$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa File: 2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa (raw, json) Hash identifier: PK8pDBX4THKYgAl23HtiFd3hH9ilZ+BpzDjXbt8B5iI= Subject key identifier: 43:7F:F5:FD:41:B3:87:74:2F:5F:54:08:04:B2:4B:86:DE:73:98:35 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584DD6453D9B012AB57D9468ED00 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa Signing time: Fri 15 May 2026 02:04:04 +0000 ROA not before: Fri 15 May 2026 02:04:04 +0000 ROA not after: Thu 13 Aug 2026 02:04:04 +0000 asID: 22125 IP address blocks: 161.150.11.0/24 maxlen: 24 161.150.11.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:45:3d:9b:01:2a:b5:7d:94:68:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: May 15 02:04:04 2026 GMT Not After : Aug 13 02:04:04 2026 GMT Subject: CN=61333ef8-f584-49ca-b958-b101e8644654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:9d:a3:6a:13:c6:e7:a5:2c:90:3b:7c:e3: 8c:f4:87:5a:39:25:29:2f:56:bd:d8:1b:f3:a8:52: 5c:bf:62:c2:b3:67:49:d1:cf:ee:d1:95:e4:7b:c6: d9:00:3b:7a:de:f9:9e:43:c1:42:f0:63:86:a0:a1: 3c:3f:a2:44:e2:2a:88:fa:91:49:23:57:fd:3d:2c: 20:9d:fe:2e:1c:22:78:5d:9f:57:54:c2:e4:f9:f4: f7:c4:d0:13:91:f2:4d:4b:2c:17:68:32:22:cc:31: 4f:78:cd:9f:f8:e5:14:d5:b2:68:12:9f:86:08:eb: a8:ec:4e:e9:13:e5:8f:ad:77:cc:7b:51:d2:2d:5e: 1d:da:51:80:a2:d6:f3:f8:b2:b0:81:e7:bb:4c:3c: a1:6e:9e:ac:3b:3d:08:5c:98:a0:c3:cd:da:dc:79: 63:a3:c2:d4:d3:a2:4f:5e:40:77:9a:e7:98:f6:3c: ce:3c:e6:e9:ba:52:92:e9:ff:b6:6a:d4:ce:cf:ee: 60:d7:da:44:1f:05:92:d8:6d:20:19:d1:ab:dc:8a: 50:8f:82:76:e9:a6:9a:14:ad:ef:f3:39:de:d8:aa: f4:46:c1:db:b3:e3:d0:87:d6:5a:95:e9:0d:0e:8f: df:4f:31:8f:88:8c:49:5f:62:d5:9a:08:63:00:15: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7F:F5:FD:41:B3:87:74:2F:5F:54:08:04:B2:4B:86:DE:73:98:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:81:22:98:61:a4:26:c8:14:ca:41:f9:0c:f2:f4:26:0d:b4: 49:8b:d7:08:0e:b9:95:d6:48:b5:60:a1:93:c7:61:65:2e:29: 8a:b6:1a:15:53:df:14:5f:d3:c4:d1:c4:0f:df:4a:be:0c:c3: 1d:67:19:38:de:d1:7d:77:c3:90:da:c9:c4:f2:c7:4d:8f:c8: cb:8a:7f:39:b2:31:99:c1:0a:30:e3:4f:50:a1:b8:60:c8:53: 8d:d7:be:28:00:de:e9:78:2e:6e:af:26:77:ae:7f:d2:69:33: 44:55:3a:1e:8f:0e:fe:82:d9:44:27:a2:49:8c:06:d7:1a:f5: 75:fa:8f:3e:fc:b8:62:d7:f8:42:22:1f:d0:3d:31:78:61:35: 37:3a:5e:e7:b4:bd:16:95:a8:76:51:b0:47:15:f8:8f:26:9b: c7:cd:34:e9:eb:1e:d2:f8:b6:3f:f0:02:e1:4c:a0:9e:01:45: f6:fc:3d:69:06:45:ce:4a:80:0c:24:b7:2a:99:2c:87:f6:36: 9f:bd:4f:f7:ec:10:a0:f7:00:97:44:f6:ec:fd:65:78:8e:33: 02:22:1c:18:15:4f:3b:7a:71:bc:c9:07:d4:67:91:5a:a5:4f: 39:29:8b:37:63:4f:26:3b:32:d4:90:28:75:c9:37:a3:16:48: 25:dc:d6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WRT2bASq1fZRo7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDUxNTAyMDQwNFoXDTI2MDgxMzAyMDQwNFowLzEtMCsGA1UEAxMk NjEzMzNlZjgtZjU4NC00OWNhLWI5NTgtYjEwMWU4NjQ0NjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkGdo2oTxuelLJA7fOOM9IdaOSUpL1a92Bvz qFJcv2LCs2dJ0c/u0ZXke8bZADt63vmeQ8FC8GOGoKE8P6JE4iqI+pFJI1f9PSwg nf4uHCJ4XZ9XVMLk+fT3xNATkfJNSywXaDIizDFPeM2f+OUU1bJoEp+GCOuo7E7p E+WPrXfMe1HSLV4d2lGAotbz+LKwgee7TDyhbp6sOz0IXJigw83a3Hljo8LU06JP XkB3mueY9jzOPObpulKS6f+2atTOz+5g19pEHwWS2G0gGdGr3IpQj4J26aaaFK3v 8zne2Kr0RsHbs+PQh9ZalekNDo/fTzGPiIxJX2LVmghjABW2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN/9f1Bs4d0L19UCASyS4bec5g1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMmJhZTJhMWMtYzAxZS0z YmU5LThlNzctZjJlNzgyODBlMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoZYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOBIphhpCbIFMpB+Qzy9CYNtEmL1wgOuZXWSLVgoZPHYWUuKYq2GhVT 3xRf08TRxA/fSr4Mwx1nGTje0X13w5DaycTyx02PyMuKfzmyMZnBCjDjT1ChuGDI U43XvigA3ul4Lm6vJneuf9JpM0RVOh6PDv6C2UQnokmMBtca9XX6jz78uGLX+EIi H9A9MXhhNTc6Xue0vRaVqHZRsEcV+I8mm8fNNOnrHtL4tj/wAuFMoJ4BRfb8PWkG Rc5KgAwktyqZLIf2Np+9T/fsEKD3AJdE9uz9ZXiOMwIiHBgVTzt6cbzJB9RnkVql TzkpizdjTyY7MtSQKHXJN6MWSCXc1o4= -----END CERTIFICATE-----Generated at Mon May 25 05:47:45 2026 by rpki-client