$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/a0ee5ded-8067-3ea3-b8f8-d6ac00f70c09.roa File: a0ee5ded-8067-3ea3-b8f8-d6ac00f70c09.roa (raw, json) Hash identifier: u0xftXhFCfF2RtD8kQc/utbFSF+SUu67Dn73avvQ/Tw= Subject key identifier: A6:57:F4:50:B2:BC:DC:F5:F7:6D:40:77:05:8E:4C:D6:D6:26:AD:3D Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584F3A17D93E6C18191E33BDFB80 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/a0ee5ded-8067-3ea3-b8f8-d6ac00f70c09.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 10995 IP address blocks: 161.150.40.0/21 maxlen: 21 161.150.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d9:3e:6c:18:19:1e:33:bd:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=052d7d55-e2c2-42c9-b6ea-be0502a3c99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:a6:f7:f3:46:ea:8e:e6:54:bf:94:36:b0: 56:82:e8:f5:68:03:58:8e:17:bf:4b:89:9a:a9:ec: 62:a6:df:2e:34:9e:d2:09:e4:34:e2:b1:27:44:c3: 06:48:34:30:c4:2f:5e:ba:e3:49:7d:7e:af:50:7c: 4a:d2:78:1e:c1:d5:57:92:e9:8a:f9:5c:b9:7a:12: 1c:9d:6b:39:c5:82:05:22:33:e5:83:76:2b:1b:6f: 14:46:8b:19:c6:e9:5d:0e:e2:90:c3:0c:9b:39:e0: e0:d6:90:78:a2:9c:94:d3:e0:9f:11:5a:72:e0:56: 61:a1:8e:82:d6:c3:74:f2:fd:39:00:38:4a:9c:3b: b0:be:cc:b4:9c:3e:4c:5e:91:c7:b5:ef:2e:07:b6: c7:94:d0:69:22:a9:de:e0:5d:34:51:af:09:2e:7f: a2:01:b6:15:a6:40:bf:ee:c6:c1:be:a7:07:5d:65: 62:b9:85:88:f8:39:c5:84:cf:8f:87:d5:e8:6e:2f: 23:75:ef:74:d2:4f:73:d0:c0:fc:69:8b:12:c8:8f: 4b:12:ce:53:48:5a:fe:6e:a9:06:13:48:55:09:9b: e4:ce:dd:c6:c9:76:3e:65:a4:76:73:cc:f6:d8:4e: 60:e7:42:11:34:48:83:6e:a3:dc:5c:0b:47:0f:56: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:F4:50:B2:BC:DC:F5:F7:6D:40:77:05:8E:4C:D6:D6:26:AD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/a0ee5ded-8067-3ea3-b8f8-d6ac00f70c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.40.0-161.150.55.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d4:9f:8f:2f:20:12:a3:b3:42:0f:49:76:25:51:64:e1:df: ca:f0:3b:23:4d:02:15:3b:10:4a:b1:70:96:5a:a8:6c:fd:41: c9:13:26:bf:cc:7c:67:4a:54:e6:0f:84:0d:76:17:7f:a7:fa: 51:56:06:66:9c:ea:f1:d0:16:fd:a7:65:15:8f:a2:2e:08:43: 60:75:99:f2:f4:7a:ba:cb:13:80:6a:43:0c:5c:82:cf:24:02: 90:59:a3:4f:7a:74:54:d1:8e:86:79:0f:5b:3d:cc:26:6c:24: 19:21:30:07:c3:f2:d7:18:45:55:0e:de:9b:ae:9c:b8:20:95: 1e:3a:da:2b:25:e4:00:60:d9:69:78:2e:1d:05:e6:ad:34:02: 4b:1a:0f:90:53:e0:f0:f6:51:63:a5:0a:2f:88:59:95:c7:3a: 13:b8:b0:bd:6a:d0:0e:6e:83:9e:d8:b5:5e:3f:8a:a4:6f:a4: d2:15:a0:f2:23:b4:4c:e2:4d:f3:76:1f:11:75:c1:ca:38:68: eb:08:c0:bf:7d:b1:0d:9a:99:33:79:23:97:df:e6:6a:6c:17: a3:1d:62:0b:0d:6f:b7:8d:1f:dd:a3:f2:6f:16:cf:38:f6:29: 2e:81:33:09:d5:35:b2:47:8f:77:cd:2f:2d:00:1a:0f:50:bf: 10:ca:e0:d5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE86F9k+bBgZHjO9+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MDUyZDdkNTUtZTJjMi00MmM5LWI2ZWEtYmUwNTAyYTNjOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh92m9/NG6o7mVL+UNrBWguj1aANYjhe/S4ma qexipt8uNJ7SCeQ04rEnRMMGSDQwxC9euuNJfX6vUHxK0ngewdVXkumK+Vy5ehIc nWs5xYIFIjPlg3YrG28URosZxuldDuKQwwybOeDg1pB4opyU0+CfEVpy4FZhoY6C 1sN08v05ADhKnDuwvsy0nD5MXpHHte8uB7bHlNBpIqne4F00Ua8JLn+iAbYVpkC/ 7sbBvqcHXWViuYWI+DnFhM+Ph9Xobi8jde900k9z0MD8aYsSyI9LEs5TSFr+bqkG E0hVCZvkzt3GyXY+ZaR2c8z22E5g50IRNEiDbqPcXAtHD1bpXwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKZX9FCyvNz1921AdwWOTNbWJq09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvYTBlZTVkZWQtODA2Ny0z ZWEzLWI4ZjgtZDZhYzAwZjcwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOhligD BAOhljAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAYNSfjy8gEqOzQg9JdiVRZOHfyvA7I00CFTsQSrFwllqo bP1ByRMmv8x8Z0pU5g+EDXYXf6f6UVYGZpzq8dAW/adlFY+iLghDYHWZ8vR6ussT gGpDDFyCzyQCkFmjT3p0VNGOhnkPWz3MJmwkGSEwB8Py1xhFVQ7em66cuCCVHjra KyXkAGDZaXguHQXmrTQCSxoPkFPg8PZRY6UKL4hZlcc6E7iwvWrQDm6Dnti1Xj+K pG+k0hWg8iO0TOJN83YfEXXByjho6wjAv32xDZqZM3kjl9/mamwXox1iCw1vt40f 3aPybxbPOPYpLoEzCdU1skePd80vLQAaD1C/EMrg1Q== -----END CERTIFICATE-----Generated at Tue Sep 22 08:59:05 2026 by rpki-client