$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ff64db16-2d4c-3469-8a88-748f7cab6da6.roa File: ff64db16-2d4c-3469-8a88-748f7cab6da6.roa (raw, json) Hash identifier: PoyXdViXn+YL1CEAgx2X/8Un0XZkI/J3k039QnmLKk8= Subject key identifier: FF:AB:30:1C:9E:95:27:8D:F1:E1:A1:BE:9A:14:D3:3E:D1:13:65:98 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584F11D170F1C4F1004B3DB39780 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ff64db16-2d4c-3469-8a88-748f7cab6da6.roa Signing time: Sat 05 Sep 2026 02:46:11 +0000 ROA not before: Sat 05 Sep 2026 02:46:11 +0000 ROA not after: Fri 04 Dec 2026 03:46:11 +0000 asID: 38481 IP address blocks: 161.121.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:d1:70:f1:c4:f1:00:4b:3d:b3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Sep 5 02:46:11 2026 GMT Not After : Dec 4 03:46:11 2026 GMT Subject: CN=a9c358c6-f307-4186-b5d4-8303b6a508ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:64:05:04:ff:2e:77:c0:58:2a:fa:a6:cb:96: bf:ab:db:4d:57:24:05:28:1d:9b:a9:a0:12:cd:2f: 1e:0c:7d:99:d3:6f:cf:f2:64:bc:d0:ff:b9:3d:61: dc:4f:5d:6d:58:63:8d:19:93:78:34:0e:8b:33:99: 65:f9:f8:e5:1b:20:cc:70:66:b0:22:29:87:7c:a8: 57:00:fb:ce:23:2e:28:56:c6:a5:ed:0c:9a:e5:24: bc:be:ac:13:c6:52:9b:4f:e9:7f:42:8d:4e:de:c4: 86:17:86:fe:7b:77:13:de:f5:e6:7a:5d:96:5d:8c: a5:63:53:5e:f7:aa:63:d2:fc:02:3c:54:bc:49:1f: e0:1f:b0:1b:2a:cf:49:07:73:2d:da:8d:99:07:85: b3:c6:bd:39:6e:c5:18:48:d5:96:29:69:db:08:c6: 29:6c:29:11:b3:04:b4:ca:71:3d:a3:65:c2:60:62: d5:25:54:33:02:a4:b1:53:40:a5:b5:00:37:f0:0d: b1:69:68:e1:82:65:6e:b3:09:34:95:22:c3:63:96: 08:a4:27:d8:db:59:2c:28:69:d1:de:fa:13:04:f0: 50:21:f1:fa:12:f5:e7:b9:2f:4f:79:4e:7c:a0:52: 7b:73:ae:7c:74:ed:dd:ce:2a:7d:a4:33:2a:57:40: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:30:1C:9E:95:27:8D:F1:E1:A1:BE:9A:14:D3:3E:D1:13:65:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ff64db16-2d4c-3469-8a88-748f7cab6da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:58:d6:43:45:c6:48:8b:50:23:33:43:17:4a:e0:03:71:80: 42:eb:1b:e6:9a:7c:df:a8:4b:23:f0:b5:82:ff:2e:71:23:7e: 03:be:25:9d:f5:c5:b8:c5:45:56:92:af:e8:61:d8:73:9e:44: 1c:c2:16:b5:1a:04:1f:09:67:96:f9:fc:2d:86:32:7a:81:5c: b3:9f:42:4c:b8:68:e2:59:c1:c7:04:e4:49:08:f8:6b:86:47: 87:a0:50:28:ca:35:0a:c5:10:7c:ab:c8:5f:36:92:29:80:51: ec:36:24:d4:de:dd:d0:7d:93:19:fa:20:66:4b:24:74:5e:24: 0d:f1:e4:4a:ba:85:fc:f6:75:47:57:27:01:28:22:09:a5:b0: ae:07:83:62:f6:cd:de:bd:e2:11:00:f5:49:b1:f8:80:2e:29: a5:59:94:0b:8a:35:ff:f4:4e:4c:aa:ba:1e:f9:6c:e6:16:c6: 4d:73:83:32:d5:11:7c:d6:51:c2:e7:f3:91:b3:65:ed:fc:04: 3c:3a:50:76:f3:3b:d6:b9:f2:e4:25:7b:b1:eb:45:9b:af:8e: 70:69:cd:dc:2d:5b:37:0c:66:9b:cf:e2:dd:8f:09:e3:21:87: 5c:03:67:9e:f7:20:1d:29:87:f2:1a:b8:15:c5:50:a5:b8:e4: 8a:48:6d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8R0XDxxPEASz2zl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDkwNTAyNDYxMVoXDTI2MTIwNDAzNDYxMVowLzEtMCsGA1UEAxMk YTljMzU4YzYtZjMwNy00MTg2LWI1ZDQtODMwM2I2YTUwOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmQFBP8ud8BYKvqmy5a/q9tNVyQFKB2bqaAS zS8eDH2Z02/P8mS80P+5PWHcT11tWGONGZN4NA6LM5ll+fjlGyDMcGawIimHfKhX APvOIy4oVsal7Qya5SS8vqwTxlKbT+l/Qo1O3sSGF4b+e3cT3vXmel2WXYylY1Ne 96pj0vwCPFS8SR/gH7AbKs9JB3Mt2o2ZB4Wzxr05bsUYSNWWKWnbCMYpbCkRswS0 ynE9o2XCYGLVJVQzAqSxU0CltQA38A2xaWjhgmVuswk0lSLDY5YIpCfY21ksKGnR 3voTBPBQIfH6EvXnuS9PeU58oFJ7c658dO3dzip9pDMqV0APyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+rMByelSeN8eGhvpoU0z7RE2WYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvZmY2NGRiMTYtMmQ0Yy0z NDY5LThhODgtNzQ4ZjdjYWI2ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhY1kNFxkiLUCMzQxdK4ANxgELrG+aafN+oSyPwtYL/LnEjfgO+JZ31 xbjFRVaSr+hh2HOeRBzCFrUaBB8JZ5b5/C2GMnqBXLOfQky4aOJZwccE5EkI+GuG R4egUCjKNQrFEHyryF82kimAUew2JNTe3dB9kxn6IGZLJHReJA3x5Eq6hfz2dUdX JwEoIgmlsK4Hg2L2zd694hEA9Umx+IAuKaVZlAuKNf/0Tkyquh75bOYWxk1zgzLV EXzWUcLn85GzZe38BDw6UHbzO9a58uQle7HrRZuvjnBpzdwtWzcMZpvP4t2PCeMh h1wDZ573IB0ph/IauBXFUKW45IpIbb0= -----END CERTIFICATE-----Generated at Tue Sep 22 14:19:08 2026 by rpki-client