:72:f5:0f:4d:83:2e:30: 14:4f:c8:d5:82:8a:fe:ba:7e:38:5c:5d:d4:00:fa: 86:7c:e3:a8:0f:0d:47:54:d2:dd:10:e2:66:28:0d: f2:c9:1d:51:82:89:e0:55:66:c0:44:32:1b:c6:ae: cd:92:d7:51:e8:43:58:9e:57:e2:5a:77:0a:8d:b7: 84:b8:dd:5b:5f:c1:0e:b8:ef:47:d3:1b:ef:34:c7: d7:60:45:43:14:9a:c2:e1:40:4a:7e:55:e3:3e:18: ff:cd:a9:93:bd:7b:23:4d:bf:26:60:26:7f:6b:b4: ef:56:9b:1c:85:73:e1:4a:86:9c:51:5e:a5:a2:e5: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:D3:6E:65:D9:72:34:2A:FF:13:7B:5D:0C:77:44:FE:F9:2A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/594018b2-cc42-3472-afbb-6941daa36021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.crl X509v3 Authority Key Identifier: keyid:3C:1D:90:F2:50:74:C2:06:1E:BD:BD:D1:EB:D9:C0:39:E3:EF:67:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.cer sbgp-ipAddrBlock: critical IPv4: 161.210.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:34:f2:56:e3:8a:4c:15:58:33:0f:b5:5f:83:a0:ab:d7:30: c2:d9:b7:25:2b:0f:8b:b8:58:ed:f6:cc:e5:61:eb:35:ad:f0: df:af:f5:68:bc:bc:a8:e1:44:9c:91:64:0c:b7:c2:44:22:e9: 74:e0:fc:ce:8e:f7:23:7e:cd:96:f4:55:0c:5d:8a:49:c2:2d: e6:5c:03:36:41:a5:8f:6f:50:8d:02:1d:18:d8:ad:23:19:cf: 77:30:d2:30:22:25:ad:a6:35:8b:88:a2:dc:30:8f:29:70:3b: 99:c6:f6:fa:0a:90:53:6f:bc:b0:7a:16:e0:e1:72:99:9b:6a: b4:39:f6:ba:e1:2c:33:24:f9:d4:46:12:19:72:36:05:16:3e: 26:18:b2:e7:e5:e7:80:49:d8:00:95:75:37:d7:51:b5:9d:e1: 5a:cb:64:10:96:1f:57:19:99:f0:db:a7:7c:fd:24:2d:38:c5: 67:30:44:8e:ca:3e:9f:e6:1f:14:b2:c7:59:6e:b2:56:df:89: 45:b1:77:31:91:a1:33:e6:ee:66:da:c4:63:41:9d:4c:8d:2d: fc:a8:b7:d5:19:bd:b9:b1:d7:04:1b:d2:21:43:b7:4a:58:01: e4:3b:b1:1e:a0:4c:06:fe:c0:ba:d6:0c:16:d9:d9:63:43:79: ca:75:5e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2X7AEm63eGy1+tsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZhMjQ4YTYtY2FlMC00ZTA4LTlmMWEtYWI2NWY1ZTQx NzczMB4XDTI2MDQyMjE4MDQwOVoXDTI2MDcyMTE4MDQwOVowLzEtMCsGA1UEAxMk YTEyYzFjMjItOTUxOC00NjcxLTk5ZDQtODhkZDU2OTNlMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w0Cd7+fqHySZBhCsPGq8UqFCvF32Uxjweoh kzepIi+LSNTOJX4AHTcqYtd25AsQ/SpbWOcF8AiTiYomZdGeWXFpRAQ59q8EQ8tV H4t5p2PgOf0BeFcG3yQnsaWmJ1DCC169vTngHkreuI7FlHxRzmAgGYS48sV+T55f gvtLmnL1D02DLjAUT8jVgor+un44XF3UAPqGfOOoDw1HVNLdEOJmKA3yyR1Rgong VWbARDIbxq7NktdR6ENYnlfiWncKjbeEuN1bX8EOuO9H0xvvNMfXYEVDFJrC4UBK flXjPhj/zamTvXsjTb8mYCZ/a7TvVpschXPhSoacUV6louW3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkk025l2XI0Kv8Te10Md0T++SoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hNmEy NDhhNi1jYWUwLTRlMDgtOWYxYS1hYjY1ZjVlNDE3NzMvNTk0MDE4YjItY2M0Mi0z NDcyLWFmYmItNjk0MWRhYTM2MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTZhMjQ4YTYtY2FlMC00ZTA4LTlm MWEtYWI2NWY1ZTQxNzczL2E2YTI0OGE2LWNhZTAtNGUwOC05ZjFhLWFiNjVmNWU0 MTc3My5jcmwwHwYDVR0jBBgwFoAUPB2Q8lB0wgYevb3R69nAOePvZz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hNmEyNDhhNi1jYWUwLTRlMDgtOWYxYS1hYjY1 ZjVlNDE3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCodJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc08lbjikwVWDMPtV+DoKvXMMLZtyUrD4u4WO32zOVh6zWt8N+v9Wi8 vKjhRJyRZAy3wkQi6XTg/M6O9yN+zZb0VQxdiknCLeZcAzZBpY9vUI0CHRjYrSMZ z3cw0jAiJa2mNYuIotwwjylwO5nG9voKkFNvvLB6FuDhcpmbarQ59rrhLDMk+dRG EhlyNgUWPiYYsufl54BJ2ACVdTfXUbWd4VrLZBCWH1cZmfDbp3z9JC04xWcwRI7K Pp/mHxSyx1luslbfiUWxdzGRoTPm7mbaxGNBnUyNLfyot9UZvbmx1wQb0iFDt0pY AeQ7sR6gTAb+wLrWDBbZ2WNDecp1Xl8= -----END CERTIFICATE-----Generated at Thu Apr 30 13:36:57 2026 by rpki-client