$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa File: a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa (raw, json) Hash identifier: 8s+MWDnnSuLFLV31uuu1Z3ndHhtbgTQt6eMgybHVKoo= Subject key identifier: BB:E0:EF:DB:5B:B5:45:AF:1E:86:2A:39:2C:81:E0:2B:2E:A3:32:52 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584F06729C157A7BBD94FB1424F4 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 14298 IP address blocks: 161.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9c:15:7a:7b:bd:94:fb:14:24:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=0a23304b-59ab-4ec7-b237-5241d55ccac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:73:5d:cf:6d:ef:07:97:5d:c8:f4:a1:85: 06:cc:56:b6:96:4d:08:32:58:be:00:f7:1e:05:08: 77:61:ef:85:d2:0a:eb:d9:8b:b1:d6:61:12:84:9a: 63:d7:dc:8e:89:23:64:72:b2:70:fa:cb:e4:88:f6: 50:79:51:ff:7f:45:87:73:84:01:c9:f5:73:10:6b: bf:2f:e0:59:f4:1b:95:cd:cb:d8:56:7f:c6:11:2e: e6:a0:83:f4:e6:26:09:09:6f:71:12:a0:1e:da:e1: 8a:32:05:56:28:ec:36:54:0b:a4:cc:ff:47:27:a1: e5:41:8a:b0:0f:4c:03:00:b2:14:91:ca:8d:f9:c0: 52:a4:4d:dd:93:88:dc:27:75:db:af:d9:74:3a:d7: df:e2:89:d7:69:be:98:68:81:c8:7e:71:2a:c1:9e: ac:5c:4c:49:8a:70:0a:49:58:75:24:85:b8:11:17: ac:c2:7c:df:27:da:fb:cb:86:ef:b9:94:86:59:ed: d1:48:b2:d2:f3:21:15:b7:16:b7:20:e4:8c:e3:c8: b4:af:d9:ef:8e:e4:87:49:ea:bb:0a:42:f1:f5:3f: 4e:8f:ff:75:63:3d:40:f0:af:f7:98:9d:10:46:cd: d2:58:1c:c8:8a:eb:6c:ab:ef:74:48:d5:38:72:00: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:EF:DB:5B:B5:45:AF:1E:86:2A:39:2C:81:E0:2B:2E:A3:32:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 161.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bd:d3:b2:7b:0b:97:84:87:28:2b:5e:16:b5:a3:12:c7:02: 93:eb:95:c0:04:e5:7f:4f:4d:77:c5:25:b5:68:81:c8:f4:ba: 87:d1:ec:66:cf:30:3e:d2:33:7b:f3:00:c5:44:63:e1:ab:f1: ea:89:dc:1d:e3:08:9b:6a:5e:ed:64:9c:59:5a:b8:6e:2e:15: df:3b:e5:52:71:2d:85:32:22:b9:3c:fa:75:dc:8e:7d:9b:d4: 7f:52:ea:ae:4e:b5:58:c6:41:5f:d5:0a:7e:9e:c7:8b:a3:79: fc:fc:c2:70:0e:2d:14:57:91:dc:cc:2b:d0:d1:bc:b5:3d:de: ec:0f:a6:ba:b5:d5:8a:31:03:7c:e6:87:a5:07:73:e1:33:84: e7:63:56:56:0e:9e:c2:02:85:b7:c4:2f:fc:e6:ea:08:3d:37: 5e:3b:27:cd:d1:73:25:a1:77:ec:6c:0a:27:33:67:3d:13:1c: 4f:a3:be:62:45:fd:b8:e4:1a:41:53:1e:9d:cb:84:a6:b2:b1: 65:0f:52:bb:93:8e:41:d8:eb:e4:8d:ec:ef:f0:8a:db:52:41: c1:e9:83:be:8c:32:f9:e5:8a:02:2c:31:f9:ca:bf:93:d8:b0: 73:bb:3e:87:c9:c6:55:fb:71:9d:a7:40:84:43:9a:2b:07:92: 17:dd:18:d1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8GcpwVenu9lPsUJPQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGEyMzMwNGItNTlhYi00ZWM3LWIyMzctNTI0MWQ1NWNjYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjxzXc9t7weXXcj0oYUGzFa2lk0IMli+APce BQh3Ye+F0grr2Yux1mEShJpj19yOiSNkcrJw+svkiPZQeVH/f0WHc4QByfVzEGu/ L+BZ9BuVzcvYVn/GES7moIP05iYJCW9xEqAe2uGKMgVWKOw2VAukzP9HJ6HlQYqw D0wDALIUkcqN+cBSpE3dk4jcJ3Xbr9l0Otff4onXab6YaIHIfnEqwZ6sXExJinAK SVh1JIW4EReswnzfJ9r7y4bvuZSGWe3RSLLS8yEVtxa3IOSM48i0r9nvjuSHSeq7 CkLx9T9Oj/91Yz1A8K/3mJ0QRs3SWBzIiutsq+90SNU4cgCCtwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLvg79tbtUWvHoYqOSyB4CsuozJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYTA3YzJkODgtNGE0MC0z YTM2LWE4YTUtMThkODMxYzlkMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoVAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEb3TsnsLl4SHKCteFrWjEscCk+uVwATlf09Nd8UltWiByPS6h9HsZs8w PtIze/MAxURj4avx6oncHeMIm2pe7WScWVq4bi4V3zvlUnEthTIiuTz6ddyOfZvU f1Lqrk61WMZBX9UKfp7Hi6N5/PzCcA4tFFeR3Mwr0NG8tT3e7A+murXVijEDfOaH pQdz4TOE52NWVg6ewgKFt8Qv/ObqCD03XjsnzdFzJaF37GwKJzNnPRMcT6O+YkX9 uOQaQVMencuEprKxZQ9Su5OOQdjr5I3s7/CK21JBwemDvowy+eWKAiwx+cq/k9iw c7s+h8nGVftxnadAhEOaKweSF90Y0Q== -----END CERTIFICATE-----Generated at Tue Sep 22 12:13:48 2026 by rpki-client