$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa File: 26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa (raw, json) Hash identifier: +atkzJ5SH+LrF/Mkwvc+I9jKptp4zd19ciRYZ0Fbz5w= Subject key identifier: 5A:57:FE:A8:89:C7:AE:C6:69:A4:71:28:E4:26:27:CF:1F:22:A9:80 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584F268D00977D4F75F2992B1580 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 22125 IP address blocks: 161.150.0.0/21 maxlen: 21 161.150.128.0/20 maxlen: 20 161.150.128.0/21 maxlen: 21 161.150.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:00:97:7d:4f:75:f2:99:2b:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=cea46f93-7ba5-443c-b676-aacdbddb4804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:e3:12:06:cc:f2:97:eb:b0:27:f6:3a:e2: e9:63:4d:ab:59:9f:87:96:e1:42:5e:f5:58:80:5d: 31:4d:5b:85:fd:da:4c:63:2c:84:5b:1d:e6:34:27: ff:49:2a:3b:57:86:7a:14:7e:02:e0:56:dc:d5:2d: 52:a9:3f:77:4a:00:b3:e2:91:b3:ae:56:76:ef:4b: 65:88:cf:59:43:63:cb:68:b5:24:53:32:41:9b:ba: 85:83:ec:a7:13:dd:cf:85:77:30:c2:84:62:0a:ed: 0b:0f:05:6b:e4:c8:f3:ce:b6:71:09:0d:a9:01:a8: 80:e3:af:9f:87:c8:14:26:3d:0d:d5:fd:ce:31:89: 77:23:68:16:c2:03:2f:16:de:aa:09:aa:37:2f:90: 1c:b0:4f:7e:59:47:4a:4b:57:c4:2d:62:a3:57:a1: f9:3a:ac:2e:c5:c9:14:58:23:62:c9:67:56:b4:8d: c2:ad:c6:92:6f:d1:ea:3e:68:5b:45:dd:44:45:00: f8:c7:1f:e4:f9:cf:28:db:2b:5a:67:e2:73:87:31: 0d:b0:a1:a5:bd:a4:73:73:a2:95:c1:47:b9:95:eb: 43:9b:ef:ad:12:77:9b:ae:35:4c:02:bf:d8:5c:8e: df:8f:7c:46:e1:ce:c2:47:e0:52:78:34:4a:50:7d: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:57:FE:A8:89:C7:AE:C6:69:A4:71:28:E4:26:27:CF:1F:22:A9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.0.0/21 161.150.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:33:75:79:dc:77:18:5f:c6:b3:ef:3a:c3:b1:9a:d6:28:4d: fa:ed:73:da:91:9c:a0:b4:c9:b6:8b:bd:c1:9c:4b:75:a9:5a: e6:2f:6e:ce:0f:c3:3b:d3:a6:da:4c:cf:f1:55:c2:cd:26:8f: ed:86:68:c0:cd:56:0c:c3:7e:96:3d:24:5b:4f:71:c8:48:31: 10:27:71:d1:85:20:fa:48:87:4f:5e:0a:89:25:0d:6a:83:93: 64:24:ce:a6:ca:d8:9a:12:a0:ee:17:65:18:7c:5e:76:1b:3d: 3a:83:4c:f9:0d:0d:0a:28:93:ef:db:fa:44:05:9b:e4:e1:e5: cd:ce:72:a1:2d:2a:5b:be:42:14:51:7b:45:fc:5a:c5:63:b3: 03:3e:b5:31:8f:53:0c:e1:f5:28:92:dc:a4:fd:c3:42:f8:2a: d8:8b:c3:a1:3b:96:61:93:27:13:bc:1e:6f:3a:c1:71:66:ac: 87:ed:68:73:e3:03:ef:19:73:34:43:c7:1b:00:f9:74:11:9b: 33:a6:8b:84:36:51:0d:25:97:de:6e:62:08:07:78:30:32:1d: f1:77:c3:ae:4d:dd:fe:2f:8f:bb:b8:ae:b6:e5:33:4c:7b:84: 73:cc:fc:08:1f:bf:c0:f9:58:8f:1e:35:56:04:d7:6a:22:e9: cf:ae:fe:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8mjQCXfU918pkrFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk Y2VhNDZmOTMtN2JhNS00NDNjLWI2NzYtYWFjZGJkZGI0ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKXjEgbM8pfrsCf2OuLpY02rWZ+HluFCXvVY gF0xTVuF/dpMYyyEWx3mNCf/SSo7V4Z6FH4C4Fbc1S1SqT93SgCz4pGzrlZ270tl iM9ZQ2PLaLUkUzJBm7qFg+ynE93PhXcwwoRiCu0LDwVr5MjzzrZxCQ2pAaiA46+f h8gUJj0N1f3OMYl3I2gWwgMvFt6qCao3L5AcsE9+WUdKS1fELWKjV6H5OqwuxckU WCNiyWdWtI3CrcaSb9HqPmhbRd1ERQD4xx/k+c8o2ytaZ+JzhzENsKGlvaRzc6KV wUe5letDm++tEnebrjVMAr/YXI7fj3xG4c7CR+BSeDRKUH178wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFpX/qiJx67GaaRxKOQmJ88fIqmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMjZjNmMwNGUtM2ZjNy0z MmEyLWE4M2MtYmQyMmE2ZmFlYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDoZYAAwQE oZaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADQzdXncdxhfxrPvOsOxmtYoTfrtc9qRnKC0ybaLvcGcS3Wp WuYvbs4PwzvTptpMz/FVws0mj+2GaMDNVgzDfpY9JFtPcchIMRAncdGFIPpIh09e CoklDWqDk2QkzqbK2JoSoO4XZRh8XnYbPTqDTPkNDQook+/b+kQFm+Th5c3OcqEt Klu+QhRRe0X8WsVjswM+tTGPUwzh9SiS3KT9w0L4KtiLw6E7lmGTJxO8Hm86wXFm rIftaHPjA+8ZczRDxxsA+XQRmzOmi4Q2UQ0ll95uYggHeDAyHfF3w65N3f4vj7u4 rrblM0x7hHPM/Agfv8D5WI8eNVYE12oi6c+u/qE= -----END CERTIFICATE-----Generated at Tue Sep 22 12:56:29 2026 by rpki-client