$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa File: 2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa (raw, json) Hash identifier: b/ncIjU6b+2CjL5pSbY8+DTJb6ft4ru5l17Fw/DtsiQ= Subject key identifier: FD:30:AF:48:85:ED:BC:80:30:4C:D9:08:8E:5A:E4:E2:8F:02:16:2F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F49764550D865D5865C5A4C40 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30103 IP address blocks: 161.199.136.0/23 maxlen: 24 198.251.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:45:50:d8:65:d5:86:5c:5a:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dedb478e-564b-46d6-a3a1-7c88539af633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:fa:95:c1:aa:a1:23:75:1e:f7:92:35:80: dc:46:1c:c1:01:88:cb:ab:ae:fb:98:5d:d2:c6:ae: 59:31:46:5e:e5:e2:85:81:75:9a:50:c4:29:94:cb: 55:e3:d1:41:50:7a:d8:9d:4d:f1:6c:52:be:c6:db: 0e:ab:54:7f:69:5e:30:31:47:ef:23:cb:7e:a8:c7: 8d:fe:ec:9f:62:14:bb:16:a7:02:9c:e5:f1:03:ae: e8:e0:78:ae:f2:f8:41:13:b4:73:0f:bf:f7:87:81: a2:dd:48:51:64:97:91:98:d7:64:c6:c8:26:71:ac: 7b:af:ef:80:12:67:d7:07:de:7a:5d:3d:e1:77:fa: d7:d8:99:ec:2f:b9:05:b0:c5:7a:07:3e:e2:ab:19: 6f:c5:77:a3:77:fd:62:7b:b0:68:a0:53:0e:89:d6: 4f:27:13:94:a2:c0:dd:e0:8f:60:61:0d:40:1c:d7: 2d:bc:43:a6:31:da:96:f3:7a:1d:80:dc:af:c1:f6: 00:7b:fc:de:c7:23:f1:af:0b:db:0a:11:c9:0f:d5: ff:76:2d:79:e6:ac:bb:b5:e3:17:4a:8b:26:61:86: d7:e4:2d:77:c0:9f:9d:dc:0e:76:02:d9:56:81:18: f8:10:9e:31:a4:c9:34:65:1a:b0:d8:90:2e:11:9c: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:30:AF:48:85:ED:BC:80:30:4C:D9:08:8E:5A:E4:E2:8F:02:16:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.136.0/23 198.251.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:11:92:cc:ec:96:f6:58:7b:88:34:7b:6c:af:5c:e2:d4:89: c4:2c:5b:8d:c2:96:a2:fc:d3:06:be:73:d7:88:a7:a3:72:39: f3:55:f9:6a:9e:ae:c9:d9:90:68:21:fd:36:ef:f5:8a:9c:5f: 6c:2c:5a:05:13:2a:09:d4:29:23:c9:e8:8b:4d:00:e5:d0:25: 7f:4c:37:01:3b:eb:c0:43:30:af:f1:4e:eb:33:20:d8:47:a0: 2e:ca:b1:eb:a0:cf:43:38:28:db:39:3b:36:4e:2e:2f:f0:a7: 71:3f:d1:0e:f6:1b:9e:56:30:62:16:ca:4d:28:a5:ab:ee:1f: 17:ef:a7:a5:35:c2:f8:22:95:44:4f:26:53:c4:ab:f2:b0:9e: 29:3a:a9:94:a4:f8:ad:ca:00:3f:9e:b0:f2:8d:1e:28:33:61: ec:86:df:a0:de:4b:09:4f:5b:ca:ef:6a:1b:24:43:00:0c:57: 0c:8b:fa:dc:ae:e6:08:11:3b:13:9f:ce:00:c4:8e:bc:ae:52: 4d:55:d2:91:39:c1:d8:2d:81:c7:79:5c:8f:fe:23:2b:09:04: 33:13:63:fa:ea:8c:d9:78:62:5d:e5:01:55:c3:3c:0d:b6:34: 4c:82:6a:fa:02:4f:a0:71:fd:56:25:dd:93:1a:e2:ad:3b:19: e0:74:f5:7c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdkVQ2GXVhlxaTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVkYjQ3OGUtNTY0Yi00NmQ2LWEzYTEtN2M4ODUzOWFmNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4j6lcGqoSN1HveSNYDcRhzBAYjLq677mF3S xq5ZMUZe5eKFgXWaUMQplMtV49FBUHrYnU3xbFK+xtsOq1R/aV4wMUfvI8t+qMeN /uyfYhS7FqcCnOXxA67o4Hiu8vhBE7RzD7/3h4Gi3UhRZJeRmNdkxsgmcax7r++A EmfXB956XT3hd/rX2JnsL7kFsMV6Bz7iqxlvxXejd/1ie7BooFMOidZPJxOUosDd 4I9gYQ1AHNctvEOmMdqW83odgNyvwfYAe/zexyPxrwvbChHJD9X/di155qy7teMX SosmYYbX5C13wJ+d3A52AtlWgRj4EJ4xpMk0ZRqw2JAuEZztqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFP0wr0iF7byAMEzZCI5a5OKPAhYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMmEwOWRhZWItMmFiMS0z YzYyLTlkOTItOTlkNjc4NGRhNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceIAwQD xvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEkRkszslvZYe4g0e2yvXOLUicQsW43ClqL80wa+c9eIp6Ny OfNV+WqersnZkGgh/Tbv9YqcX2wsWgUTKgnUKSPJ6ItNAOXQJX9MNwE768BDMK/x TuszINhHoC7Kseugz0M4KNs5OzZOLi/wp3E/0Q72G55WMGIWyk0opavuHxfvp6U1 wvgilURPJlPEq/Kwnik6qZSk+K3KAD+esPKNHigzYeyG36DeSwlPW8rvahskQwAM VwyL+tyu5ggROxOfzgDEjryuUk1V0pE5wdgtgcd5XI/+IysJBDMTY/rqjNl4Yl3l AVXDPA22NEyCavoCT6Bx/VYl3ZMa4q07GeB09Xw= -----END CERTIFICATE-----Generated at Sat Sep 26 07:47:50 2026 by rpki-client