$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: qMFBHskJ9dBp6OmGhYI4Fvs1MWcoI1H/fEZFR6N1Y+E= Subject key identifier: D7:09:5D:EE:A9:86:56:82:AA:9C:28:F8:B1:30:8C:4B:A4:5B:07:3F Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584F1467989F01D3A2E85800D180 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:98:9f:01:d3:a2:e8:58:00:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=200a3c9c-8fc5-472a-a8a2-4d983166a2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:fd:5f:de:fc:9f:84:0e:6d:12:de:7b:37: b1:27:df:ad:8d:e4:14:79:34:18:74:81:47:fb:ec: 3c:4e:90:f9:0f:30:7c:ae:63:b8:6a:fe:30:ce:d0: b1:da:36:fe:f7:46:6d:76:d1:cc:d8:c6:20:0f:a3: 6b:91:14:b7:59:39:bb:1a:10:d6:57:0c:53:00:8a: 3f:b6:39:0f:9e:eb:6d:91:8f:96:fd:db:35:a0:7d: 9a:66:f7:c1:45:a7:fe:3f:83:47:2d:ac:03:4f:27: 4e:c3:7b:c4:62:19:55:c2:d9:2b:e6:ac:4c:e2:1f: 66:dc:34:39:fa:93:dc:7c:b8:76:72:2f:34:d6:77: 3c:9d:44:5c:e1:b2:19:dd:bd:65:05:a6:c4:72:b5: 95:6a:25:9d:f7:15:a4:aa:cb:bf:ef:5a:84:2e:dc: c1:0e:ed:f0:24:62:ee:d5:fd:49:6c:a0:07:4d:ea: 7b:81:ac:c7:33:1e:c2:89:f2:6d:61:d7:f2:f6:75: 8a:a1:26:b0:70:c8:c8:b0:7d:3f:df:9d:cc:5e:27: d2:7c:41:33:6f:28:e2:c1:60:91:7c:b6:6e:7f:21: b6:2d:0d:68:1f:a4:e7:48:98:b4:89:4c:48:1a:3a: 47:cc:9a:6c:8c:df:7b:d8:53:f6:ef:fc:c2:b5:68: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:5D:EE:A9:86:56:82:AA:9C:28:F8:B1:30:8C:4B:A4:5B:07:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:08:11:67:57:6e:59:02:b5:58:c3:65:66:cf:f9:45:c9:0b: b6:a2:a1:02:88:e9:9e:6c:3f:bb:3b:89:62:6b:2b:18:24:9c: 3c:15:ed:e4:ca:66:4f:a9:1e:53:58:c4:ab:b0:03:ce:ae:ad: 85:08:81:14:68:e9:6f:50:5d:7f:0a:8a:0f:42:df:19:b9:fb: d3:03:a5:85:6d:20:2f:0b:41:47:6f:f1:21:57:5d:5c:d7:39: 7a:a5:97:f7:7a:45:5b:19:c3:7f:7d:ce:7a:b4:55:68:d2:b5: 0f:76:71:9e:03:97:a2:cc:69:78:9c:64:a0:63:c5:2e:1f:80: 1e:7d:be:30:76:04:8e:3f:04:91:d4:14:26:f8:3b:ef:27:36: 16:ec:ef:55:3e:30:02:2b:13:34:ea:cb:a2:16:22:5d:6d:4a: 3a:c5:54:0d:4a:d3:4a:44:05:ee:a6:1b:ec:1a:b0:f4:ce:26: 3a:ce:8e:f9:0f:9b:e6:e1:e6:47:e9:b8:cb:4d:1e:51:eb:9f: 61:1a:30:38:ad:5e:3b:d7:c5:d8:82:a6:41:ac:45:e2:68:e6: cb:30:4d:6a:2b:90:77:2a:06:41:ab:6e:97:eb:69:49:d9:05: 47:fc:ea:6f:6b:27:ae:9b:f4:da:aa:ea:4a:a2:cb:b6:b3:0e: 0b:60:d7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5ifAdOi6FgA0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjAwYTNjOWMtOGZjNS00NzJhLWE4YTItNGQ5ODMxNjZhMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/X9X978n4QObRLeezexJ9+tjeQUeTQYdIFH ++w8TpD5DzB8rmO4av4wztCx2jb+90ZtdtHM2MYgD6NrkRS3WTm7GhDWVwxTAIo/ tjkPnuttkY+W/ds1oH2aZvfBRaf+P4NHLawDTydOw3vEYhlVwtkr5qxM4h9m3DQ5 +pPcfLh2ci801nc8nURc4bIZ3b1lBabEcrWVaiWd9xWkqsu/71qELtzBDu3wJGLu 1f1JbKAHTep7gazHMx7CifJtYdfy9nWKoSawcMjIsH0/353MXifSfEEzbyjiwWCR fLZufyG2LQ1oH6TnSJi0iUxIGjpHzJpsjN972FP27/zCtWhrVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcJXe6phlaCqpwo+LEwjEukWwc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0IEWdXblkCtVjDZWbP+UXJC7aioQKI6Z5sP7s7iWJrKxgknDwV7eTK Zk+pHlNYxKuwA86urYUIgRRo6W9QXX8Kig9C3xm5+9MDpYVtIC8LQUdv8SFXXVzX OXqll/d6RVsZw399znq0VWjStQ92cZ4Dl6LMaXicZKBjxS4fgB59vjB2BI4/BJHU FCb4O+8nNhbs71U+MAIrEzTqy6IWIl1tSjrFVA1K00pEBe6mG+wasPTOJjrOjvkP m+bh5kfpuMtNHlHrn2EaMDitXjvXxdiCpkGsReJo5sswTWorkHcqBkGrbpfraUnZ BUf86m9rJ66b9Nqq6kqiy7azDgtg18A= -----END CERTIFICATE-----Generated at Thu Oct 8 16:56:02 2026 by rpki-client