$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa File: 004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa (raw, json) Hash identifier: vfiAFob2GrAfFIWxzpP82qq7QvRDcrCfiR7Sc8WjO/4= Subject key identifier: E3:40:65:5A:1E:05:A7:5F:F1:73:CF:41:D5:F0:5C:68:85:DC:7F:1F Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F0D6CD97DADC99C0DDACAE200 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396502 IP address blocks: 161.129.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d9:7d:ad:c9:9c:0d:da:ca:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=fe28d87e-b67d-4635-bf72-357d7b07968f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:b4:f1:74:5e:8f:ca:59:01:aa:c4:7d:3e: 89:1a:1f:49:d2:a2:df:a4:2e:a3:7f:f0:86:59:e1: 13:df:90:c5:f4:3b:9d:c7:42:ce:c9:39:6f:18:70: da:f5:e6:b1:7d:6f:da:ec:6f:0f:94:b4:3c:0f:06: e0:5e:6e:6a:2b:0b:c7:45:98:77:48:18:37:a2:91: fb:71:ae:01:18:19:b9:b7:da:d5:20:8f:0d:1f:44: 9b:fd:3d:70:97:8b:6b:37:d5:2f:fe:d3:4e:32:07: 34:f4:32:08:57:f7:6c:c2:d0:b7:d1:37:22:42:b4: 2b:a2:35:d5:c0:26:39:7c:ae:6c:75:b4:05:c0:ea: 5b:32:81:d9:1a:05:a2:87:10:a7:54:2f:e7:22:a7: 7e:57:3d:33:01:76:16:9d:d5:b3:b7:57:02:f0:4c: 6e:82:0c:4f:79:88:1a:c9:37:c1:2b:b1:78:12:66: e1:ec:9e:ca:35:02:37:1d:45:37:32:34:90:8e:c0: cd:ef:39:00:e7:42:50:75:71:1d:67:b0:48:56:e6: f9:12:56:50:0e:ae:62:b4:33:2b:6a:61:18:11:f4: 95:ae:62:ad:f1:94:74:6f:ed:72:22:7e:d0:f6:0e: c9:05:d6:a8:0c:34:6c:97:dc:65:39:5c:0f:21:79: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:40:65:5A:1E:05:A7:5F:F1:73:CF:41:D5:F0:5C:68:85:DC:7F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 161.129.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:8b:f1:a2:59:ff:f5:f5:51:c9:74:17:26:8f:90:b4:05:50: bc:b8:35:8e:79:74:76:01:e3:d9:0e:a4:2c:b4:12:ff:2d:04: da:3d:d8:7b:17:53:c2:52:f6:b2:83:63:8b:c4:61:78:1a:bc: 5a:50:db:8c:53:dc:28:dd:36:89:03:21:ee:c2:c9:8f:14:74: 1a:5a:bc:1c:8b:9f:02:e4:c2:f4:78:b2:f7:2d:0c:90:f0:c7: 24:a6:00:1b:97:96:81:f7:d5:0d:f5:ea:fe:c9:4d:79:df:89: d1:2e:d1:6d:52:d8:dc:0b:85:12:7b:3b:23:a3:cf:9f:bd:b9: a5:d6:5b:93:23:35:49:7a:a3:82:ae:ae:a4:6a:88:35:38:6a: be:d1:55:6a:6e:9c:fd:be:79:d0:64:be:c1:a4:81:1a:c9:27: 29:30:b8:d5:98:7b:be:ff:77:28:90:26:37:a6:5d:8a:b2:be: 62:81:1f:d3:28:41:f4:95:3c:a7:77:2b:4c:ea:9b:4f:73:d6: 9c:79:12:11:22:77:79:be:c7:1a:16:9a:c1:e7:52:f8:3c:68: 92:c4:1c:b2:4e:9d:c8:04:0c:68:0d:1a:b8:50:4d:bc:9f:e8: 81:cd:ee:2c:55:9e:a1:7f:13:6d:5e:ce:7c:b5:3e:3a:9e:0f: ea:b7:24:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNl9rcmcDdrK4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmUyOGQ4N2UtYjY3ZC00NjM1LWJmNzItMzU3ZDdiMDc5NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaK08XRej8pZAarEfT6JGh9J0qLfpC6jf/CG WeET35DF9Dudx0LOyTlvGHDa9eaxfW/a7G8PlLQ8DwbgXm5qKwvHRZh3SBg3opH7 ca4BGBm5t9rVII8NH0Sb/T1wl4trN9Uv/tNOMgc09DIIV/dswtC30TciQrQrojXV wCY5fK5sdbQFwOpbMoHZGgWihxCnVC/nIqd+Vz0zAXYWndWzt1cC8ExuggxPeYga yTfBK7F4Embh7J7KNQI3HUU3MjSQjsDN7zkA50JQdXEdZ7BIVub5ElZQDq5itDMr amEYEfSVrmKt8ZR0b+1yIn7Q9g7JBdaoDDRsl9xlOVwPIXkjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONAZVoeBadf8XPPQdXwXGiF3H8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvMDA0YzM5M2YtNmE3Yi0z Y2E3LWIxMTktM2ZmN2VhODMxM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCL8aJZ//X1Ucl0FyaPkLQFULy4NY55dHYB49kOpCy0Ev8tBNo92HsX U8JS9rKDY4vEYXgavFpQ24xT3CjdNokDIe7CyY8UdBpavByLnwLkwvR4svctDJDw xySmABuXloH31Q316v7JTXnfidEu0W1S2NwLhRJ7OyOjz5+9uaXWW5MjNUl6o4Ku rqRqiDU4ar7RVWpunP2+edBkvsGkgRrJJykwuNWYe77/dyiQJjemXYqyvmKBH9Mo QfSVPKd3K0zqm09z1px5EhEid3m+xxoWmsHnUvg8aJLEHLJOncgEDGgNGrhQTbyf 6IHN7ixVnqF/E21ezny1PjqeD+q3JLw= -----END CERTIFICATE-----Generated at Wed Sep 30 20:54:52 2026 by rpki-client