$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d99d2205-c98b-3124-8036-95a751e7dc0a.roa File: d99d2205-c98b-3124-8036-95a751e7dc0a.roa (raw, json) Hash identifier: A4SaZ0ehLape8w1+wCJZn67jkdHeCxDZqBFLDppfMDo= Subject key identifier: E0:38:64:20:16:4C:69:7C:5C:12:6A:E5:0C:55:FA:44:AF:73:E5:4B Certificate issuer: /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Certificate serial: 010D0C9F4328584F1B62557F7A78D7F6B1D6EA40 Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d99d2205-c98b-3124-8036-95a751e7dc0a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 161.115.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:55:7f:7a:78:d7:f6:b1:d6:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=1be769c8-6881-4fc6-a724-f69b0391dc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:d6:70:58:2d:2c:c1:28:8d:3d:97:4e:b1: 3e:c5:17:6d:6b:00:85:70:56:d7:a1:9f:bc:02:7d: 63:92:af:e7:3f:91:1c:a9:27:ad:7b:5d:90:99:c6: 47:8f:9d:4d:5f:cb:6a:33:4a:b0:96:93:67:ea:eb: 5d:6b:b5:dc:c1:72:a2:1a:69:25:5b:07:e6:ac:4a: f4:77:1a:3c:1c:55:22:48:d2:13:1e:3b:ef:d9:29: 44:ab:c5:b9:7d:46:99:94:c7:38:fe:a6:6b:9b:6d: 37:0c:92:e8:34:51:e9:da:77:49:60:80:59:36:f1: cb:9d:ff:8a:d3:e0:2d:45:75:08:ff:2b:7e:75:dd: 8e:ee:d2:e7:f2:d5:73:83:0d:52:17:5d:2b:bb:2b: a2:69:e1:28:fc:1a:f4:8f:7f:80:24:8a:e6:25:51: 5b:44:88:c9:a8:43:1c:14:45:29:bf:63:0f:a1:17: b9:61:e9:e6:42:73:b2:eb:f3:de:0c:e9:c9:4c:37: 6f:8a:dc:fa:9b:a5:e0:d8:ea:29:c8:df:d4:71:ca: e2:bf:d9:eb:2c:fe:84:e9:f9:9a:b7:c0:03:11:de: 4c:09:0d:24:f7:27:d1:e2:be:54:21:a4:b1:3c:3d: 25:4e:2f:bf:67:38:43:08:02:41:82:65:67:ef:2e: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:64:20:16:4C:69:7C:5C:12:6A:E5:0C:55:FA:44:AF:73:E5:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/d99d2205-c98b-3124-8036-95a751e7dc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl X509v3 Authority Key Identifier: keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer sbgp-ipAddrBlock: critical IPv4: 161.115.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d6:a6:38:bb:64:50:52:42:09:15:42:4c:e4:fb:0b:56:fc: 38:52:23:48:8c:b6:ab:d0:a0:27:11:e6:15:bb:e7:9a:50:d2: 06:ca:0a:5b:40:11:6b:1f:87:9d:ea:41:61:cb:e7:99:de:1e: d3:08:50:f7:14:4a:6e:a1:4f:0a:b1:63:3d:5d:13:14:5a:36: 3f:72:7c:ef:5c:63:e1:a8:b0:4e:95:69:89:07:f7:67:80:25: db:f3:b8:6a:00:8c:36:c0:26:b3:1c:61:7f:26:11:a2:d7:4b: 8d:a9:4b:f9:9b:5c:ce:d0:23:ee:0a:ef:bf:ee:d7:ac:2c:95: 18:20:bc:96:da:fe:a1:78:07:3b:41:62:db:a0:51:79:85:84: 01:bf:0e:dc:3f:dc:41:f3:9a:b4:c2:a3:72:ae:b3:21:96:54: 13:e5:5c:5d:99:28:4b:eb:5c:85:c9:17:05:06:6f:ca:d1:2b: 87:3b:1b:82:c8:d9:18:b9:fb:ad:e9:d8:7e:b7:87:8e:06:fa: 4f:52:13:39:55:15:a9:18:e2:4a:01:ac:fb:c2:be:b3:d7:15: c4:87:aa:d5:ff:ad:61:cf:7f:47:e1:4e:eb:7e:40:40:17:c6: 82:43:75:ea:f4:f7:33:c0:12:ae:63:26:31:5c:52:85:e6:27: 99:6f:0c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlV/enjX9rHW6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1 M2ZiMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MWJlNzY5YzgtNjg4MS00ZmM2LWE3MjQtZjY5YjAzOTFkYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktjWcFgtLMEojT2XTrE+xRdtawCFcFbXoZ+8 An1jkq/nP5EcqSete12QmcZHj51NX8tqM0qwlpNn6utda7XcwXKiGmklWwfmrEr0 dxo8HFUiSNITHjvv2SlEq8W5fUaZlMc4/qZrm203DJLoNFHp2ndJYIBZNvHLnf+K 0+AtRXUI/yt+dd2O7tLn8tVzgw1SF10ruyuiaeEo/Br0j3+AJIrmJVFbRIjJqEMc FEUpv2MPoRe5YenmQnOy6/PeDOnJTDdvitz6m6Xg2OopyN/Uccriv9nrLP6E6fma t8ADEd5MCQ0k9yfR4r5UIaSxPD0lTi+/ZzhDCAJBgmVn7y75iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA4ZCAWTGl8XBJq5QxV+kSvc+VLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1 OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvZDk5ZDIyMDUtYzk4Yi0z MTI0LTgwMzYtOTVhNzUxZTdkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoXOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrWpji7ZFBSQgkVQkzk+wtW/DhSI0iMtqvQoCcR5hW755pQ0gbKCltA EWsfh53qQWHL55neHtMIUPcUSm6hTwqxYz1dExRaNj9yfO9cY+GosE6VaYkH92eA JdvzuGoAjDbAJrMcYX8mEaLXS42pS/mbXM7QI+4K77/u16wslRggvJba/qF4BztB YtugUXmFhAG/Dtw/3EHzmrTCo3KusyGWVBPlXF2ZKEvrXIXJFwUGb8rRK4c7G4LI 2Ri5+63p2H63h44G+k9SEzlVFakY4koBrPvCvrPXFcSHqtX/rWHPf0fhTut+QEAX xoJDder09zPAEq5jJjFcUoXmJ5lvDNc= -----END CERTIFICATE-----Generated at Wed Sep 30 19:44:59 2026 by rpki-client