$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa File: a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa (raw, json) Hash identifier: 5A5GYDdTPBo7Mo6FGI0OuPZW0f4SAUR0WAS8iMgJ2Ro= Subject key identifier: 3A:FC:9B:C5:1F:04:54:23:9A:D2:99:06:09:13:17:40:55:06:11:20 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584FA85E470F570925BAC2CCD740 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 14298 IP address blocks: 161.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:47:0f:57:09:25:ba:c2:cc:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=ce111925-7587-4b8d-9785-642e982e5f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:8e:76:91:59:88:82:ba:72:9e:fe:75:20: 0d:1c:b8:05:80:50:ac:d7:d2:af:48:39:f0:9a:98: 4c:a0:90:72:80:1b:bc:14:2a:2c:3e:a4:62:ab:6e: e7:f0:77:42:cd:0f:c6:04:dd:ad:5b:1a:5d:47:95: a7:88:9d:e8:c9:89:f4:5c:a3:64:b5:80:30:8f:8d: c8:be:c8:49:be:d1:2d:b7:7f:74:99:16:d2:85:26: 78:1b:10:b0:bc:e8:c1:f6:49:d3:e7:e9:48:7b:a9: 02:b4:80:b6:f7:30:43:d2:6f:a3:6c:ad:7a:e3:84: 2e:d8:c1:df:45:5a:d1:f4:7b:3e:a1:e1:54:54:15: 4f:64:00:28:08:f6:da:60:de:64:fb:c6:58:3b:46: dc:92:e6:d7:55:8a:60:ff:fd:be:7c:2d:a4:1e:fc: b7:ad:ec:e3:c2:f8:61:86:ed:63:5d:df:7f:c8:75: 87:bb:b9:27:94:d8:6d:4a:ae:bd:bf:ad:67:07:6c: fe:51:de:5f:db:ae:d4:70:8a:16:ad:e3:ad:65:d0: 3d:25:d9:db:a5:19:f9:d5:f5:87:b0:d6:82:9e:be: 3e:fe:3d:27:54:76:ab:e6:a0:f3:71:17:20:a0:d0: 6f:b3:be:02:0a:ec:f8:45:24:15:af:f4:b5:c0:72: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:9B:C5:1F:04:54:23:9A:D2:99:06:09:13:17:40:55:06:11:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 161.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:45:e9:c4:ee:ab:73:bd:c0:ba:a7:f5:db:0e:a3:ca:9e:e1: 7c:99:50:54:cc:82:77:fd:b6:97:34:0a:1f:f2:cf:da:45:94: ef:ea:2d:45:3c:c2:9e:e5:2e:0c:41:48:c1:3b:b5:48:22:64: 9b:44:b9:3d:25:61:d4:40:27:de:47:73:a1:5b:d6:dc:c4:5e: fa:e2:6e:81:e9:48:2a:98:ab:5c:f8:7b:e9:13:c5:82:b2:e4: 86:1b:4f:1b:7e:94:48:ca:44:a8:d3:a6:ad:0e:49:b0:40:91: 2f:c0:90:34:f0:9a:10:8d:53:b8:fe:94:93:2e:92:33:25:8f: f7:10:9c:3b:b0:de:49:0c:5c:5c:da:d3:a8:06:d8:6f:c3:b5: 84:34:46:62:60:47:bd:6d:5f:ac:22:2a:10:35:aa:0a:bc:2e: 83:f8:1e:aa:2b:db:bd:c9:9e:fb:87:8e:41:e9:08:98:bf:64: 92:72:36:12:64:32:67:90:62:b5:f2:2c:87:b2:40:17:73:35: bb:a0:00:d8:67:05:51:31:9a:96:2c:d7:2d:69:cf:e4:6f:d5: 7e:f7:be:7c:8d:91:8b:d5:72:a3:d3:ac:b8:5c:03:9f:93:2c: f4:49:b7:40:18:84:4f:83:c3:2f:eb:80:6b:de:c7:d2:68:8a: 15:a0:a2:2f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+oXkcPVwklusLM10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2UxMTE5MjUtNzU4Ny00YjhkLTk3ODUtNjQyZTk4MmU1ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSOdpFZiIK6cp7+dSANHLgFgFCs19KvSDnw mphMoJBygBu8FCosPqRiq27n8HdCzQ/GBN2tWxpdR5WniJ3oyYn0XKNktYAwj43I vshJvtEtt390mRbShSZ4GxCwvOjB9knT5+lIe6kCtIC29zBD0m+jbK1644Qu2MHf RVrR9Hs+oeFUVBVPZAAoCPbaYN5k+8ZYO0bckubXVYpg//2+fC2kHvy3rezjwvhh hu1jXd9/yHWHu7knlNhtSq69v61nB2z+Ud5f267UcIoWreOtZdA9JdnbpRn51fWH sNaCnr4+/j0nVHar5qDzcRcgoNBvs74CCuz4RSQVr/S1wHIrawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDr8m8UfBFQjmtKZBgkTF0BVBhEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYTA3YzJkODgtNGE0MC0z YTM2LWE4YTUtMThkODMxYzlkMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoVAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvkXpxO6rc73Auqf12w6jyp7hfJlQVMyCd/22lzQKH/LP2kWU7+otRTzC nuUuDEFIwTu1SCJkm0S5PSVh1EAn3kdzoVvW3MRe+uJugelIKpirXPh76RPFgrLk hhtPG36USMpEqNOmrQ5JsECRL8CQNPCaEI1TuP6Uky6SMyWP9xCcO7DeSQxcXNrT qAbYb8O1hDRGYmBHvW1frCIqEDWqCrwug/geqivbvcme+4eOQekImL9kknI2EmQy Z5BitfIsh7JAF3M1u6AA2GcFUTGalizXLWnP5G/Vfve+fI2Ri9Vyo9OsuFwDn5Ms 9Em3QBiET4PDL+uAa97H0miKFaCiLw== -----END CERTIFICATE-----Generated at Sun Nov 15 14:27:36 2026 by rpki-client