$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa File: 8a80ef84-72eb-37af-86ea-3e37d2bac157.roa (raw, json) Hash identifier: i8HKE7OI7CiTHjHiRzTJE3lGztrscOkBxoNMFg7i32E= Subject key identifier: A1:43:8E:2A:C9:EF:FE:38:4C:22:29:2E:0C:1F:20:27:61:73:05:B9 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F4975BA76B6FDDEBEB8FC6000 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 43.255.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ba:76:b6:fd:de:be:b8:fc:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eec789e8-510c-497c-8086-c7b78fb9294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:7b:b3:c1:3b:d9:8e:42:59:93:e1:7c:14: c9:67:51:f3:3f:5e:84:c8:12:d5:8c:05:ba:06:b3: b4:9f:40:52:35:73:fa:5e:7f:b5:62:d4:f4:98:ef: 59:24:12:75:f9:98:99:cf:3e:11:80:57:5c:5a:b1: 28:24:99:29:f7:54:34:d3:75:37:03:3b:81:36:e5: c0:49:f2:71:66:3d:f1:81:bc:08:4e:75:6f:65:e5: e2:8b:1a:c2:94:1d:a5:e8:86:ad:b5:dc:64:05:74: e9:89:b9:f2:1e:46:16:7c:cf:b7:f2:26:80:e2:a8: 0c:4c:e5:2c:31:67:4c:e7:8f:be:4c:60:11:2e:f1: 49:87:57:ce:b5:ea:a5:83:8e:b9:5e:4f:5f:54:28: 8b:cf:5b:5b:38:b6:7c:c1:26:d6:da:83:41:fd:55: 5c:f0:18:70:86:c4:26:17:e5:58:2c:84:09:6d:43: 95:04:dc:2c:19:57:61:24:02:69:3f:da:3d:68:55: 59:83:da:55:52:2f:35:96:7a:70:90:44:a3:86:3c: 44:3c:66:ca:5f:37:ee:89:72:7a:2f:ad:6a:61:2c: 9a:36:1e:75:a0:0f:74:92:7a:1a:3c:b9:21:87:5a: 5b:72:32:d7:d7:23:87:14:91:24:87:d3:af:43:c9: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:43:8E:2A:C9:EF:FE:38:4C:22:29:2E:0C:1F:20:27:61:73:05:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 43.255.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:aa:04:eb:d9:0c:6f:ea:2f:f5:88:b7:69:d1:70:10:6c:70: 91:41:e1:38:ff:af:60:c4:89:6a:87:c7:e3:3b:58:8b:87:9f: b0:82:c8:cf:97:1f:51:3c:50:93:bf:12:87:cd:08:a0:34:da: be:c5:55:9b:91:c6:19:0e:ab:39:79:a9:0e:e6:07:54:fe:09: 60:36:5d:7d:d2:e0:3d:ba:17:af:ae:0f:db:41:e1:58:88:33: 7c:f4:cf:c5:ba:9b:c2:40:38:a2:12:0b:0e:82:10:ba:9c:46: 34:42:89:b4:b8:ab:4a:f5:a6:a0:2c:29:e4:5e:75:21:09:15: a8:5b:65:ee:52:09:5c:57:a0:3e:bb:00:57:41:4a:fd:4a:9b: c0:f0:c4:72:cb:41:98:b2:62:fe:54:8e:1f:fb:72:99:2d:54: b8:d6:52:9f:1f:54:d0:91:c6:64:b0:7d:3f:a3:98:ae:2f:3f: b2:63:c9:c1:aa:29:59:6c:39:c9:60:9f:9a:b6:50:26:b3:ec: 1a:dc:36:47:9d:72:9f:fb:b0:c5:6c:ca:46:04:24:92:f7:d1: bd:90:d2:10:16:88:c1:9e:f8:00:7c:ca:91:1d:d9:35:0c:03: 12:6f:e7:61:31:3a:cc:bc:c0:90:64:f6:f5:b8:a4:db:8b:59: 1c:f6:da:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdbp2tv3evrj8YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWVjNzg5ZTgtNTEwYy00OTdjLTgwODYtYzdiNzhmYjkyOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKd7s8E72Y5CWZPhfBTJZ1HzP16EyBLVjAW6 BrO0n0BSNXP6Xn+1YtT0mO9ZJBJ1+ZiZzz4RgFdcWrEoJJkp91Q003U3AzuBNuXA SfJxZj3xgbwITnVvZeXiixrClB2l6IattdxkBXTpibnyHkYWfM+38iaA4qgMTOUs MWdM54++TGARLvFJh1fOteqlg465Xk9fVCiLz1tbOLZ8wSbW2oNB/VVc8BhwhsQm F+VYLIQJbUOVBNwsGVdhJAJpP9o9aFVZg9pVUi81lnpwkESjhjxEPGbKXzfuiXJ6 L61qYSyaNh51oA90knoaPLkhh1pbcjLX1yOHFJEkh9OvQ8nX1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFDjirJ7/44TCIpLgwfICdhcwW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOGE4MGVmODQtNzJlYi0z N2FmLTg2ZWEtM2UzN2QyYmFjMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiqBOvZDG/qL/WIt2nRcBBscJFB4Tj/r2DEiWqHx+M7WIuHn7CCyM+X H1E8UJO/EofNCKA02r7FVZuRxhkOqzl5qQ7mB1T+CWA2XX3S4D26F6+uD9tB4ViI M3z0z8W6m8JAOKISCw6CELqcRjRCibS4q0r1pqAsKeRedSEJFahbZe5SCVxXoD67 AFdBSv1Km8DwxHLLQZiyYv5Ujh/7cpktVLjWUp8fVNCRxmSwfT+jmK4vP7JjycGq KVlsOclgn5q2UCaz7BrcNkedcp/7sMVsykYEJJL30b2Q0hAWiMGe+AB8ypEd2TUM AxJv52ExOsy8wJBk9vW4pNuLWRz22jU= -----END CERTIFICATE-----Generated at Tue Sep 29 15:47:09 2026 by rpki-client