$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa File: 89eaad9a-c679-3b5d-800a-328d1b3617b9.roa (raw, json) Hash identifier: YZTJxJFufvQFPYsj/yhR5qHbnWA8PMTjmnhXrE6w6cY= Subject key identifier: 53:7B:14:C6:60:3F:34:12:95:14:D7:2E:DB:53:4D:E4:09:68:D2:CA Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F49739A59DD1EE0F6BB676F00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11232 IP address blocks: 161.199.184.0/22 maxlen: 22 208.118.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9a:59:dd:1e:e0:f6:bb:67:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=39ac6657-e3f1-451a-8c09-65f2753a60a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:96:b5:56:a6:ea:33:7b:70:20:63:d6:0f: 74:04:95:af:56:c8:f8:c9:e0:b3:db:cc:57:7a:fc: ea:d5:5b:75:21:94:c7:cc:2d:53:b8:06:59:ae:d7: 43:17:2c:f9:c4:84:f8:20:43:a5:1f:ba:81:09:df: 26:43:ff:ed:20:fa:2b:e2:ac:c2:00:ad:09:01:1c: 4c:12:f7:0c:b8:d8:b4:6a:6e:86:e4:86:2a:a9:95: a0:6c:47:1a:eb:df:b5:15:94:5c:8e:74:49:7e:b9: fb:c6:ed:da:e9:9c:83:42:4d:62:30:43:f8:9a:63: 92:92:03:43:10:98:52:5f:1b:6c:2d:23:c0:c6:da: 1d:35:24:7e:42:9b:4e:a6:70:79:58:0f:23:57:b1: 49:dd:f3:e3:e3:69:e8:28:21:1c:f1:86:92:c8:31: e6:76:46:f3:70:8b:48:52:9b:dd:09:ab:ea:0d:77: da:49:c2:13:d4:09:e6:85:31:ab:cb:21:ba:a0:fc: a2:e8:ee:c4:a6:78:e3:d6:90:ca:51:ee:b5:70:92: b7:02:67:74:fe:4c:3a:de:ca:cc:06:fb:cf:93:6a: 21:6c:15:b3:c6:d0:35:21:41:57:fb:bf:c9:cc:cf: 29:c6:21:44:be:62:5a:8e:fe:75:b5:6a:65:06:e3: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7B:14:C6:60:3F:34:12:95:14:D7:2E:DB:53:4D:E4:09:68:D2:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 161.199.184.0/22 208.118.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c9:87:5b:cc:67:ea:ae:c5:39:c7:5c:71:fc:3e:46:19:78: b6:2a:de:cc:4e:61:86:b1:6c:78:76:16:d7:cd:a2:33:14:3c: 8b:1c:49:6a:e0:2a:d3:d3:f9:b7:e5:c5:5c:d4:30:0c:82:d9: d1:ef:bb:42:43:8b:ee:4f:eb:7a:cc:b2:58:94:81:6b:c8:71: 0c:22:91:75:28:eb:c2:ce:35:98:c6:f6:b8:cb:6b:cb:00:89: 0d:22:ac:0b:ba:d1:04:e2:ea:e9:fe:5f:42:42:30:5e:79:db: 15:84:25:d4:aa:8e:ed:c2:b2:d6:b5:e5:de:d3:85:cb:04:62: 49:b9:f7:ea:fa:33:ab:9a:7e:12:9a:4c:56:c1:d6:a5:65:c8: 73:8a:fc:a6:02:00:62:c9:b1:a0:5b:95:6f:dc:cc:12:b7:35: 13:4b:05:df:b8:90:f7:ac:73:70:52:54:b2:10:b6:9f:5f:da: d6:46:55:70:a6:98:be:5e:90:04:dd:65:f0:00:e3:c1:9d:e6: 48:fe:e7:e5:74:36:27:3e:0d:90:1d:a9:1f:d1:26:43:ee:f4: f1:b5:47:64:4a:32:3a:fc:a3:a6:c9:41:34:61:dc:13:57:a5: 39:0f:a0:c6:1b:17:44:54:55:53:39:ff:45:0c:c6:f2:36:61: 28:39:a8:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc5pZ3R7g9rtnbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzlhYzY2NTctZTNmMS00NTFhLThjMDktNjVmMjc1M2E2MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv6WtVam6jN7cCBj1g90BJWvVsj4yeCz28xX evzq1Vt1IZTHzC1TuAZZrtdDFyz5xIT4IEOlH7qBCd8mQ//tIPor4qzCAK0JARxM EvcMuNi0am6G5IYqqZWgbEca69+1FZRcjnRJfrn7xu3a6ZyDQk1iMEP4mmOSkgND EJhSXxtsLSPAxtodNSR+QptOpnB5WA8jV7FJ3fPj42noKCEc8YaSyDHmdkbzcItI UpvdCavqDXfaScIT1AnmhTGryyG6oPyi6O7Epnjj1pDKUe61cJK3Amd0/kw63srM BvvPk2ohbBWzxtA1IUFX+7/JzM8pxiFEvmJajv51tWplBuNuRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFN7FMZgPzQSlRTXLttTTeQJaNLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODllYWFkOWEtYzY3OS0z YjVkLTgwMGEtMzI4ZDFiMzYxN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoce4AwQE 0HaQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKHJh1vMZ+quxTnHXHH8PkYZeLYq3sxOYYaxbHh2FtfNojMU PIscSWrgKtPT+bflxVzUMAyC2dHvu0JDi+5P63rMsliUgWvIcQwikXUo68LONZjG 9rjLa8sAiQ0irAu60QTi6un+X0JCMF552xWEJdSqju3Csta15d7ThcsEYkm59+r6 M6uafhKaTFbB1qVlyHOK/KYCAGLJsaBblW/czBK3NRNLBd+4kPesc3BSVLIQtp9f 2tZGVXCmmL5ekATdZfAA48Gd5kj+5+V0Nic+DZAdqR/RJkPu9PG1R2RKMjr8o6bJ QTRh3BNXpTkPoMYbF0RUVVM5/0UMxvI2YSg5qMg= -----END CERTIFICATE-----Generated at Mon Oct 5 06:40:08 2026 by rpki-client