$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa File: 09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa (raw, json) Hash identifier: zmlWwdCq0lFsSW0vQ8V1QfPHMe18egs6mWOIaZby3Wc= Subject key identifier: B4:26:8D:BB:17:FF:96:C5:1A:23:33:1E:8D:73:FB:A0:E7:64:EE:34 Certificate issuer: /CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Certificate serial: 010D0C9F4328584F19FCFE5787F82D56C3F73050 Authority key identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 161.210.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fe:57:87:f8:2d:56:c3:f7:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=bf9398ce-564b-441c-b710-5c41efe60575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:b2:81:4a:01:20:d1:70:56:c9:b9:56:97: 54:3e:70:4e:f6:67:d7:04:6c:32:0e:f8:00:9d:a9: 04:6b:42:46:ed:8f:ae:ef:e7:d0:48:ff:65:77:3d: 20:d2:f9:a9:86:3b:bd:4d:69:09:06:da:d0:a4:53: da:21:f4:b4:b2:11:28:e6:cc:c0:cd:78:d9:fc:63: 32:6a:eb:73:2c:ec:a2:c2:26:29:29:b0:e4:87:b2: 53:3b:b3:7f:25:e5:1f:dc:4f:a3:f5:f3:e2:c8:fd: 4d:1d:d8:98:a5:a8:fc:d2:96:65:7e:d9:9e:9f:5a: 05:8b:13:d5:5a:12:e3:b7:25:06:8a:49:29:46:08: c8:8e:e4:76:44:1b:74:5d:c2:ac:51:39:25:ce:89: 29:ab:38:10:7b:59:06:52:4b:65:c5:7c:25:89:68: b5:8d:b6:ff:d6:38:4d:2a:75:78:26:19:9f:c4:5e: 01:cb:be:86:86:9a:22:a1:92:96:26:60:a1:4a:7a: f1:c7:be:55:25:39:cb:fc:58:b8:00:5c:51:01:2d: 21:ef:59:a7:0c:14:de:37:e5:f8:59:3d:55:fc:f4: ce:00:f3:7e:f7:f0:21:13:ae:1e:b1:2e:42:51:f8: b9:6e:b5:58:8d:14:25:32:67:7d:81:9e:bf:22:b0: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:8D:BB:17:FF:96:C5:1A:23:33:1E:8D:73:FB:A0:E7:64:EE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl X509v3 Authority Key Identifier: keyid:6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer sbgp-ipAddrBlock: critical IPv4: 161.210.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:26:00:8d:80:e1:3f:6d:09:67:80:fb:9d:e3:0d:bd:84:71: 0a:5e:d2:15:66:b7:b3:52:4c:23:82:bd:ae:d2:33:b5:f8:2b: 26:7c:6e:be:85:83:d8:39:89:33:6c:61:16:c2:b8:25:15:37: cd:a1:07:51:b6:d7:98:05:fe:21:bf:7e:d6:20:80:90:eb:72: b8:4f:b5:b3:67:07:28:b5:59:8c:d6:10:63:22:fa:3b:41:57: 7d:6b:bd:14:4d:1c:74:37:db:ee:3c:3f:6a:39:7a:e0:19:46: eb:04:7d:36:e4:81:fe:03:9d:3b:4b:4e:61:35:35:94:8d:3f: 4e:14:68:dc:9f:a2:9a:f3:67:d1:7e:60:fd:37:44:a8:eb:f8: d5:24:c7:d4:3a:e5:25:ff:aa:31:30:6f:48:cb:ad:c9:89:96: 09:0b:65:23:00:de:22:04:dc:d4:05:e7:21:c1:2f:29:33:bf: 72:f5:3c:fa:ff:cb:9a:72:96:ad:ef:ea:2d:ce:97:c0:3e:74: 12:32:04:d4:05:54:50:2f:5b:be:ab:95:10:3d:75:6a:3b:35: db:a9:c7:6a:c0:27:44:6b:87:7d:a8:ec:fe:d8:a0:79:84:b7: 0e:f5:56:9d:31:33:82:c4:78:10:b1:b1:1d:75:68:cd:2f:ff: 5c:80:a5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P5Xh/gtVsP3MFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQzMWNjOGEtODViOC00MTdjLTk0ZWItOTEzN2I3ODY0 NjA5MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YmY5Mzk4Y2UtNTY0Yi00NDFjLWI3MTAtNWM0MWVmZTYwNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4+ygUoBINFwVsm5VpdUPnBO9mfXBGwyDvgA nakEa0JG7Y+u7+fQSP9ldz0g0vmphju9TWkJBtrQpFPaIfS0shEo5szAzXjZ/GMy autzLOyiwiYpKbDkh7JTO7N/JeUf3E+j9fPiyP1NHdiYpaj80pZlftmen1oFixPV WhLjtyUGikkpRgjIjuR2RBt0XcKsUTklzokpqzgQe1kGUktlxXwliWi1jbb/1jhN KnV4JhmfxF4By76GhpoioZKWJmChSnrxx75VJTnL/Fi4AFxRAS0h71mnDBTeN+X4 WT1V/PTOAPN+9/AhE64esS5CUfi5brVYjRQlMmd9gZ6/IrA02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQmjbsX/5bFGiMzHo1z+6DnZO40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZDMx Y2M4YS04NWI4LTQxN2MtOTRlYi05MTM3Yjc4NjQ2MDkvMDlmMmI1YzUtN2FmYS0z ZjQzLWIwMjMtOTRlYTIyZDZkODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWQzMWNjOGEtODViOC00MTdjLTk0 ZWItOTEzN2I3ODY0NjA5LzlkMzFjYzhhLTg1YjgtNDE3Yy05NGViLTkxMzdiNzg2 NDYwOS5jcmwwHwYDVR0jBBgwFoAUasMgxkLPRZm3ckqec2AMsjlFL9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZDMxY2M4YS04NWI4LTQxN2MtOTRlYi05MTM3 Yjc4NjQ2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAodK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQmAI2A4T9tCWeA+53jDb2EcQpe0hVmt7NSTCOCva7SM7X4KyZ8br6F g9g5iTNsYRbCuCUVN82hB1G215gF/iG/ftYggJDrcrhPtbNnByi1WYzWEGMi+jtB V31rvRRNHHQ32+48P2o5euAZRusEfTbkgf4DnTtLTmE1NZSNP04UaNyfoprzZ9F+ YP03RKjr+NUkx9Q65SX/qjEwb0jLrcmJlgkLZSMA3iIE3NQF5yHBLykzv3L1PPr/ y5pylq3v6i3Ol8A+dBIyBNQFVFAvW76rlRA9dWo7Ndupx2rAJ0Rrh32o7P7YoHmE tw71Vp0xM4LEeBCxsR11aM0v/1yApUQ= -----END CERTIFICATE-----Generated at Sun Oct 4 10:16:38 2026 by rpki-client