$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa File: bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa (raw, json) Hash identifier: Bs1Xb+DalbmVVeKMV0Pp2CRXPj3n3O/XAwZxnVrqLZc= Subject key identifier: AF:F8:1D:A2:59:5C:BB:3A:65:6F:01:70:B7:D3:65:80:FC:29:64:81 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584DE41B2D777BEFB033FFA3D500 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 10794 IP address blocks: 171.161.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2d:77:7b:ef:b0:33:ff:a3:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=1db385d1-8349-40c1-af0b-46b2ce77b67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:f1:83:b2:b8:64:19:ca:6d:96:74:9e:9e: 0b:75:3c:e6:bb:e1:b7:76:b4:4c:ce:21:b9:5a:ea: c7:53:59:be:8d:56:19:4e:e3:46:2c:1f:37:58:e4: c8:9d:c8:66:27:45:de:7d:a5:4c:0a:bf:cb:08:71: 09:bf:12:05:fe:79:46:da:89:1f:cf:4c:27:2a:1e: f2:7f:d0:f4:5a:40:b0:eb:58:d2:f7:10:a5:72:8d: ba:a2:80:37:31:24:64:f1:69:91:7c:ce:aa:78:7d: 1e:7b:2a:43:7f:47:1b:84:0f:09:b6:06:0c:eb:8a: dc:80:df:29:c6:28:da:0f:06:85:80:92:e4:58:06: 14:5c:bd:8c:76:72:a6:72:27:34:53:07:f2:ec:77: bf:22:37:a2:e8:14:52:4d:f3:a8:6d:3e:22:d5:01: 3c:df:20:e1:c8:4c:6d:1c:88:bf:ec:63:2c:c9:38: 96:98:b3:94:ac:00:e9:b9:df:82:39:87:13:cc:a1: fb:55:63:93:04:20:65:78:9a:5b:1a:44:dc:e6:eb: 48:0f:58:77:ba:9e:a6:a9:09:53:f2:b0:8d:af:64: 15:42:cc:26:07:cd:4c:fa:f9:93:72:c8:ca:e7:1a: 1c:50:aa:7d:a7:ad:fe:11:be:81:41:f8:b1:dc:83: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:1D:A2:59:5C:BB:3A:65:6F:01:70:B7:D3:65:80:FC:29:64:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5d:93:6a:93:0e:3d:70:57:a7:1c:9c:fc:c6:f3:fb:90:49: 81:d1:c0:4c:6b:e6:b1:b3:87:f4:d0:ed:c1:7a:1c:70:f7:d7: 55:3a:b1:95:de:0a:28:63:ba:d5:e3:a6:87:d9:03:ff:5e:89: f2:85:cb:b6:98:2f:97:1f:cb:df:d0:87:42:88:31:6d:33:0e: 1b:78:72:bf:60:d7:cd:90:44:d0:23:d6:3a:2c:cd:6e:98:e9: 97:0f:d9:19:b9:35:68:2a:23:b7:fd:da:13:dc:d5:ed:0f:59: 5c:bf:02:18:9a:3b:17:10:e6:cd:d9:7d:ff:ed:2a:d1:c2:8f: 04:cf:f6:a5:29:ae:22:d7:1f:00:11:f9:b6:d6:4f:8f:cc:ed: 77:3a:a6:50:01:5a:df:34:c0:c9:d7:fd:17:7b:0d:da:d2:12: 9d:6b:27:5f:9e:93:0c:84:1d:5c:18:1e:cf:e4:d1:81:de:e2: 6a:1a:b3:04:96:a6:8e:78:b4:07:ef:b5:6b:20:f6:f0:f3:3f: b0:0f:81:8b:20:d4:f1:0f:f8:20:b9:e1:15:a6:b7:93:83:ab: 66:26:b6:28:c6:3b:29:93:b9:e2:f0:fd:21:34:34:25:26:58: fd:53:df:da:8c:e6:6c:5a:48:bf:43:81:bc:ae:c3:17:83:65: 5b:99:9e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy13e++wM/+j1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MWRiMzg1ZDEtODM0OS00MGMxLWFmMGItNDZiMmNlNzdiNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgDxg7K4ZBnKbZZ0np4LdTzmu+G3drRMziG5 WurHU1m+jVYZTuNGLB83WOTInchmJ0XefaVMCr/LCHEJvxIF/nlG2okfz0wnKh7y f9D0WkCw61jS9xClco26ooA3MSRk8WmRfM6qeH0eeypDf0cbhA8JtgYM64rcgN8p xijaDwaFgJLkWAYUXL2MdnKmcic0Uwfy7He/Ijei6BRSTfOobT4i1QE83yDhyExt HIi/7GMsyTiWmLOUrADpud+COYcTzKH7VWOTBCBleJpbGkTc5utID1h3up6mqQlT 8rCNr2QVQswmB81M+vmTcsjK5xocUKp9p63+Eb6BQfix3INj3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/4HaJZXLs6ZW8BcLfTZYD8KWSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmM0MWM0MjQtMWI5OS0z MzgzLWE3NGYtZjM0YjBhZGMzZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6FUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJdk2qTDj1wV6ccnPzG8/uQSYHRwExr5rGzh/TQ7cF6HHD311U6sZXe CihjutXjpofZA/9eifKFy7aYL5cfy9/Qh0KIMW0zDht4cr9g182QRNAj1joszW6Y 6ZcP2Rm5NWgqI7f92hPc1e0PWVy/AhiaOxcQ5s3Zff/tKtHCjwTP9qUpriLXHwAR +bbWT4/M7Xc6plABWt80wMnX/Rd7DdrSEp1rJ1+ekwyEHVwYHs/k0YHe4moaswSW po54tAfvtWsg9vDzP7APgYsg1PEP+CC54RWmt5ODq2YmtijGOymTueLw/SE0NCUm WP1T39qM5mxaSL9DgbyuwxeDZVuZnqU= -----END CERTIFICATE-----Generated at Thu May 21 20:02:08 2026 by rpki-client