$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa File: fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa (raw, json) Hash identifier: VpKqqNPHX3yw39dtdpq6wWw4raeq1H5EQu2qpq7lMxk= Subject key identifier: 66:9E:DB:D0:58:39:E5:9E:78:46:B5:0F:BD:86:CF:2A:16:CC:2D:6C Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584E3FC472DCCF0FF3C978B3C0C0 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 209 IP address blocks: 161.203.14.0/23 maxlen: 23 161.203.16.0/23 maxlen: 23 161.203.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:72:dc:cf:0f:f3:c9:78:b3:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=da9dd94f-7ce0-4998-bd63-6a7617396f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:f5:bd:5b:11:27:2c:3d:91:5a:5b:cc:2a: 9c:da:b6:9f:d9:7d:7b:48:7d:3c:88:24:3e:31:06: 52:ed:89:be:9e:14:35:3d:04:3b:c6:8e:6b:8f:ea: ac:c5:60:7f:60:63:df:fc:08:f0:22:1a:80:36:3e: ec:24:53:7c:51:b2:28:3e:87:a1:0e:93:30:27:41: 44:51:61:c2:79:8b:8e:02:f8:ed:cf:35:9a:6c:f2: 51:be:d4:6d:8d:6f:63:2c:67:83:f7:4c:bc:ed:5a: 82:d9:ae:18:d5:b9:a1:33:20:2a:7f:bf:61:9f:2d: 44:82:0f:0d:b0:71:1f:1f:4b:d3:98:d9:36:18:ce: 06:a2:5d:14:a8:1d:f0:ca:7a:a7:26:86:25:45:85: a0:41:b5:06:7b:fe:89:df:5e:32:e6:15:2f:61:3d: a1:de:85:ed:b7:07:83:21:08:46:bc:54:c6:e3:69: 1e:ca:46:4e:a6:05:5c:f3:43:d3:f0:3c:5a:13:f7: 1d:55:4a:9f:68:27:e9:8d:04:b6:3f:4f:9b:ca:59: d7:c7:bc:5e:ff:17:a6:14:ec:4a:47:1f:5e:17:f6: 07:16:cf:a4:1e:e0:e3:59:be:35:81:ac:b3:23:a7: 96:73:f4:23:c4:a8:5c:2a:ec:89:83:d5:a4:57:89: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:DB:D0:58:39:E5:9E:78:46:B5:0F:BD:86:CF:2A:16:CC:2D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.14.0-161.203.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a0:69:41:7f:74:45:16:61:33:69:60:7b:ab:c8:80:a0:9b: 36:f3:32:dd:06:b3:fa:68:d8:6b:49:4f:28:32:a9:cb:40:ab: 37:19:8e:8c:58:4a:97:eb:15:90:f7:59:0b:62:41:d7:49:3b: 81:b5:48:97:95:5b:21:69:ca:f6:c3:db:29:5b:6d:2b:7c:a1: fe:94:b9:e2:aa:d7:3f:96:0d:29:c6:8a:2a:19:9a:75:04:90: 9c:0c:2f:57:cf:4c:68:92:4e:db:9f:84:f7:1f:36:0c:83:30: f7:2e:85:0b:5b:6a:c9:5c:64:0a:82:49:7a:6f:07:ad:4c:90: e9:99:87:c0:75:02:24:b1:51:5d:09:db:d4:fc:7e:c6:d1:22: 55:a2:0e:76:4f:c4:0b:02:a7:23:8c:59:6c:af:b9:39:cf:ac: 0c:af:1e:0e:ef:56:b9:94:2f:48:6b:48:ad:3b:fd:7a:59:0e: 39:4f:58:48:c3:5a:d7:5c:f6:12:f2:80:04:e9:77:32:15:1d: ff:c0:26:04:78:97:0a:d7:e0:4f:11:7e:1f:b4:c6:c1:87:e4: 51:9c:14:0d:b9:77:12:fa:1a:15:dd:40:38:e2:f9:d7:08:5b: bf:62:3a:d4:0c:7c:ba:19:41:cf:a3:77:5b:ad:c0:98:f9:9d: a3:2d:40:6a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4/xHLczw/zyXizwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZGE5ZGQ5NGYtN2NlMC00OTk4LWJkNjMtNmE3NjE3Mzk2ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26b1vVsRJyw9kVpbzCqc2raf2X17SH08iCQ+ MQZS7Ym+nhQ1PQQ7xo5rj+qsxWB/YGPf/AjwIhqANj7sJFN8UbIoPoehDpMwJ0FE UWHCeYuOAvjtzzWabPJRvtRtjW9jLGeD90y87VqC2a4Y1bmhMyAqf79hny1Egg8N sHEfH0vTmNk2GM4Gol0UqB3wynqnJoYlRYWgQbUGe/6J314y5hUvYT2h3oXttweD IQhGvFTG42keykZOpgVc80PT8DxaE/cdVUqfaCfpjQS2P0+bylnXx7xe/xemFOxK Rx9eF/YHFs+kHuDjWb41gayzI6eWc/QjxKhcKuyJg9WkV4mhbQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGae29BYOeWeeEa1D72GzyoWzC1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvZmE2YTVlZTctZmYzZS0z YzlhLTk1ZGYtZjQ1ZmQ0MzYzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGhyw4D BAKhyxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAi6BpQX90RRZhM2lge6vIgKCbNvMy3Qaz+mjYa0lPKDKp y0CrNxmOjFhKl+sVkPdZC2JB10k7gbVIl5VbIWnK9sPbKVttK3yh/pS54qrXP5YN KcaKKhmadQSQnAwvV89MaJJO25+E9x82DIMw9y6FC1tqyVxkCoJJem8HrUyQ6ZmH wHUCJLFRXQnb1Px+xtEiVaIOdk/ECwKnI4xZbK+5Oc+sDK8eDu9WuZQvSGtIrTv9 elkOOU9YSMNa11z2EvKABOl3MhUd/8AmBHiXCtfgTxF+H7TGwYfkUZwUDbl3Evoa Fd1AOOL51whbv2I61Ax8uhlBz6N3W63AmPmdoy1Aag== -----END CERTIFICATE-----Generated at Mon Jun 22 05:40:55 2026 by rpki-client