$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/01665f21-a0f1-3ef7-8b87-e2c2995b5b2c.roa File: 01665f21-a0f1-3ef7-8b87-e2c2995b5b2c.roa (raw, json) Hash identifier: dWTOTkHqVvYtDy92fvlUgBBLdW1QGN2adPjz8QCaxeI= Subject key identifier: 4E:4E:B7:24:8F:DD:C4:02:2C:A8:C5:D0:AA:B2:D8:FE:41:25:82:25 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584F0F10762076EF8B50AE3D3980 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/01665f21-a0f1-3ef7-8b87-e2c2995b5b2c.roa Signing time: Fri 04 Sep 2026 03:05:45 +0000 ROA not before: Fri 04 Sep 2026 03:05:45 +0000 ROA not after: Thu 03 Dec 2026 04:05:45 +0000 asID: 10995 IP address blocks: 161.150.224.0/20 maxlen: 20 161.150.224.0/21 maxlen: 21 161.150.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:10:76:20:76:ef:8b:50:ae:3d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Sep 4 03:05:45 2026 GMT Not After : Dec 3 04:05:45 2026 GMT Subject: CN=b5de07e5-f79f-403b-8db3-ca6530b549b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:19:38:d7:e5:7b:f1:6a:86:8c:92:0b:66: 6d:90:ec:27:30:fb:2c:5e:4d:25:94:b6:9a:4d:c0: 3f:2d:26:0d:e1:3b:c0:e1:f2:ae:a8:12:b1:1a:d7: fd:95:07:15:be:cc:df:e9:a4:9e:30:b0:fb:43:3b: a5:e3:b6:af:f0:95:31:92:2b:ad:dc:c1:eb:f8:a6: b6:11:e2:a8:58:eb:c7:f6:81:12:eb:c1:07:b5:91: af:86:5b:de:2b:cf:fa:93:e7:cc:d9:c1:82:86:60: 69:fe:0e:55:c0:34:62:4d:5d:de:dc:f3:e8:9a:87: 46:39:7b:75:b9:a8:44:9b:f7:b2:d4:45:f6:29:fb: 52:13:6b:5a:94:e8:22:f9:0c:bd:ad:53:81:64:9f: 84:77:ff:6a:da:84:42:95:62:df:0f:80:ed:d7:7f: a1:b8:38:a0:eb:1a:5b:3c:35:fb:eb:a6:fb:f0:e6: 7d:c8:2c:d6:77:59:b7:95:52:3d:0c:1d:a9:a2:9a: 16:96:2c:70:d1:10:26:47:ff:6a:9b:a8:66:f6:c4: 11:e7:1a:e1:a7:0b:c7:a1:6e:4f:e9:c4:31:29:38: 5c:b5:9b:db:c9:6a:13:f9:35:8d:1f:07:f9:f8:a3: 91:73:96:71:62:a9:17:18:57:a7:73:5c:34:5d:9d: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4E:B7:24:8F:DD:C4:02:2C:A8:C5:D0:AA:B2:D8:FE:41:25:82:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/01665f21-a0f1-3ef7-8b87-e2c2995b5b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f2:a2:89:cf:ee:ca:6e:fc:9f:8e:61:16:b9:03:e8:2d:26: ab:0e:0a:53:97:6a:8a:ae:8b:fc:18:f3:9d:9c:ea:6c:6f:47: 2c:e4:20:e9:c3:26:dc:db:51:a6:12:65:fc:a0:97:4c:7c:9a: 4d:d9:0d:43:2b:29:58:4e:49:d3:1c:8f:77:cb:d1:44:ff:d9: 93:ff:40:92:66:91:22:3c:ce:7b:67:77:09:31:af:00:fc:ae: cf:d2:1d:e5:d0:1d:f6:9e:aa:1a:41:d2:9c:9b:0d:0a:38:bc: 20:e4:84:57:eb:60:ce:bf:7d:a4:35:58:a4:f3:44:75:49:44: 6f:37:df:8d:9b:88:6d:38:4f:30:55:83:79:8f:cc:94:f0:ad: 5a:71:f7:38:5e:5e:73:d7:1b:04:3e:4d:c2:da:3c:b8:34:2e: 19:a3:78:09:33:63:ed:25:f2:c6:f7:ea:3c:c1:ff:e5:5c:0a: f7:92:12:3c:e2:b6:92:a8:d4:05:77:16:aa:bb:2c:0e:4d:8c: 3d:60:54:48:92:46:7e:2a:4a:cd:8c:e0:a6:6c:2b:3c:d1:e8: 12:8b:eb:41:5c:ea:3e:e6:73:59:d4:78:0b:36:7f:3f:be:25: be:64:7c:8f:83:6f:f8:04:b3:27:ae:46:50:81:40:2f:3e:06: 67:a7:f1:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PEHYgdu+LUK49OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDkwNDAzMDU0NVoXDTI2MTIwMzA0MDU0NVowLzEtMCsGA1UEAxMk YjVkZTA3ZTUtZjc5Zi00MDNiLThkYjMtY2E2NTMwYjU0OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp90ZONfle/FqhoySC2ZtkOwnMPssXk0llLaa TcA/LSYN4TvA4fKuqBKxGtf9lQcVvszf6aSeMLD7Qzul47av8JUxkiut3MHr+Ka2 EeKoWOvH9oES68EHtZGvhlveK8/6k+fM2cGChmBp/g5VwDRiTV3e3PPomodGOXt1 uahEm/ey1EX2KftSE2talOgi+Qy9rVOBZJ+Ed/9q2oRClWLfD4Dt13+huDig6xpb PDX766b78OZ9yCzWd1m3lVI9DB2popoWlixw0RAmR/9qm6hm9sQR5xrhpwvHoW5P 6cQxKThctZvbyWoT+TWNHwf5+KORc5ZxYqkXGFenc1w0XZ0tewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5OtySP3cQCLKjF0Kqy2P5BJYIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMDE2NjVmMjEtYTBmMS0z ZWY3LThiODctZTJjMjk5NWI1YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXyoonP7spu/J+OYRa5A+gtJqsOClOXaoqui/wY852c6mxvRyzkIOnD JtzbUaYSZfygl0x8mk3ZDUMrKVhOSdMcj3fL0UT/2ZP/QJJmkSI8zntndwkxrwD8 rs/SHeXQHfaeqhpB0pybDQo4vCDkhFfrYM6/faQ1WKTzRHVJRG83342biG04TzBV g3mPzJTwrVpx9zheXnPXGwQ+TcLaPLg0LhmjeAkzY+0l8sb36jzB/+VcCveSEjzi tpKo1AV3Fqq7LA5NjD1gVEiSRn4qSs2M4KZsKzzR6BKL60Fc6j7mc1nUeAs2fz++ Jb5kfI+Db/gEsyeuRlCBQC8+Bmen8cU= -----END CERTIFICATE-----Generated at Wed Sep 23 10:04:35 2026 by rpki-client