$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa File: b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa (raw, json) Hash identifier: OxsynWthvthTMzzAuvK1tpPBSF1Qc+SFQMEckZLmFOM= Subject key identifier: D9:46:F9:E1:30:B4:16:A8:E4:51:8E:0E:D5:01:69:BC:05:17:98:17 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584E07008CC4E4189B3E41464080 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16509 IP address blocks: 161.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8c:c4:e4:18:9b:3e:41:46:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=8fbd221b-732f-4c4f-bfa3-37d603254145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:ba:36:06:30:ab:78:0c:d0:f6:7c:15:68: 33:c3:30:9e:2f:55:e9:44:b7:0f:c9:8a:2f:8f:ad: c2:01:63:f7:38:3d:00:39:e0:f7:63:19:51:1c:5e: 79:6a:a5:ea:28:45:4d:4e:40:7e:d4:f6:30:18:67: 41:98:69:dc:e8:d9:13:c2:59:67:09:27:70:6b:b5: e2:3e:d8:f0:71:8c:8c:ca:1b:41:c0:06:29:7b:1b: 4a:66:a2:dd:71:d4:fd:81:03:01:9f:81:c7:25:1d: a8:28:e1:cb:df:4c:a8:a4:6a:b0:ca:70:6a:4b:cb: f3:c0:e5:91:46:d5:2f:d3:43:ef:2d:df:b1:a6:88: eb:12:76:94:bc:e8:4e:14:72:4c:bd:cb:c9:af:de: 5a:40:90:f7:93:fd:62:0d:ca:1e:ee:25:b3:47:b0: e5:ff:bd:07:18:b9:19:7a:20:8b:59:da:39:a5:fd: 80:3d:9d:ff:34:0a:9b:56:df:a0:ac:b8:f1:cb:d6: df:d1:b5:96:05:a0:31:1b:e8:57:51:4f:c2:a2:70: bd:55:dc:3c:eb:1d:14:1d:68:c2:d0:cf:90:b5:02: e9:d7:7e:c7:78:ae:83:3d:1b:bb:01:cc:01:37:4a: c6:b0:20:43:e1:bf:34:84:db:16:cd:ee:b2:ad:b2: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:46:F9:E1:30:B4:16:A8:E4:51:8E:0E:D5:01:69:BC:05:17:98:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:db:25:e5:c3:2f:2d:50:ce:ff:db:78:4d:39:be:03:a8:14: 99:7d:6d:27:38:f9:6a:b3:4e:da:4c:ae:07:de:0c:b6:a6:ec: df:36:bb:b9:41:d4:7f:d4:b3:65:67:41:37:40:bc:d1:3e:aa: 5d:82:79:46:9e:b9:0d:34:f1:e9:19:73:a2:cc:d7:c0:51:ff: de:5b:30:08:7a:89:20:44:23:5f:3e:ef:fd:f4:4c:22:1a:07: 71:5f:9b:4c:80:c1:f6:84:10:15:26:59:40:d5:a2:23:56:26: eb:e3:cd:0f:16:4f:b8:e8:24:ee:ca:88:12:b7:86:9c:1f:98: f7:2b:96:20:a3:8b:05:00:57:fb:a4:6d:ef:61:a9:75:5d:bb: 3f:20:5e:ae:e6:df:13:00:94:5f:53:b8:70:a7:01:0c:1b:10: 4e:18:f0:90:2a:6d:1a:6d:9f:8a:21:39:39:c4:05:d4:79:a6: ad:21:f9:4b:e8:06:7c:31:43:fc:0c:f6:f0:f0:39:ad:45:d0: 2b:7e:ec:40:c5:28:1c:eb:89:90:ee:64:c4:e6:5c:9c:2d:6b: 28:37:33:af:93:b1:fa:ac:99:f8:f5:1d:be:6f:99:a2:4d:7b: 09:c2:fc:66:9c:d6:fd:b5:13:f8:e9:c8:52:b4:65:cf:6f:fb: 97:18:56:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIzE5BibPkFGQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk OGZiZDIyMWItNzMyZi00YzRmLWJmYTMtMzdkNjAzMjU0MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLq6NgYwq3gM0PZ8FWgzwzCeL1XpRLcPyYov j63CAWP3OD0AOeD3YxlRHF55aqXqKEVNTkB+1PYwGGdBmGnc6NkTwllnCSdwa7Xi PtjwcYyMyhtBwAYpextKZqLdcdT9gQMBn4HHJR2oKOHL30yopGqwynBqS8vzwOWR RtUv00PvLd+xpojrEnaUvOhOFHJMvcvJr95aQJD3k/1iDcoe7iWzR7Dl/70HGLkZ eiCLWdo5pf2APZ3/NAqbVt+grLjxy9bf0bWWBaAxG+hXUU/ConC9Vdw86x0UHWjC 0M+QtQLp137HeK6DPRu7AcwBN0rGsCBD4b80hNsWze6yrbLdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlG+eEwtBao5FGODtUBabwFF5gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjEwZTZiNGYtZDlhNy0z NzkzLWFjZmUtZTU5NzFjOWQ4ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHbJeXDLy1Qzv/beE05vgOoFJl9bSc4+WqzTtpMrgfeDLam7N82u7lB 1H/Us2VnQTdAvNE+ql2CeUaeuQ008ekZc6LM18BR/95bMAh6iSBEI18+7/30TCIa B3Ffm0yAwfaEEBUmWUDVoiNWJuvjzQ8WT7joJO7KiBK3hpwfmPcrliCjiwUAV/uk be9hqXVduz8gXq7m3xMAlF9TuHCnAQwbEE4Y8JAqbRptn4ohOTnEBdR5pq0h+Uvo BnwxQ/wM9vDwOa1F0Ct+7EDFKBzriZDuZMTmXJwtayg3M6+Tsfqsmfj1Hb5vmaJN ewnC/Gac1v21E/jpyFK0Zc9v+5cYVuE= -----END CERTIFICATE-----Generated at Wed Jun 3 21:41:33 2026 by rpki-client