$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa File: 8fe2dd79-7709-320c-9724-e8e186a838df.roa (raw, json) Hash identifier: u7+Dd5GnVxxEkWsnP9wN9mXeqX8GK0SD9a6FyypEBe4= Subject key identifier: 38:8E:F1:EA:0D:32:41:4C:2E:DF:0D:08:9D:69:81:D2:B2:96:75:14 Certificate issuer: /CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d Certificate serial: 010D0C9F4328584F4974067051FD5D00FB2A3100 Authority key identifier: 84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26125 IP address blocks: 161.68.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:06:70:51:fd:5d:00:fb:2a:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28ce0f76-3aac-4382-8394-bb075b829eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:6e:83:a9:0b:38:43:00:99:ca:50:de:04: c3:14:cc:1a:61:c4:47:b1:84:de:12:2c:be:b3:58: 68:97:7a:bb:d1:dc:26:19:ce:02:43:92:2d:f6:0d: 83:bc:16:52:21:a0:11:ab:cd:00:bd:ea:d8:0b:18: 3e:f6:1f:93:c0:52:6c:85:6c:63:c2:e3:a5:20:e5: 7a:96:63:15:9a:fd:05:47:66:98:70:1c:5b:7d:95: 85:c9:29:2e:c2:d7:f8:5a:6b:e7:4e:4f:9a:f2:e5: 37:b3:77:fb:75:09:21:a0:ae:3e:07:22:5a:8d:a2: b1:c1:ae:d8:f2:bf:04:9b:5e:0b:2d:4f:00:5f:56: 64:ea:20:cb:22:84:97:64:b9:cc:b5:e2:bd:72:0f: 5e:93:3f:ce:33:f3:a8:bb:28:9b:a5:01:c2:68:e0: b8:b4:47:8b:3d:ab:6e:93:0f:54:a8:9c:d8:c8:d4: 20:85:0a:a3:6d:09:04:cc:33:2b:82:bd:aa:e6:6d: 1e:ef:4c:79:56:7c:35:aa:c1:58:80:11:11:83:84: 69:88:e2:74:68:b2:dc:73:46:41:1c:91:53:09:f7: 68:76:ee:c1:8b:ba:94:11:37:bd:cb:31:e3:ed:15: 22:3c:36:90:28:d8:08:62:66:8f:c7:64:e1:4b:01: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:F1:EA:0D:32:41:4C:2E:DF:0D:08:9D:69:81:D2:B2:96:75:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.crl X509v3 Authority Key Identifier: keyid:84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer sbgp-ipAddrBlock: critical IPv4: 161.68.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e4:3b:61:45:76:26:9e:78:98:97:da:c3:6a:e4:c0:12:fb: 5a:e0:e3:64:66:35:da:74:52:13:35:0a:79:cb:22:d6:df:1f: d0:5c:2e:1b:cf:56:14:18:68:0b:5c:9f:da:9a:04:08:b6:d2: c9:25:62:06:fb:57:4c:f5:54:8e:48:d6:2b:34:b1:a5:3d:fa: b6:2e:12:c8:ab:1b:c8:0e:16:d3:f1:31:92:c4:58:19:c1:81: e8:4e:64:0d:b4:c7:0f:86:7a:5a:f3:19:1b:93:06:a3:e3:3e: 35:ee:a5:a6:35:1c:cb:82:c7:dc:d9:0a:d4:ed:4e:72:7a:f4: 4f:2a:6d:44:d6:a6:41:7c:9b:93:de:5e:73:0c:76:c8:8c:0d: c1:74:7d:e6:42:88:88:88:89:8b:f7:f3:e8:1f:6b:4c:05:14: ec:7b:ee:c7:b6:52:a8:d4:d7:2d:5d:da:72:3c:00:2f:52:26: a3:b1:41:f0:ee:f6:fa:7d:cb:7c:79:ae:9b:54:eb:d0:2a:f4: bf:42:e5:e9:d3:0d:2b:ae:74:1c:e9:59:b0:9b:4d:7d:c0:db: 91:40:8f:43:d5:a9:c4:1a:bf:54:78:56:2d:31:0c:5e:29:df: 78:e4:e1:2f:dc:ad:df:ff:9e:0b:de:55:3a:ac:b6:1f:80:0a: 33:43:48:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAZwUf1dAPsqMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQyNTUyM2UtYTdkYy00Y2QyLWE5MzktYjFkYzY1NzBj YTVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhjZTBmNzYtM2FhYy00MzgyLTgzOTQtYmIwNzViODI5ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHhug6kLOEMAmcpQ3gTDFMwaYcRHsYTeEiy+ s1hol3q70dwmGc4CQ5It9g2DvBZSIaARq80AverYCxg+9h+TwFJshWxjwuOlIOV6 lmMVmv0FR2aYcBxbfZWFySkuwtf4WmvnTk+a8uU3s3f7dQkhoK4+ByJajaKxwa7Y 8r8Em14LLU8AX1Zk6iDLIoSXZLnMteK9cg9ekz/OM/OouyibpQHCaOC4tEeLPatu kw9UqJzYyNQghQqjbQkEzDMrgr2q5m0e70x5Vnw1qsFYgBERg4RpiOJ0aLLcc0ZB HJFTCfdodu7Bi7qUETe9yzHj7RUiPDaQKNgIYmaPx2ThSwGUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiO8eoNMkFMLt8NCJ1pgdKylnUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NDI1 NTIzZS1hN2RjLTRjZDItYTkzOS1iMWRjNjU3MGNhNWQvOGZlMmRkNzktNzcwOS0z MjBjLTk3MjQtZThlMTg2YTgzOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTQyNTUyM2UtYTdkYy00Y2QyLWE5 MzktYjFkYzY1NzBjYTVkLzk0MjU1MjNlLWE3ZGMtNGNkMi1hOTM5LWIxZGM2NTcw Y2E1ZC5jcmwwHwYDVR0jBBgwFoAUhF9bUPYWpL75oodzqh1+Yw73uX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NDI1NTIzZS1hN2RjLTRjZDItYTkzOS1iMWRj NjU3MGNhNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoUSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvkO2FFdiaeeJiX2sNq5MAS+1rg42RmNdp0UhM1CnnLItbfH9BcLhvP VhQYaAtcn9qaBAi20sklYgb7V0z1VI5I1is0saU9+rYuEsirG8gOFtPxMZLEWBnB gehOZA20xw+GelrzGRuTBqPjPjXupaY1HMuCx9zZCtTtTnJ69E8qbUTWpkF8m5Pe XnMMdsiMDcF0feZCiIiIiYv38+gfa0wFFOx77se2UqjU1y1d2nI8AC9SJqOxQfDu 9vp9y3x5rptU69Aq9L9C5enTDSuudBzpWbCbTX3A25FAj0PVqcQav1R4Vi0xDF4p 33jk4S/crd//ngveVTqsth+ACjNDSLo= -----END CERTIFICATE-----Generated at Sat Sep 26 12:46:53 2026 by rpki-client