$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa File: 368a512c-e23e-3f44-82ee-4544cde2afd8.roa (raw, json) Hash identifier: QNGNsnyMtGjh9a8sKl5CvEsDgYeRXrEp+ByYgh0abR0= Subject key identifier: AC:B9:50:DC:96:DD:8A:FE:F4:2C:CF:95:F2:59:07:60:5B:26:EE:DA Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584EF9E21F029C1CDDA576C15F60 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 22616 IP address blocks: 161.151.200.0/22 maxlen: 24 161.151.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1f:02:9c:1c:dd:a5:76:c1:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=e19bdb2f-7ff0-4c22-b019-49a23a423374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:5c:c3:12:b3:43:47:87:96:4d:64:6c:9c: db:90:9d:0a:0d:7c:ba:f9:cc:10:7b:d0:2f:db:98: 7b:fe:b3:eb:ee:8b:65:6d:af:4b:bb:a8:34:5b:07: d1:82:3c:1c:88:18:e2:e1:6d:7d:26:1c:9b:83:a6: 07:a8:b6:6d:df:5a:ac:0b:c6:d8:9e:d7:25:b1:ad: 02:7d:a7:3b:e7:c5:d0:69:f4:44:e0:73:5b:81:63: 54:2a:ac:fa:46:58:be:81:5f:89:90:01:ef:69:a1: b8:22:db:d7:63:c2:4f:fb:9c:91:44:c9:dd:af:cf: 82:d1:94:8b:08:d1:c6:cd:36:12:cd:56:0d:f3:b6: 2f:6d:4f:a0:b4:02:e8:3b:a1:ab:34:ff:a0:7f:02: 48:af:fb:aa:73:53:25:63:31:6a:84:25:a2:7e:75: 5a:53:c3:6d:b5:19:fd:70:9f:7c:fa:28:51:d2:5d: c7:5d:38:75:38:61:6c:4c:b5:52:3f:d1:c6:cd:55: b0:a4:8b:fb:66:69:c6:67:af:e1:f1:b9:63:7d:2c: 0e:6e:81:50:db:df:8a:50:73:f5:8f:f2:8b:7d:c8: b4:f2:e0:48:6b:96:cd:45:dc:13:e9:84:e6:87:69: dd:6f:4e:3d:6d:46:e9:ca:27:27:ba:9d:21:6e:02: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B9:50:DC:96:DD:8A:FE:F4:2C:CF:95:F2:59:07:60:5B:26:EE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/368a512c-e23e-3f44-82ee-4544cde2afd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.200.0/22 161.151.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9e:94:f7:5b:72:b2:42:3b:59:77:b1:cb:d6:94:28:ed:46: 8e:34:fc:9d:2d:c2:fa:f9:81:13:7a:52:a6:ad:6a:c7:a9:2e: 5d:dc:f3:10:ae:2d:82:06:e2:04:68:06:e9:c2:98:57:8a:02: e5:0a:0f:2f:1f:7d:f4:d0:7d:4b:5b:1a:ba:33:bc:ab:6c:45: fe:95:d0:15:2a:94:8d:7a:6a:8a:a9:09:cf:67:0f:c6:47:bf: 69:ff:aa:a6:94:ae:a0:e1:87:f5:af:e7:7a:db:ff:17:3e:07: c9:22:d4:b9:09:01:5a:4f:d8:af:a1:2d:f8:a7:fe:87:ef:e2: b0:27:2a:7e:30:91:78:d9:f9:e2:a3:81:1d:b8:29:db:be:05: 16:8a:9f:ed:41:15:3e:ba:ed:18:dc:ed:fe:28:38:0a:31:e2: f6:ac:5d:95:1d:13:ed:c6:52:8a:f9:5d:bf:66:06:f7:27:7b: b3:2d:f8:74:6f:b0:3d:3d:46:92:da:18:6d:0d:34:b6:3e:06: 39:53:be:3b:81:d0:c1:cc:ca:05:53:fe:b4:f5:1b:1a:ad:fa: 5a:d9:66:9e:b2:43:66:84:fd:d6:46:bc:93:fc:f9:b4:31:a6: 12:5e:89:25:37:2e:a1:16:2e:29:aa:e7:9a:b2:29:0c:99:24: 52:b6:e8:1f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE754h8CnBzdpXbBX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTE5YmRiMmYtN2ZmMC00YzIyLWIwMTktNDlhMjNhNDIzMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkRcwxKzQ0eHlk1kbJzbkJ0KDXy6+cwQe9Av 25h7/rPr7otlba9Lu6g0WwfRgjwciBji4W19Jhybg6YHqLZt31qsC8bYntclsa0C fac758XQafRE4HNbgWNUKqz6Rli+gV+JkAHvaaG4ItvXY8JP+5yRRMndr8+C0ZSL CNHGzTYSzVYN87YvbU+gtALoO6GrNP+gfwJIr/uqc1MlYzFqhCWifnVaU8NttRn9 cJ98+ihR0l3HXTh1OGFsTLVSP9HGzVWwpIv7ZmnGZ6/h8bljfSwOboFQ29+KUHP1 j/KLfci08uBIa5bNRdwT6YTmh2ndb049bUbpyicnup0hbgJQ5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKy5UNyW3Yr+9CzPlfJZB2BbJu7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMzY4YTUxMmMtZTIzZS0z ZjQ0LTgyZWUtNDU0NGNkZTJhZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoZfIAwQB oZfsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKKelPdbcrJCO1l3scvWlCjtRo40/J0twvr5gRN6Uqatasep Ll3c8xCuLYIG4gRoBunCmFeKAuUKDy8fffTQfUtbGrozvKtsRf6V0BUqlI16aoqp Cc9nD8ZHv2n/qqaUrqDhh/Wv53rb/xc+B8ki1LkJAVpP2K+hLfin/ofv4rAnKn4w kXjZ+eKjgR24Kdu+BRaKn+1BFT667Rjc7f4oOAox4vasXZUdE+3GUor5Xb9mBvcn e7Mt+HRvsD09RpLaGG0NNLY+BjlTvjuB0MHMygVT/rT1Gxqt+lrZZp6yQ2aE/dZG vJP8+bQxphJeiSU3LqEWLimq55qyKQyZJFK26B8= -----END CERTIFICATE-----Generated at Wed Sep 9 02:19:00 2026 by rpki-client