$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/cca0121e-bfaa-37ff-9674-01faf5cccefb.roa File: cca0121e-bfaa-37ff-9674-01faf5cccefb.roa (raw, json) Hash identifier: ZKwWZ5AwkiMwP2u11OjpMWXHLvjLqMByIm0l9qrOwnM= Subject key identifier: 90:A1:BE:8A:3A:5A:5A:42:2A:5E:A1:DD:64:FB:A4:06:E5:5F:72:CE Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584F4988A008B83837AB807DF840 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/cca0121e-bfaa-37ff-9674-01faf5cccefb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 140096 IP address blocks: 161.129.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a0:08:b8:38:37:ab:80:7d:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6785a2a-0351-4a9b-8c99-86446162d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:2b:9d:03:6f:7f:c3:f0:f8:3d:e2:32:ad: 76:d2:3d:6d:6a:92:e6:8b:d3:77:69:ed:cc:ec:a2: 5b:58:0d:1b:35:9d:67:c7:e5:23:48:48:13:0c:67: e2:86:01:3e:72:76:70:84:21:41:75:f8:42:92:2e: fb:f0:2c:08:cf:4d:e7:26:c5:62:db:a9:ed:8e:0f: 8b:00:9d:9d:de:d6:00:b4:2b:69:23:a1:98:67:3a: 62:f3:1c:d0:05:53:37:8b:74:70:e9:1a:71:99:ae: 01:94:c1:b7:8d:c7:9f:67:b1:6c:7e:c5:96:63:aa: 52:6b:87:d9:d5:5c:ff:d9:f0:c2:89:e0:71:9c:92: b8:8f:60:5c:32:46:06:c6:d3:0b:71:c7:18:0a:d2: 80:e3:14:3c:56:b9:22:78:f1:27:11:86:0f:44:ef: 63:5b:27:8b:70:f4:c9:13:44:94:3f:03:56:75:6c: 7c:dd:6b:f0:6f:94:4c:68:34:6a:c7:d3:2f:af:6b: 80:8a:69:6b:5e:15:86:cf:a4:71:71:6b:f9:60:9e: 10:39:68:55:5b:e2:15:e1:5c:87:79:7b:72:96:df: 52:2a:b8:3d:fc:03:52:1f:ad:84:70:66:d3:4f:98: 1d:93:0d:15:cb:00:8c:aa:5f:e5:4c:cd:ed:54:37: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:BE:8A:3A:5A:5A:42:2A:5E:A1:DD:64:FB:A4:06:E5:5F:72:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/cca0121e-bfaa-37ff-9674-01faf5cccefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:1d:94:c3:00:8f:1c:56:cf:f0:be:02:65:82:0f:ac:d5:f1: 08:81:9c:7c:69:b7:50:31:f8:5c:4d:17:8c:79:cb:59:a7:de: 23:5a:34:65:68:10:97:3e:0c:96:8b:f1:8d:93:f4:dc:88:49: 94:14:85:98:91:75:60:f3:f5:e3:d1:4f:6d:da:26:c1:a8:fc: 0d:87:41:34:ab:86:c8:a1:c8:dc:94:40:9f:70:f9:1c:a8:83: b2:6a:9b:01:a7:c7:60:dc:45:e0:9c:d8:11:5d:15:28:ef:75: f6:87:93:77:34:ec:9b:37:61:0e:ab:85:c9:aa:af:b7:d2:90: 33:23:02:98:44:d0:16:c5:fe:97:e1:9f:cc:c6:f5:1a:f0:d4: 4e:54:2b:ef:fe:1e:53:5e:34:44:ce:35:34:73:c0:ba:50:b3: bd:88:78:87:da:6c:22:e0:c6:b2:04:ac:2d:86:ec:27:73:7b: 8e:cd:ea:7d:67:0d:ec:e3:48:90:7e:17:63:44:e0:52:e3:e1: 02:9c:c0:8f:57:67:fc:b1:b0:1b:77:da:9b:e1:fb:e0:0a:78: 9e:55:19:ca:df:8f:59:09:aa:cd:fc:d8:0b:81:7b:06:ee:8b: 34:fb:ec:7d:98:b4:0c:97:d7:77:93:18:62:90:fd:bb:b5:ad: b7:60:85:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiKAIuDg3q4B9+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDY3ODVhMmEtMDM1MS00YTliLThjOTktODY0NDYxNjJkNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiawrnQNvf8Pw+D3iMq120j1tapLmi9N3ae3M 7KJbWA0bNZ1nx+UjSEgTDGfihgE+cnZwhCFBdfhCki778CwIz03nJsVi26ntjg+L AJ2d3tYAtCtpI6GYZzpi8xzQBVM3i3Rw6Rpxma4BlMG3jcefZ7FsfsWWY6pSa4fZ 1Vz/2fDCieBxnJK4j2BcMkYGxtMLcccYCtKA4xQ8VrkiePEnEYYPRO9jWyeLcPTJ E0SUPwNWdWx83Wvwb5RMaDRqx9Mvr2uAimlrXhWGz6RxcWv5YJ4QOWhVW+IV4VyH eXtylt9SKrg9/ANSH62EcGbTT5gdkw0VywCMql/lTM3tVDdztwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJChvoo6WlpCKl6h3WT7pAblX3LOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvY2NhMDEyMWUtYmZhYS0z N2ZmLTk2NzQtMDFmYWY1Y2NjZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYdlMMAjxxWz/C+AmWCD6zV8QiBnHxpt1Ax+FxNF4x5y1mn3iNaNGVo EJc+DJaL8Y2T9NyISZQUhZiRdWDz9ePRT23aJsGo/A2HQTSrhsihyNyUQJ9w+Ryo g7JqmwGnx2DcReCc2BFdFSjvdfaHk3c07Js3YQ6rhcmqr7fSkDMjAphE0BbF/pfh n8zG9Rrw1E5UK+/+HlNeNETONTRzwLpQs72IeIfabCLgxrIErC2G7Cdze47N6n1n DezjSJB+F2NE4FLj4QKcwI9XZ/yxsBt32pvh++AKeJ5VGcrfj1kJqs382AuBewbu izT77H2YtAyX13eTGGKQ/bu1rbdghQE= -----END CERTIFICATE-----Generated at Fri Sep 25 10:43:05 2026 by rpki-client