$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa File: eb949189-8271-3567-ac4e-0031c3fec821.roa (raw, json) Hash identifier: eYpU3ldiLWMJPEnyNXIfkYKgZ3w+lYeBXRqRLr4bZs8= Subject key identifier: 72:DC:6D:CD:FC:88:79:3F:97:0F:C8:6E:62:EC:21:C7:D1:35:C7:FF Certificate issuer: /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Certificate serial: 010D0C9F4328584F5A32DBB1022DFDDA2AECCD00 Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 398697 IP address blocks: 161.199.203.0/24 maxlen: 24 161.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:db:b1:02:2d:fd:da:2a:ec:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=6512ebc2-a962-4a36-b3f6-727da15cd322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:d4:7c:c5:59:0a:02:1e:c9:71:c9:91:21: 9f:c0:c4:be:2d:32:18:9e:d4:c4:ec:1a:f1:bf:56: 83:d6:d0:66:87:38:00:29:0d:48:9f:27:d4:6e:93: 36:bc:14:f6:8e:a3:87:69:eb:9f:a0:06:b7:b4:98: a3:17:a5:7d:18:ae:72:3c:d8:ce:e8:44:15:15:c1: 78:fe:3e:d4:8b:d5:4d:e9:65:ba:bc:27:71:a8:0e: 6d:6d:25:93:cf:b6:9a:83:18:3a:9c:fd:da:95:d3: 4f:8c:4b:34:2e:f1:f3:ec:29:97:d2:c1:7c:f2:2b: f1:5c:2e:97:57:f1:8b:91:1a:a6:5f:23:3a:c4:1c: 8f:da:42:2f:26:0c:54:9c:5c:17:40:53:bd:96:6b: 19:d2:ae:40:1d:81:aa:45:67:f1:98:7e:ae:dd:1a: c7:a6:b0:7e:1c:2c:04:ba:a2:51:26:fa:e0:44:14: b8:58:07:28:3d:3d:a0:b9:c0:aa:4b:c9:a6:2a:ab: c2:6c:39:a3:c6:11:c5:fd:25:8c:b6:23:d0:36:bf: 60:cb:fb:41:04:99:8c:fc:55:de:cd:3b:4d:f1:76: b0:63:48:19:b0:64:a0:ba:38:6c:0e:e6:e1:70:6e: 54:a6:97:79:73:aa:c4:13:60:67:46:d1:91:0e:81: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:6D:CD:FC:88:79:3F:97:0F:C8:6E:62:EC:21:C7:D1:35:C7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl X509v3 Authority Key Identifier: keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer sbgp-ipAddrBlock: critical IPv4: 161.199.203.0/24 161.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:72:54:05:3e:67:2c:32:8a:72:d9:bf:f9:a8:f5:36:3d:39: 21:f3:ea:5f:51:bf:b5:c0:52:63:f0:88:64:57:e0:05:68:9e: ad:cf:0a:a7:ce:71:b6:16:15:36:ce:61:cf:e7:84:7d:04:c7: 4d:f2:de:fa:75:01:4c:93:d5:b7:1f:c5:74:c3:47:d9:0a:52: eb:af:e6:18:c0:1e:c1:66:48:1d:c5:a8:f5:60:f5:77:2d:4a: 94:89:c6:a1:9f:88:6e:53:9e:df:2f:59:e3:f5:10:32:65:53: 4e:88:d0:55:12:df:7d:23:5a:1d:96:b8:e5:e2:8e:11:00:58: 42:b1:50:fb:04:5d:98:ee:4b:9b:24:31:30:ff:24:9f:06:da: 09:f7:7d:df:e1:08:9a:e3:23:0e:1b:29:54:72:5b:fc:6a:6d: c4:6d:af:47:b2:21:dd:d6:7c:9b:6b:ba:8a:d0:f3:d0:65:0d: f7:79:f4:1c:e4:89:5e:85:90:94:03:64:72:f7:a9:5e:07:c3: 16:79:e0:74:f6:7d:3b:05:60:88:a7:8d:a0:00:b4:85:1f:fe: 47:55:b7:6c:dc:a8:c1:8b:97:c0:07:88:ee:b7:d7:72:86:dd: 18:b2:b5:25:d0:7e:87:5a:3a:92:54:24:7f:e4:66:d6:2c:3c: 35:17:cc:c7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9aMtuxAi392irszQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl NGFkMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjUxMmViYzItYTk2Mi00YTM2LWIzZjYtNzI3ZGExNWNkMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/UfMVZCgIeyXHJkSGfwMS+LTIYntTE7Brx v1aD1tBmhzgAKQ1InyfUbpM2vBT2jqOHaeufoAa3tJijF6V9GK5yPNjO6EQVFcF4 /j7Ui9VN6WW6vCdxqA5tbSWTz7aagxg6nP3aldNPjEs0LvHz7CmX0sF88ivxXC6X V/GLkRqmXyM6xByP2kIvJgxUnFwXQFO9lmsZ0q5AHYGqRWfxmH6u3RrHprB+HCwE uqJRJvrgRBS4WAcoPT2gucCqS8mmKqvCbDmjxhHF/SWMtiPQNr9gy/tBBJmM/FXe zTtN8XawY0gZsGSgujhsDubhcG5Uppd5c6rEE2BnRtGRDoGJcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHLcbc38iHk/lw/IbmLsIcfRNcf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvZWI5NDkxODktODI3MS0z NTY3LWFjNGUtMDAzMWMzZmVjODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2 YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1 ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy MmU2NWU0YWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAocfLAwQA ocfmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI9yVAU+ZywyinLZv/mo9TY9OSHz6l9Rv7XAUmPwiGRX4AVo nq3PCqfOcbYWFTbOYc/nhH0Ex03y3vp1AUyT1bcfxXTDR9kKUuuv5hjAHsFmSB3F qPVg9XctSpSJxqGfiG5Tnt8vWeP1EDJlU06I0FUS330jWh2WuOXijhEAWEKxUPsE XZjuS5skMTD/JJ8G2gn3fd/hCJrjIw4bKVRyW/xqbcRtr0eyId3WfJtruorQ89Bl Dfd59BzkiV6FkJQDZHL3qV4HwxZ54HT2fTsFYIinjaAAtIUf/kdVt2zcqMGLl8AH iO6313KG3RiytSXQfodaOpJUJH/kZtYsPDUXzMc= -----END CERTIFICATE-----Generated at Mon Oct 5 13:41:18 2026 by rpki-client