$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa File: 2a10617a-7db4-3995-930c-fb3482472990.roa (raw, json) Hash identifier: d83IMuQI/T5wFgxapS167hYFJpcsDyn6stj9J3BSUFo= Subject key identifier: 3A:40:E6:CE:33:8E:6D:3F:E6:9A:C5:76:2C:E8:B9:34:69:CD:3C:09 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F498A35A8365BA239ED5C6E00 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.161.144.0/21 maxlen: 21 171.161.144.0/22 maxlen: 22 171.161.144.0/24 maxlen: 24 171.161.145.0/24 maxlen: 24 171.161.146.0/24 maxlen: 24 171.161.147.0/24 maxlen: 24 171.161.148.0/24 maxlen: 24 171.161.149.0/24 maxlen: 24 171.161.150.0/24 maxlen: 24 171.161.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:35:a8:36:5b:a2:39:ed:5c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ffc8f7c-e607-4180-844d-f4ac7f79251a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:fe:df:4e:e7:57:e8:ae:15:51:b4:c4:fb: df:10:b2:de:9f:52:c2:ce:62:59:30:cf:6b:ee:f8: 0d:f6:ad:ae:8c:e1:0f:0c:02:06:01:92:c1:0f:1e: 34:df:87:08:ab:54:51:91:4f:4f:5d:5b:a4:08:ca: 74:46:00:01:6c:f6:6c:2d:dc:3e:4f:64:44:3e:15: f7:d3:02:b6:cd:88:e2:f1:c1:53:70:05:98:45:ff: ca:4a:68:d5:c8:69:92:0e:4e:3c:58:2e:65:60:95: 61:b7:78:1d:54:ba:22:54:6c:53:a1:5c:75:f8:8a: 80:95:77:59:c5:d0:f4:13:82:6c:55:d4:d4:ba:92: 12:ee:06:2c:04:2a:3e:53:a4:f1:8f:9e:32:c8:57: 51:40:8e:8d:ab:b5:06:7e:98:6e:23:f5:d8:9e:53: 59:e3:6d:65:2f:cc:d9:af:80:87:bf:00:55:94:02: 9a:57:10:20:c7:64:62:92:97:30:1d:c2:11:ee:0c: c7:dc:b7:f9:77:0a:65:91:32:33:e8:06:57:00:a4: 03:17:3c:5f:f5:cb:ff:6a:04:f6:e1:e8:f0:f1:3e: 7d:44:2a:e4:cb:97:f0:63:62:76:b0:e4:37:c5:9d: d4:35:32:6a:67:34:32:e7:46:cb:c3:c1:ed:0d:27: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:E6:CE:33:8E:6D:3F:E6:9A:C5:76:2C:E8:B9:34:69:CD:3C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c6:dd:62:ca:86:b0:1d:f5:94:87:a8:b3:ed:ca:7c:87:e3: 30:71:d4:34:66:a1:be:a5:61:e2:1b:5d:d4:cb:81:82:33:d7: 04:4d:13:01:d9:11:1c:45:4d:7a:5b:1f:d3:98:97:9a:98:09: 98:ee:ca:e8:4e:56:75:cd:9a:53:3f:2c:e5:a1:0d:e7:bf:df: 70:a1:67:1e:f0:83:a8:bc:69:15:7e:cd:ae:39:75:26:ab:25: c1:50:f9:ec:58:5b:25:05:9d:2a:79:a8:4b:44:04:03:73:8f: 01:0e:14:05:4d:b5:c1:2a:6f:5f:6e:38:99:5c:6e:ed:d2:38: 55:95:4c:14:8c:54:24:f2:7a:dd:6e:bc:f1:ba:4d:7b:65:f4: 99:5c:78:c4:25:38:cb:1c:c4:f0:bb:a3:12:97:61:1e:1e:df: a2:5e:ac:e2:56:8c:dc:fc:51:16:a4:91:4c:e8:c7:14:bc:3b: c0:25:31:a8:3d:06:3c:8c:d8:00:b8:c9:19:cd:ed:a8:da:7a: af:f3:73:18:51:7d:fd:80:2e:2b:79:8b:15:c7:3d:44:37:13: 13:d0:b7:83:f6:17:4a:33:4f:41:9d:a7:85:0c:87:cb:54:1a: 95:95:a3:36:9d:7e:97:67:6d:68:d0:15:06:44:77:66:af:a9: 57:15:da:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijWoNluiOe1cbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZmYzhmN2MtZTYwNy00MTgwLTg0NGQtZjRhYzdmNzkyNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+P+307nV+iuFVG0xPvfELLen1LCzmJZMM9r 7vgN9q2ujOEPDAIGAZLBDx4034cIq1RRkU9PXVukCMp0RgABbPZsLdw+T2REPhX3 0wK2zYji8cFTcAWYRf/KSmjVyGmSDk48WC5lYJVht3gdVLoiVGxToVx1+IqAlXdZ xdD0E4JsVdTUupIS7gYsBCo+U6Txj54yyFdRQI6Nq7UGfphuI/XYnlNZ421lL8zZ r4CHvwBVlAKaVxAgx2RikpcwHcIR7gzH3Lf5dwplkTIz6AZXAKQDFzxf9cv/agT2 4ejw8T59RCrky5fwY2J2sOQ3xZ3UNTJqZzQy50bLw8HtDSf1SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpA5s4zjm0/5prFdizouTRpzTwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMmExMDYxN2EtN2RiNC0z OTk1LTkzMGMtZmIzNDgyNDcyOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq6GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfG3WLKhrAd9ZSHqLPtynyH4zBx1DRmob6lYeIbXdTLgYIz1wRNEwHZ ERxFTXpbH9OYl5qYCZjuyuhOVnXNmlM/LOWhDee/33ChZx7wg6i8aRV+za45dSar JcFQ+exYWyUFnSp5qEtEBANzjwEOFAVNtcEqb19uOJlcbu3SOFWVTBSMVCTyet1u vPG6TXtl9JlceMQlOMscxPC7oxKXYR4e36JerOJWjNz8URakkUzoxxS8O8AlMag9 BjyM2AC4yRnN7ajaeq/zcxhRff2ALit5ixXHPUQ3ExPQt4P2F0ozT0Gdp4UMh8tU GpWVozadfpdnbWjQFQZEd2avqVcV2vQ= -----END CERTIFICATE-----Generated at Fri Sep 25 19:48:21 2026 by rpki-client