$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa File: 0be8454d-aa3f-3887-b929-e6f6935a2918.roa (raw, json) Hash identifier: awXxErPLuIqn7Sj1gVoN/HtZLKqodtoB8ysGOOEWYrw= Subject key identifier: 4C:4B:5C:02:3B:5A:DA:7A:BB:51:85:F0:A2:55:74:08:41:CB:6C:94 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584DE41B1BDD8D7C9F6DC0843080 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 10794 IP address blocks: 171.161.20.0/22 maxlen: 22 171.161.20.0/24 maxlen: 24 171.161.21.0/24 maxlen: 24 171.161.22.0/24 maxlen: 24 171.161.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:1b:dd:8d:7c:9f:6d:c0:84:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=282404ed-0622-4952-a3cf-635e4f1dfbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:46:9c:e8:23:07:85:cf:85:f9:0a:f2:ad: 78:17:4a:ac:75:b1:0a:68:3c:e2:fb:b5:87:f4:bd: 9d:6c:9c:75:7e:16:24:d7:a7:92:fd:11:51:a7:40: f0:cb:8f:ee:29:91:2d:1f:25:c1:94:60:0c:0f:27: 99:c8:6e:e3:68:26:e6:40:16:4d:f7:1e:6a:61:f2: 2d:31:0f:b9:ca:37:0e:e9:3d:eb:22:ae:9a:2c:56: cd:c3:ed:8f:a2:e0:7d:35:32:23:4b:da:b2:18:e2: 3f:b8:48:e6:41:7c:0a:99:71:eb:3e:42:8c:a0:6a: c2:9b:f7:c6:03:da:13:d1:de:42:2c:9e:2e:43:bc: b1:9e:c9:38:ca:4b:3a:b3:0e:15:23:88:db:63:3c: aa:ea:d2:38:66:db:7d:70:3c:ae:e8:7b:69:26:2d: b3:5e:c7:72:a0:28:cd:bf:37:8c:19:2e:21:17:e5: 42:33:a3:12:85:3e:5e:d8:08:09:6e:04:b1:9f:60: fe:4c:6d:7f:37:e3:bf:6a:5f:03:54:c2:ad:af:e1: cf:3d:21:0c:f7:8b:63:88:4b:64:d9:dd:c5:c3:df: 92:03:16:60:3a:c3:b3:be:03:1d:7c:26:cb:a9:dd: d0:b8:77:77:bf:ea:1e:b8:1e:60:d6:8f:4c:c0:e9: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:5C:02:3B:5A:DA:7A:BB:51:85:F0:A2:55:74:08:41:CB:6C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2c:25:45:3b:b0:fe:5c:40:2d:8a:2f:b7:24:2d:1d:3f:a6: db:9d:15:bb:7a:b1:0d:fc:ad:ce:38:98:9c:ff:4f:b3:ce:8d: 7c:21:0a:4f:38:2d:52:c9:29:a1:54:0f:dc:3d:e1:ac:54:33: ff:f5:e5:c9:26:66:3d:bf:a4:27:e2:77:87:18:b7:f2:fc:52: bf:be:59:35:c4:8e:1a:13:a8:64:6a:68:96:58:7e:18:ff:40: 09:44:a9:3c:ff:6b:d8:45:b0:5f:02:7b:20:ab:37:1a:ce:6c: 06:db:2e:25:c6:a5:46:ec:67:2c:d5:9f:ca:ac:02:61:3d:ab: 0d:fc:dc:41:d5:cd:c3:9a:1f:16:7c:00:5c:f2:bb:d3:e1:f2: 92:3e:d0:f6:ef:14:03:d9:90:d4:3f:e8:ba:4d:1f:27:0b:22: 30:3e:d6:3c:9a:fc:14:3e:eb:5f:59:14:d9:23:02:ff:a8:d3: ca:a7:b4:bb:3c:58:20:06:9e:2c:81:45:1a:81:30:ae:ef:fc: 6c:90:bc:87:9a:c7:14:9b:23:d2:72:36:f6:c1:93:44:c4:da: 17:2e:f6:f9:4e:81:1f:d2:e6:4b:0a:1f:0f:f4:6f:2f:2b:7d: 89:5c:f7:32:f5:14:2c:ba:54:1a:ef:56:50:51:07:7b:91:a2: 9d:f3:62:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxvdjXyfbcCEMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MjgyNDA0ZWQtMDYyMi00OTUyLWEzY2YtNjM1ZTRmMWRmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJGnOgjB4XPhfkK8q14F0qsdbEKaDzi+7WH 9L2dbJx1fhYk16eS/RFRp0Dwy4/uKZEtHyXBlGAMDyeZyG7jaCbmQBZN9x5qYfIt MQ+5yjcO6T3rIq6aLFbNw+2PouB9NTIjS9qyGOI/uEjmQXwKmXHrPkKMoGrCm/fG A9oT0d5CLJ4uQ7yxnsk4yks6sw4VI4jbYzyq6tI4Ztt9cDyu6HtpJi2zXsdyoCjN vzeMGS4hF+VCM6MShT5e2AgJbgSxn2D+TG1/N+O/al8DVMKtr+HPPSEM94tjiEtk 2d3Fw9+SAxZgOsOzvgMdfCbLqd3QuHd3v+oeuB5g1o9MwOnyfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExLXAI7Wtp6u1GF8KJVdAhBy2yUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGJlODQ1NGQtYWEzZi0z ODg3LWI5MjktZTZmNjkzNWEyOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIsJUU7sP5cQC2KL7ckLR0/ptudFbt6sQ38rc44mJz/T7POjXwhCk84 LVLJKaFUD9w94axUM//15ckmZj2/pCfid4cYt/L8Ur++WTXEjhoTqGRqaJZYfhj/ QAlEqTz/a9hFsF8CeyCrNxrObAbbLiXGpUbsZyzVn8qsAmE9qw383EHVzcOaHxZ8 AFzyu9Ph8pI+0PbvFAPZkNQ/6LpNHycLIjA+1jya/BQ+619ZFNkjAv+o08qntLs8 WCAGniyBRRqBMK7v/GyQvIeaxxSbI9JyNvbBk0TE2hcu9vlOgR/S5ksKHw/0by8r fYlc9zL1FCy6VBrvVlBRB3uRop3zYgI= -----END CERTIFICATE-----Generated at Thu May 21 18:31:42 2026 by rpki-client