$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/28e87263-4b9d-37d9-9466-ca55b7a183b9.roa File: 28e87263-4b9d-37d9-9466-ca55b7a183b9.roa (raw, json) Hash identifier: +MmepEuZCAmwuQzBa01483XpGAnYnmiwceUl0ltmzj8= Subject key identifier: BC:E0:CF:E2:64:04:1E:16:36:2C:CD:E6:AA:C1:A7:49:CE:16:A0:82 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F4328584F2957A694DE8BC276BCD707A0 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/28e87263-4b9d-37d9-9466-ca55b7a183b9.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 40545 IP address blocks: 161.13.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:a6:94:de:8b:c2:76:bc:d7:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=df670657-fe07-4fa4-888b-1d6a23d858b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:2f:be:95:2e:2b:18:5d:9b:9e:3b:0b:fd: 6e:15:85:46:83:ae:b9:0f:8a:75:2a:dd:4e:99:f2: 61:bb:af:0d:8e:8f:5e:b7:fb:24:63:8d:be:b9:fb: 67:34:b9:5e:ab:4d:b2:36:ea:fb:ef:89:26:55:c9: 21:5f:90:b7:f6:17:27:5d:75:cf:e1:ed:7c:d8:29: 86:85:83:80:b5:5e:7b:1b:f9:a4:a5:50:c9:a2:17: 31:36:7a:4d:96:c9:64:38:14:1e:e4:e6:50:e3:3c: 93:78:09:b1:29:30:ce:29:a8:a4:86:90:89:55:18: 37:8b:43:2d:07:69:b6:84:1c:84:1c:f4:87:ed:ee: 7d:1d:ea:e4:f4:76:04:2f:1d:ae:76:e4:33:4e:ec: de:fb:de:db:1e:ea:a6:ac:f1:9a:f1:c8:25:65:22: 90:1c:94:9c:88:6b:ec:bf:b8:0b:68:91:50:68:5b: 48:03:40:ab:42:6c:25:18:52:52:0c:e3:1d:8a:cc: 47:74:78:7e:8c:9e:29:34:97:ee:ce:bc:3c:37:6e: 1c:9c:13:cc:7c:6d:2e:8d:f0:e8:10:af:a2:b0:f0: e9:0d:bd:3a:3f:5f:62:ff:ec:39:11:88:1d:1e:74: 3f:4e:53:78:ff:81:0f:68:db:17:22:62:0d:c8:79: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:CF:E2:64:04:1E:16:36:2C:CD:E6:AA:C1:A7:49:CE:16:A0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/28e87263-4b9d-37d9-9466-ca55b7a183b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 161.13.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4c:39:a7:05:87:2a:5d:24:10:74:35:8e:d7:c0:49:1e:2b: dd:6c:91:da:92:66:98:d7:5e:da:c6:a3:ce:c4:1d:b0:9c:94: 7b:b7:83:5d:a8:94:f0:cb:02:1c:ff:f9:b4:07:26:47:de:c8: c0:83:ca:36:10:b7:c0:26:74:58:60:4b:35:a3:99:3e:e5:c2: f8:8f:63:0e:e9:e8:1f:8a:78:b7:76:7f:f3:2c:00:81:b1:cc: a1:5e:b6:b5:0e:0b:7e:5a:82:55:6e:82:b9:29:e7:c9:0f:8c: 90:22:fc:cd:d3:14:91:34:56:77:2b:0f:f4:03:68:ba:70:10: 6a:70:4b:99:21:71:75:03:12:a2:ac:47:d0:06:e2:42:ad:dc: 6c:29:43:28:36:27:84:aa:e1:10:79:9f:80:2c:71:bf:78:ea: 5e:d4:46:63:2f:c4:4f:88:30:27:f6:65:b8:ee:26:a8:99:dd: 60:e3:ae:75:46:d3:db:f1:4c:7c:f7:36:a8:cd:3f:e4:a6:17: f1:86:59:b5:f3:39:f8:ad:eb:44:84:bd:49:ac:2e:dc:e4:e4: cd:d0:3b:84:56:0a:9a:f8:d7:80:86:66:05:c7:bb:74:da:95: d4:c9:68:85:52:d3:75:97:5f:bf:e7:ad:f2:34:4c:07:45:b2: e6:db:f0:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6aU3ovCdrzXB6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGY2NzA2NTctZmUwNy00ZmE0LTg4OGItMWQ2YTIzZDg1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuUvvpUuKxhdm547C/1uFYVGg665D4p1Kt1O mfJhu68Njo9et/skY42+uftnNLleq02yNur774kmVckhX5C39hcnXXXP4e182CmG hYOAtV57G/mkpVDJohcxNnpNlslkOBQe5OZQ4zyTeAmxKTDOKaikhpCJVRg3i0Mt B2m2hByEHPSH7e59Herk9HYELx2uduQzTuze+97bHuqmrPGa8cglZSKQHJSciGvs v7gLaJFQaFtIA0CrQmwlGFJSDOMdisxHdHh+jJ4pNJfuzrw8N24cnBPMfG0ujfDo EK+isPDpDb06P19i/+w5EYgdHnQ/TlN4/4EPaNsXImINyHmxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzgz+JkBB4WNizN5qrBp0nOFqCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvMjhlODcyNjMtNGI5ZC0z N2Q5LTk0NjYtY2E1NWI3YTE4M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoQ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJMOacFhypdJBB0NY7XwEkeK91skdqSZpjXXtrGo87EHbCclHu3g12o lPDLAhz/+bQHJkfeyMCDyjYQt8AmdFhgSzWjmT7lwviPYw7p6B+KeLd2f/MsAIGx zKFetrUOC35aglVugrkp58kPjJAi/M3TFJE0VncrD/QDaLpwEGpwS5khcXUDEqKs R9AG4kKt3GwpQyg2J4Sq4RB5n4Ascb946l7URmMvxE+IMCf2ZbjuJqiZ3WDjrnVG 09vxTHz3NqjNP+SmF/GGWbXzOfit60SEvUmsLtzk5M3QO4RWCpr414CGZgXHu3Ta ldTJaIVS03WXX7/nrfI0TAdFsubb8C8= -----END CERTIFICATE-----Generated at Mon Oct 12 22:30:45 2026 by rpki-client