$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/4771de5b-f31c-3dc0-b4df-63307bd09549.roa File: 4771de5b-f31c-3dc0-b4df-63307bd09549.roa (raw, json) Hash identifier: f6xNVQZDttpSvzpyx8To5vVUDYU2tgGHWPEZFKNga+A= Subject key identifier: BE:2C:F4:4D:58:00:07:CB:F9:DE:7F:D0:FF:38:CE:61:D1:16:05:B1 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584F11D0F7A6382D3554929BAEC0 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/4771de5b-f31c-3dc0-b4df-63307bd09549.roa Signing time: Sat 05 Sep 2026 02:45:14 +0000 ROA not before: Sat 05 Sep 2026 02:45:14 +0000 ROA not after: Fri 04 Dec 2026 03:45:14 +0000 asID: 38481 IP address blocks: 161.121.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:d0:f7:a6:38:2d:35:54:92:9b:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Sep 5 02:45:14 2026 GMT Not After : Dec 4 03:45:14 2026 GMT Subject: CN=99bded28-b3b8-4296-ba2f-0e0a578a15a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:d9:fc:12:2e:76:23:ce:ff:d9:a7:cf:62: a1:51:0f:46:24:d8:dd:0e:ad:90:df:6c:85:db:bf: cc:92:fd:6f:c6:20:46:ba:3a:43:05:68:82:72:aa: 79:9d:cc:63:c5:6e:04:ef:4e:5b:c7:04:b4:3e:d5: 80:a9:87:e0:91:23:e0:b0:0e:8a:c0:a0:b6:94:ef: 4d:1e:c3:1a:b7:a7:df:e2:57:38:42:43:c0:99:1d: b5:9d:90:6c:33:94:ca:bb:1f:ad:39:26:19:07:ad: 42:ab:f4:6b:15:9e:32:51:f3:14:59:99:72:55:1d: 9d:d0:9e:7d:ee:11:81:c8:a5:cd:f2:0d:bc:4e:04: ad:22:e9:62:6c:ad:61:05:10:a8:17:2e:96:45:1e: b1:53:45:3a:77:d7:4f:de:ed:6c:92:13:12:51:4d: db:db:4a:f7:04:50:32:de:06:02:b8:4a:74:2f:07: a0:9c:dc:ae:b0:a0:c4:59:7b:6e:b0:44:42:a8:35: dc:03:b0:c7:ac:8f:0f:3f:54:52:e2:f9:4a:ef:3f: 04:d5:15:84:c5:d6:5b:50:a9:0c:e5:1b:cc:8e:ce: 35:13:2e:4b:99:74:d5:3e:90:98:97:c6:73:c0:5f: 94:57:f8:54:11:35:ba:ef:4e:21:98:b2:a6:16:c9: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2C:F4:4D:58:00:07:CB:F9:DE:7F:D0:FF:38:CE:61:D1:16:05:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/4771de5b-f31c-3dc0-b4df-63307bd09549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:dc:59:62:bf:db:03:2b:17:e4:72:28:a3:ac:57:7f:a6:da: e5:13:e8:38:c9:d3:99:b3:d2:7d:b8:00:6a:5b:70:8b:2d:f0: 24:b5:78:e2:f2:da:91:ec:b2:21:89:1c:4e:82:63:e4:04:63: 31:54:02:7d:e7:ed:b9:a6:29:2c:e1:be:4c:25:16:6e:38:e5: d0:8f:75:7b:4e:64:30:f1:0b:a7:19:5d:68:de:de:cd:42:d4: f5:87:e6:7e:0c:f3:71:08:b3:9f:4d:08:50:f6:41:d3:0f:de: 8b:a8:d7:71:12:91:7d:00:1f:d0:77:fa:29:c3:91:f9:36:49: c5:c8:2a:59:56:b2:77:83:91:75:3c:d9:1f:72:ff:4a:d1:7c: 3f:06:22:66:77:17:c8:60:cd:81:a5:04:ec:9e:a7:ea:62:be: 38:fe:66:29:dd:62:57:bb:46:69:7d:0d:c0:b7:63:97:fa:e4: e8:3b:30:1c:97:11:9a:d4:d5:1b:cb:61:29:61:67:73:cb:8a: 25:1c:be:65:d9:38:6e:c5:42:d9:fa:28:6e:8d:4c:5b:df:e5: 0f:e5:1c:1e:1c:eb:4c:6e:72:ee:47:09:ca:00:36:75:fe:e2: 60:61:f6:0f:8e:6b:06:55:bc:1d:96:d3:fa:c8:9f:b4:af:75: 09:9e:7f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8R0PemOC01VJKbrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDkwNTAyNDUxNFoXDTI2MTIwNDAzNDUxNFowLzEtMCsGA1UEAxMk OTliZGVkMjgtYjNiOC00Mjk2LWJhMmYtMGUwYTU3OGExNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TZ/BIudiPO/9mnz2KhUQ9GJNjdDq2Q32yF 27/Mkv1vxiBGujpDBWiCcqp5ncxjxW4E705bxwS0PtWAqYfgkSPgsA6KwKC2lO9N HsMat6ff4lc4QkPAmR21nZBsM5TKux+tOSYZB61Cq/RrFZ4yUfMUWZlyVR2d0J59 7hGByKXN8g28TgStIulibK1hBRCoFy6WRR6xU0U6d9dP3u1skhMSUU3b20r3BFAy 3gYCuEp0LwegnNyusKDEWXtusERCqDXcA7DHrI8PP1RS4vlK7z8E1RWExdZbUKkM 5RvMjs41Ey5LmXTVPpCYl8ZzwF+UV/hUETW6704hmLKmFskpxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4s9E1YAAfL+d5/0P84zmHRFgWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvNDc3MWRlNWItZjMxYy0z ZGMwLWI0ZGYtNjMzMDdiZDA5NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPcWWK/2wMrF+RyKKOsV3+m2uUT6DjJ05mz0n24AGpbcIst8CS1eOLy 2pHssiGJHE6CY+QEYzFUAn3n7bmmKSzhvkwlFm445dCPdXtOZDDxC6cZXWje3s1C 1PWH5n4M83EIs59NCFD2QdMP3ouo13ESkX0AH9B3+inDkfk2ScXIKllWsneDkXU8 2R9y/0rRfD8GImZ3F8hgzYGlBOyep+pivjj+ZindYle7Rml9DcC3Y5f65Og7MByX EZrU1RvLYSlhZ3PLiiUcvmXZOG7FQtn6KG6NTFvf5Q/lHB4c60xucu5HCcoANnX+ 4mBh9g+OawZVvB2W0/rIn7SvdQmef3g= -----END CERTIFICATE-----Generated at Tue Sep 22 18:49:30 2026 by rpki-client