$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa File: 0be8454d-aa3f-3887-b929-e6f6935a2918.roa (raw, json) Hash identifier: 8UqYffAFhjuSXrUSkfCyXnAVRZpYaXFhcRPRg9bHX/c= Subject key identifier: 96:66:8A:16:96:8D:37:FB:66:27:28:55:89:8F:19:59:B8:40:05:0D Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F497309C5E3B86EC0DAA7B520 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.161.20.0/22 maxlen: 22 171.161.20.0/24 maxlen: 24 171.161.21.0/24 maxlen: 24 171.161.22.0/24 maxlen: 24 171.161.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:09:c5:e3:b8:6e:c0:da:a7:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=760965e0-dea6-432a-8219-cc560d7c8019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:fb:e5:f3:fe:37:c8:d4:16:ba:6b:55:3a: e7:25:65:9a:7e:02:d4:17:d6:66:d9:db:9e:ba:a1: 01:3a:a9:e0:06:6b:d6:6c:53:32:3a:a0:56:fa:dc: 6e:a8:ca:d7:4c:cf:e5:d3:2b:5b:0f:da:22:fb:33: cf:2c:a7:c6:5b:2b:e1:a3:93:e8:84:16:22:2f:dd: fc:c3:a7:0f:c4:67:49:ae:58:91:b1:fc:e3:80:93: c3:f7:ee:01:f4:d6:3b:41:76:98:7b:49:71:aa:70: 6a:66:a4:b5:92:81:a8:10:c9:42:06:73:22:ec:37: 60:25:1b:bf:1e:bd:c3:00:80:ae:26:a5:04:15:d3: c5:db:f9:61:64:a9:53:a9:c7:b4:ce:9b:04:47:15: a1:0e:b2:21:b5:3d:cd:f9:fb:be:4e:c8:72:54:dd: c0:20:ff:27:40:db:a0:e3:17:03:7e:7f:2c:3c:c1: 48:ee:77:1d:6d:c0:4b:7c:f5:26:7a:6c:55:67:aa: 5a:32:09:eb:4b:dc:3b:6e:75:a8:12:2f:ff:83:49: 8e:eb:08:3b:e1:af:13:dc:2d:4f:e9:fc:3e:00:b9: 66:b4:03:df:33:84:76:60:e9:64:3c:4b:01:a1:ab: 75:4d:74:11:c3:11:ad:70:5c:8c:09:55:7a:97:81: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:66:8A:16:96:8D:37:FB:66:27:28:55:89:8F:19:59:B8:40:05:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c5:29:b8:85:ff:2f:5b:3d:61:37:69:8c:99:fd:3d:8f:32: ec:5c:7a:0a:5e:49:9b:43:88:0b:ce:a9:12:b4:9c:f5:58:f0: e1:2f:9d:a8:b9:69:0e:ea:1d:94:31:de:3a:1e:98:8b:56:de: 84:da:83:3c:d9:af:58:b3:fd:d9:8a:b9:7a:5d:21:67:ed:3f: 3f:34:93:4d:2a:1f:b9:b1:f3:fd:db:49:f2:07:c8:f2:4a:9a: 0a:75:4b:f7:25:a3:ee:1e:37:c0:5a:b9:79:3f:f8:dc:7a:f6: 02:23:7c:2e:1b:42:2c:a8:6e:da:61:80:1a:06:46:91:53:63: 21:7d:65:86:77:55:90:b4:2a:0f:93:6b:ce:30:a7:05:2a:b4: d5:fe:6c:85:83:28:e1:30:44:bd:84:37:f0:2e:0d:00:e9:2c: 5f:46:94:c4:4c:34:b5:c6:b5:f8:f5:32:20:12:ae:b3:c5:5f: 1c:23:28:eb:a3:13:25:6c:af:1f:d5:c5:4d:ff:38:bd:11:dd: ed:25:95:5c:e4:26:ad:7b:38:ca:e0:79:d4:f1:3d:e1:c7:fa: 39:a0:47:1f:e8:62:22:f3:88:f3:75:a5:6e:6c:4e:3c:8f:95: b9:5a:b3:02:f6:45:b5:0d:6b:bf:a5:30:d8:37:21:a5:d3:04: a9:1a:77:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwnF47huwNqntSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYwOTY1ZTAtZGVhNi00MzJhLTgyMTktY2M1NjBkN2M4MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzf75fP+N8jUFrprVTrnJWWafgLUF9Zm2due uqEBOqngBmvWbFMyOqBW+txuqMrXTM/l0ytbD9oi+zPPLKfGWyvho5PohBYiL938 w6cPxGdJrliRsfzjgJPD9+4B9NY7QXaYe0lxqnBqZqS1koGoEMlCBnMi7DdgJRu/ Hr3DAICuJqUEFdPF2/lhZKlTqce0zpsERxWhDrIhtT3N+fu+TshyVN3AIP8nQNug 4xcDfn8sPMFI7ncdbcBLfPUmemxVZ6paMgnrS9w7bnWoEi//g0mO6wg74a8T3C1P 6fw+ALlmtAPfM4R2YOlkPEsBoat1TXQRwxGtcFyMCVV6l4H/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZmihaWjTf7ZicoVYmPGVm4QAUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGJlODQ1NGQtYWEzZi0z ODg3LWI5MjktZTZmNjkzNWEyOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/FKbiF/y9bPWE3aYyZ/T2PMuxcegpeSZtDiAvOqRK0nPVY8OEvnai5 aQ7qHZQx3joemItW3oTagzzZr1iz/dmKuXpdIWftPz80k00qH7mx8/3bSfIHyPJK mgp1S/clo+4eN8BauXk/+Nx69gIjfC4bQiyobtphgBoGRpFTYyF9ZYZ3VZC0Kg+T a84wpwUqtNX+bIWDKOEwRL2EN/AuDQDpLF9GlMRMNLXGtfj1MiASrrPFXxwjKOuj EyVsrx/VxU3/OL0R3e0llVzkJq17OMrgedTxPeHH+jmgRx/oYiLziPN1pW5sTjyP lblaswL2RbUNa7+lMNg3IaXTBKkad4Y= -----END CERTIFICATE-----Generated at Sat Sep 26 05:00:11 2026 by rpki-client