$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa File: 3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa (raw, json) Hash identifier: TX+c3hCRdGYgROB9PqkDrrCjEz7pvk73V1kjPheYkY8= Subject key identifier: 14:C5:63:1A:92:EF:83:B1:88:64:EA:15:BF:52:8B:66:9D:B4:CC:00 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584F3FAD3E826F959FB8CD2AFD80 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 161.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3e:82:6f:95:9f:b8:cd:2a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=9ac3c9a1-4248-400f-b4bd-f4bf66e879d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:48:a3:3e:18:a2:47:f5:de:fc:6d:5e:46: 9b:fc:48:60:0d:29:85:cc:25:23:ab:fb:c0:f4:6d: f8:59:43:c8:89:58:9b:a6:54:9f:72:4d:82:09:ef: 3f:e0:29:8a:cf:76:e1:44:e3:81:ee:9d:67:70:04: 2e:89:c8:94:73:0c:9a:66:af:65:d5:2f:12:27:71: 96:d6:a3:42:40:aa:1d:eb:ef:53:c3:9c:a1:26:fa: f1:70:f2:e6:40:cf:e3:da:d1:50:e2:cb:ff:b2:c6: b7:e6:97:0c:10:40:22:96:f4:a8:70:ba:51:af:03: 51:fc:fa:d4:6e:f5:f8:22:ca:a5:56:06:e0:0c:d4: c6:5c:4d:68:5b:88:10:bb:9d:7a:aa:0a:95:06:2a: ad:40:0c:d9:ae:e8:9c:6b:b0:c6:2f:32:48:1c:2a: 18:70:4c:dd:76:1e:7a:60:1e:ce:7a:b0:ad:c7:30: 12:2f:4b:fc:0f:e0:a8:22:3d:40:8c:c4:7e:88:f6: 94:b8:f7:4f:e2:ca:19:8c:b2:88:c5:42:ed:77:bd: 73:80:93:0f:d0:47:be:0b:59:a9:43:c6:e4:44:e8: 88:08:15:51:89:19:64:c0:6a:c9:ee:4f:cf:56:47: e6:8a:0f:47:39:2b:a5:cb:a8:dc:12:ad:34:62:e1: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:63:1A:92:EF:83:B1:88:64:EA:15:BF:52:8B:66:9D:B4:CC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:92:d9:56:4c:5b:96:ad:6d:b8:50:0a:07:8e:5b:3d:a6:bc: c5:ce:b0:8f:d7:44:7f:1e:59:08:cc:cb:24:12:d0:ca:1e:e7: 20:6f:2b:a3:38:60:67:6b:1f:45:53:6e:28:66:f4:b4:9e:41: 3a:b5:01:83:aa:66:5f:ff:ea:2b:c2:bf:a7:3b:cf:4f:37:03: 2b:b7:91:f4:23:a0:28:5a:49:b6:3d:6d:c8:a3:45:4a:d9:58: 8c:55:34:fb:ce:e4:c6:77:0b:d0:90:2d:8d:1c:2e:af:56:a6: b8:15:e0:b0:bd:76:66:b0:b0:cb:2c:29:7f:d0:2c:8a:85:bc: f1:4d:d7:9d:62:01:6d:0f:94:3f:fd:22:48:62:3d:b1:96:07: 8a:07:49:37:80:2b:8b:b6:38:1e:21:6c:07:d0:7b:ed:55:ca: 71:16:50:50:c1:c2:a1:ad:a6:32:65:c1:db:1e:ab:83:d5:ee: aa:c2:e3:02:ff:e4:69:a7:29:7d:ac:85:5c:e9:41:12:ed:e5: c6:12:7f:1e:b2:40:ff:31:e1:d1:af:bb:5d:49:68:b4:d3:92: 44:c9:33:65:3a:03:05:01:ab:8f:49:b7:ca:f8:a4:12:1d:ac: 31:45:ea:81:f3:0d:94:ec:fc:ad:76:5e:15:1c:83:59:79:18: cc:57:c1:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rT6Cb5WfuM0q/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OWFjM2M5YTEtNDI0OC00MDBmLWI0YmQtZjRiZjY2ZTg3OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiBIoz4Yokf13vxtXkab/EhgDSmFzCUjq/vA 9G34WUPIiVibplSfck2CCe8/4CmKz3bhROOB7p1ncAQuiciUcwyaZq9l1S8SJ3GW 1qNCQKod6+9Tw5yhJvrxcPLmQM/j2tFQ4sv/ssa35pcMEEAilvSocLpRrwNR/PrU bvX4IsqlVgbgDNTGXE1oW4gQu516qgqVBiqtQAzZruica7DGLzJIHCoYcEzddh56 YB7OerCtxzASL0v8D+CoIj1AjMR+iPaUuPdP4soZjLKIxULtd71zgJMP0Ee+C1mp Q8bkROiICBVRiRlkwGrJ7k/PVkfmig9HOSuly6jcEq00YuG53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTFYxqS74OxiGTqFb9Si2adtMwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvM2ZhNzJkMTYtZWJkNy0z ZjkyLTgyZDQtNTM5ZjNhYmU3OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuS2VZMW5atbbhQCgeOWz2mvMXOsI/XRH8eWQjMyyQS0Moe5yBvK6M4 YGdrH0VTbihm9LSeQTq1AYOqZl//6ivCv6c7z083Ayu3kfQjoChaSbY9bcijRUrZ WIxVNPvO5MZ3C9CQLY0cLq9WprgV4LC9dmawsMssKX/QLIqFvPFN151iAW0PlD/9 IkhiPbGWB4oHSTeAK4u2OB4hbAfQe+1VynEWUFDBwqGtpjJlwdseq4PV7qrC4wL/ 5GmnKX2shVzpQRLt5cYSfx6yQP8x4dGvu11JaLTTkkTJM2U6AwUBq49Jt8r4pBId rDFF6oHzDZTs/K12XhUcg1l5GMxXwQg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:28:07 2026 by rpki-client