$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa File: 3404db15-b0e9-3f6c-9310-c35968fb799f.roa (raw, json) Hash identifier: oT5TZgfEtUbaoVNP3Yn8Ua94rtOT7vqxMhpgt1h2AXc= Subject key identifier: 03:FA:91:B7:8C:5E:E2:AC:EB:B4:55:39:3B:57:9B:37:63:73:2E:3D Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584EF5B20FAB0D7EFD7B430FA780 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 22125 IP address blocks: 161.150.120.0/23 maxlen: 23 161.150.120.0/24 maxlen: 24 161.150.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0f:ab:0d:7e:fd:7b:43:0f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=697e3385-cee0-411f-a61e-cc00dcbca123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:a4:45:d0:3c:f1:c3:b2:19:cc:c8:4c:40: 62:61:24:ac:04:bf:c2:66:a6:37:ae:c1:cb:76:8d: 7f:be:ee:10:a1:c6:28:a1:a7:c9:e2:2e:c5:0c:df: 51:9b:c5:59:77:5e:a3:c6:55:3c:a9:89:8b:d5:43: ec:a4:f4:47:31:cf:bd:a2:3d:0c:cb:af:ad:ca:00: c5:21:8d:c5:e6:cd:d2:e6:a3:de:71:e5:e8:f2:78: c0:81:36:e4:2a:50:d7:52:13:d2:9d:4b:e5:f2:00: 84:9e:40:8c:17:ab:e2:65:f6:41:04:d6:1c:b9:af: 74:11:b9:75:d9:4c:3e:3d:9a:06:ee:61:f8:cd:c6: df:7b:eb:04:3c:8b:8d:54:c4:90:35:ed:9d:da:07: fa:b4:49:a9:ca:e2:f5:20:2b:bc:70:e2:70:e4:fb: e3:39:bd:30:56:03:6a:04:ba:c1:4c:f1:45:f2:cb: b4:c1:6c:f5:31:de:a5:56:1d:12:25:f1:79:c5:69: ce:4d:d2:88:b2:fb:22:91:0f:54:49:c6:fc:c4:15: 68:35:ed:64:19:62:8b:34:4e:8e:bd:39:11:07:c5: 08:aa:33:93:ed:08:60:30:60:71:87:be:f0:d4:56: cc:ea:9b:46:ef:de:b3:8f:a9:e7:1b:41:c7:d0:93: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:91:B7:8C:5E:E2:AC:EB:B4:55:39:3B:57:9B:37:63:73:2E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3404db15-b0e9-3f6c-9310-c35968fb799f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a7:12:67:d3:c1:e9:5a:d1:c8:06:df:4f:af:a2:11:15:91: eb:5a:c2:3d:24:be:38:b0:9e:4b:ee:bd:98:79:4c:15:e4:f7: 80:1e:54:3a:61:f9:6d:a5:4e:92:49:f8:13:c6:85:44:80:81: 5b:69:cc:46:df:b8:80:c2:13:e5:5a:34:83:a1:d8:7e:22:d5: 75:7c:43:c4:8c:02:d4:ac:7e:08:71:26:36:17:a3:68:ad:9e: 81:e4:1d:5f:08:61:6d:47:13:01:6c:f5:e4:e8:c4:0b:bf:18: 48:31:9c:a4:91:54:4e:09:53:e9:ce:be:ee:91:d3:e0:36:3e: 3c:71:dd:23:9b:3e:dc:30:d5:78:13:22:c7:01:dd:0f:52:34: 78:8e:a9:37:f7:66:51:5a:e8:99:d0:7e:59:23:4d:64:8c:ca: ec:0d:01:56:bc:a7:14:4a:03:4f:98:c4:68:8c:49:f2:65:09: 98:40:db:9b:4f:a2:4d:41:8c:57:31:17:55:b2:a4:df:ea:57: 57:8d:5e:61:4a:7a:46:ac:5e:fd:c0:b4:13:7a:21:37:75:95: 85:db:24:93:c3:86:42:d5:57:86:d9:95:85:53:74:f5:5d:8e: a0:4d:03:bf:03:3f:b4:74:8f:c6:38:d2:0f:9d:7d:9e:8a:0e: a6:6d:8d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sg+rDX79e0MPp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njk3ZTMzODUtY2VlMC00MTFmLWE2MWUtY2MwMGRjYmNhMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ekRdA88cOyGczITEBiYSSsBL/CZqY3rsHL do1/vu4QocYooafJ4i7FDN9Rm8VZd16jxlU8qYmL1UPspPRHMc+9oj0My6+tygDF IY3F5s3S5qPeceXo8njAgTbkKlDXUhPSnUvl8gCEnkCMF6viZfZBBNYcua90Ebl1 2Uw+PZoG7mH4zcbfe+sEPIuNVMSQNe2d2gf6tEmpyuL1ICu8cOJw5PvjOb0wVgNq BLrBTPFF8su0wWz1Md6lVh0SJfF5xWnOTdKIsvsikQ9UScb8xBVoNe1kGWKLNE6O vTkRB8UIqjOT7QhgMGBxh77w1FbM6ptG796zj6nnG0HH0JMfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6kbeMXuKs67RVOTtXmzdjcy49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMzQwNGRiMTUtYjBlOS0z ZjZjLTkzMTAtYzM1OTY4ZmI3OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoZZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqnEmfTwela0cgG30+vohEVketawj0kvjiwnkvuvZh5TBXk94AeVDph +W2lTpJJ+BPGhUSAgVtpzEbfuIDCE+VaNIOh2H4i1XV8Q8SMAtSsfghxJjYXo2it noHkHV8IYW1HEwFs9eToxAu/GEgxnKSRVE4JU+nOvu6R0+A2Pjxx3SObPtww1XgT IscB3Q9SNHiOqTf3ZlFa6JnQflkjTWSMyuwNAVa8pxRKA0+YxGiMSfJlCZhA25tP ok1BjFcxF1WypN/qV1eNXmFKekasXv3AtBN6ITd1lYXbJJPDhkLVV4bZlYVTdPVd jqBNA78DP7R0j8Y40g+dfZ6KDqZtjXk= -----END CERTIFICATE-----Generated at Wed Sep 23 12:03:43 2026 by rpki-client