$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa File: 33da5a36-c016-3582-bf59-0f9738d7f8bd.roa (raw, json) Hash identifier: kgdnSTqvz5Socu3DaO76mLJjbVSps6uDjKlOG/KOZtY= Subject key identifier: AA:17:8D:C2:D1:E8:A2:A0:18:A8:0C:87:95:12:62:D0:2F:31:D5:6D Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584F89A86638028260B8A8430590 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 6253 IP address blocks: 161.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:66:38:02:82:60:b8:a8:43:05:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=294882bc-aa4b-49c7-b60d-8f0b44116c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:4c:87:fd:5d:17:38:29:d2:b6:3c:21:d2: cf:69:4c:cb:d2:9a:c6:50:f3:04:6f:b7:a8:e8:8b: 86:cc:09:a4:1c:ae:b2:fd:73:fd:90:75:fb:ab:37: 09:65:e2:bb:05:ee:db:9d:e0:4c:f9:72:5c:6c:4e: 1b:96:ad:6b:33:07:a0:43:a3:f3:81:76:23:3d:d2: f9:bd:c4:cc:ed:7a:c0:d1:b0:6a:4c:5e:3f:cb:32: de:20:b2:ce:89:59:4b:ce:00:8e:e7:5e:fa:21:95: ff:3c:dc:61:0f:8b:73:f1:1f:93:75:86:26:56:e0: cb:df:89:15:26:1a:20:5b:5d:cf:bc:5a:a1:05:32: 2c:db:2e:aa:db:e7:50:b9:7c:f1:6f:6b:d1:c9:2e: 74:f7:0c:cc:21:4a:51:f0:b9:97:24:57:4a:80:a4: 1b:63:dc:1f:2c:03:5a:2d:b1:54:95:60:1e:a3:88: 74:46:72:b4:8b:d2:fa:43:5f:75:2c:50:fd:58:87: ec:6a:ab:08:db:a0:f0:14:ae:7c:8f:ea:9e:51:bb: 31:d5:e4:2f:ad:e7:5a:aa:3f:64:5d:a5:32:0f:04: de:28:92:bf:6e:59:59:2c:49:08:16:3f:ec:e1:f8: 2b:f0:55:13:f2:49:20:b9:3a:fe:9b:28:ad:e5:03: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:8D:C2:D1:E8:A2:A0:18:A8:0C:87:95:12:62:D0:2F:31:D5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:60:76:31:92:83:b6:99:f7:67:ae:2c:dc:22:8f:8c:d7:79: 9e:70:fc:42:3a:69:e2:da:a5:84:0f:ec:a0:f0:ea:d5:e0:d9: 93:3c:8d:01:91:72:e5:ed:b5:0c:0c:4c:56:c7:37:8d:1d:b2: 6f:14:52:87:81:c1:ac:89:2a:ab:4c:9a:0d:61:34:9c:2f:51: 96:d8:a8:1b:bf:5d:b6:d5:ec:aa:0b:b5:24:58:f1:eb:06:19: 72:e1:71:c6:eb:16:93:77:1f:62:04:11:44:72:37:07:5d:ad: 24:7e:e4:4d:d9:e0:eb:e4:de:33:e3:0b:20:54:91:66:29:e4: b0:52:c7:a8:7f:4e:4f:ce:06:10:4f:92:b9:87:11:8d:57:f4: ec:69:a2:05:b5:17:f4:43:74:57:70:b3:10:66:5f:60:b3:54: 3f:5c:06:7d:a9:b6:8a:fe:a7:3c:92:24:22:46:d8:44:c1:23: 14:03:67:52:93:b7:d2:1b:5a:b4:eb:89:d8:9b:c5:e4:dd:35: bf:19:8d:aa:19:38:3f:f2:09:93:d2:49:d2:28:fd:21:6a:52: 9b:12:b3:a3:59:1f:b8:71:01:9d:87:0a:41:f6:2a:6e:d0:ca: f2:1d:7d:ba:d9:f2:ce:2f:8e:74:e1:1f:29:91:c0:d6:74:86: d5:de:de:64 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+JqGY4AoJguKhDBZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk Mjk0ODgyYmMtYWE0Yi00OWM3LWI2MGQtOGYwYjQ0MTE2YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstNMh/1dFzgp0rY8IdLPaUzL0prGUPMEb7eo 6IuGzAmkHK6y/XP9kHX7qzcJZeK7Be7bneBM+XJcbE4blq1rMwegQ6PzgXYjPdL5 vcTM7XrA0bBqTF4/yzLeILLOiVlLzgCO5176IZX/PNxhD4tz8R+TdYYmVuDL34kV JhogW13PvFqhBTIs2y6q2+dQuXzxb2vRyS509wzMIUpR8LmXJFdKgKQbY9wfLANa LbFUlWAeo4h0RnK0i9L6Q191LFD9WIfsaqsI26DwFK58j+qeUbsx1eQvredaqj9k XaUyDwTeKJK/bllZLEkIFj/s4fgr8FUT8kkguTr+myit5QPY7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKoXjcLR6KKgGKgMh5USYtAvMdVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMzNkYTVhMzYtYzAxNi0z NTgyLWJmNTktMGY5NzM4ZDdmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoZcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAmB2MZKDtpn3Z64s3CKPjNd5nnD8Qjpp4tqlhA/soPDq1eDZkzyNAZFy 5e21DAxMVsc3jR2ybxRSh4HBrIkqq0yaDWE0nC9RltioG79dttXsqgu1JFjx6wYZ cuFxxusWk3cfYgQRRHI3B12tJH7kTdng6+TeM+MLIFSRZinksFLHqH9OT84GEE+S uYcRjVf07GmiBbUX9EN0V3CzEGZfYLNUP1wGfam2iv6nPJIkIkbYRMEjFANnUpO3 0htatOuJ2JvF5N01vxmNqhk4P/IJk9JJ0ij9IWpSmxKzo1kfuHEBnYcKQfYqbtDK 8h19utnyzi+OdOEfKZHA1nSG1d7eZA== -----END CERTIFICATE-----Generated at Sun Oct 25 06:51:35 2026 by rpki-client