$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa File: 2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa (raw, json) Hash identifier: q4PQonKu5tXcMDxHTlsDhs0O1H+EgrKyqZTzZk1SAbI= Subject key identifier: 71:1D:A4:27:7A:4D:47:EE:9F:B8:BB:43:F3:67:E0:85:90:48:9B:DB Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584DE41B5BDDFDF6F305C1300540 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 10794 IP address blocks: 171.162.86.0/24 maxlen: 24 171.162.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:5b:dd:fd:f6:f3:05:c1:30:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=3791c59c-d99d-4eb0-b92f-005c516b5cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:d0:7d:ce:0a:66:c1:d2:54:f6:d7:2c:36: 72:24:bd:b7:89:1a:e3:d2:ce:82:f9:94:ef:fa:d7: 13:63:80:5c:66:b3:4b:74:21:1d:a7:ff:3b:0c:01: 0f:c8:27:a1:70:8e:7f:a8:0a:54:ee:85:14:ea:02: 2b:ca:4e:07:18:5e:e5:00:fd:3b:92:9b:23:52:79: df:c9:2e:d3:18:9d:ae:40:b4:c9:ca:e7:f8:19:19: 8b:ed:05:b9:ce:f0:59:cf:5f:ac:a8:88:ac:05:be: 97:4f:65:66:ed:aa:e2:51:f3:88:4e:7d:05:9b:af: 0b:21:31:6c:fc:6d:77:d3:ec:dd:4f:58:c8:f2:c7: 9f:bb:a4:eb:77:46:f0:24:4b:f2:7b:7d:d1:24:5f: 65:1e:44:5e:96:f3:d7:47:8c:7c:8e:c2:cc:41:93: 19:12:f1:d2:57:ff:ee:95:15:ef:dd:67:ec:94:dc: 08:bc:af:74:09:b9:38:ed:5a:f4:9f:06:50:5e:f2: 2d:5c:ab:db:9a:54:45:55:15:1c:17:74:9f:24:11: 49:5c:4b:d5:03:4b:e1:d1:9d:8a:ae:08:cc:3e:74: 5a:b4:19:91:37:ec:10:3c:5c:68:99:e7:5e:e6:cd: 87:b3:54:2d:71:71:9d:a3:d3:e4:2a:ce:76:15:df: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:A4:27:7A:4D:47:EE:9F:B8:BB:43:F3:67:E0:85:90:48:9B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:db:04:76:cb:71:1c:89:7e:12:60:3a:0f:27:19:63:7c:64: 3b:9b:28:4c:83:b1:99:f0:d1:f4:9c:af:4b:a9:44:cc:f5:b1: 4d:79:8e:f4:a0:be:6f:78:ac:b9:28:25:97:df:3f:4f:9b:54: d3:d8:53:4d:18:f9:42:1c:b3:06:e5:c8:9d:b0:a8:88:7d:85: 65:fc:12:a2:95:1b:4b:e6:ea:37:e3:25:5c:fa:7c:51:33:d4: 34:b6:1f:c0:4f:b4:20:aa:95:8b:46:14:a3:6e:a8:6e:23:d4: f4:d5:01:3c:cc:e0:d5:43:a1:d8:e5:41:13:8e:f1:5b:f9:c3: 17:7c:f1:1a:72:66:dc:74:53:7e:bd:9e:56:cd:b6:11:29:f6: 3b:4c:da:16:8b:cb:52:e2:25:45:9b:c4:dc:f0:d5:c7:f3:33: cb:e7:c6:0b:4f:9a:4c:07:4e:68:7a:66:b4:02:18:8b:2b:48: 94:cf:51:85:c3:48:6d:5d:39:b8:22:b9:95:8a:fd:20:0c:ea: 36:0b:6c:44:d3:dc:59:9e:e2:01:4e:80:a9:5e:aa:75:03:f4: 72:96:62:53:4c:32:39:d0:9f:b7:a4:a6:d2:69:95:c6:32:a3: 83:f6:8d:d4:71:ee:8f:91:91:47:7d:1b:cb:0c:91:0a:d8:93: 94:75:18:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1vd/fbzBcEwBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Mzc5MWM1OWMtZDk5ZC00ZWIwLWI5MmYtMDA1YzUxNmI1Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVPQfc4KZsHSVPbXLDZyJL23iRrj0s6C+ZTv +tcTY4BcZrNLdCEdp/87DAEPyCehcI5/qApU7oUU6gIryk4HGF7lAP07kpsjUnnf yS7TGJ2uQLTJyuf4GRmL7QW5zvBZz1+sqIisBb6XT2Vm7ariUfOITn0Fm68LITFs /G130+zdT1jI8sefu6Trd0bwJEvye33RJF9lHkRelvPXR4x8jsLMQZMZEvHSV//u lRXv3WfslNwIvK90Cbk47Vr0nwZQXvItXKvbmlRFVRUcF3SfJBFJXEvVA0vh0Z2K rgjMPnRatBmRN+wQPFxomede5s2Hs1QtcXGdo9PkKs52Fd8ijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEdpCd6TUfun7i7Q/Nn4IWQSJvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMmIzODgzYjItYzZlNi0z YjI0LTg3NzgtNGVmYTcyNjJlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6JWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXbBHbLcRyJfhJgOg8nGWN8ZDubKEyDsZnw0fScr0upRMz1sU15jvSg vm94rLkoJZffP0+bVNPYU00Y+UIcswblyJ2wqIh9hWX8EqKVG0vm6jfjJVz6fFEz 1DS2H8BPtCCqlYtGFKNuqG4j1PTVATzM4NVDodjlQROO8Vv5wxd88RpyZtx0U369 nlbNthEp9jtM2haLy1LiJUWbxNzw1cfzM8vnxgtPmkwHTmh6ZrQCGIsrSJTPUYXD SG1dObgiuZWK/SAM6jYLbETT3Fme4gFOgKleqnUD9HKWYlNMMjnQn7ekptJplcYy o4P2jdRx7o+RkUd9G8sMkQrYk5R1GPk= -----END CERTIFICATE-----Generated at Thu May 21 18:32:26 2026 by rpki-client