$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa File: 09223a2e-2947-361f-938a-98cbd7de56d5.roa (raw, json) Hash identifier: cW7aMzF3hVEno3czPaPeaXdLkYpQ7jUiJDImUxSapUM= Subject key identifier: C8:D3:E1:48:33:6D:FB:A8:BB:BD:48:28:51:24:BF:99:F3:B2:2E:96 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F4973D3A9CC89D2CF2B8A0048 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1239 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d3:a9:cc:89:d2:cf:2b:8a:00:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c8cff2b-826a-4a6d-aa7c-66f56c7ee128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:81:8d:c5:a7:87:cf:1c:47:e2:10:79:1e: 46:7a:d1:52:01:97:42:77:df:bd:23:e6:d2:5d:34: ba:a3:14:4f:1c:5d:f3:bf:cc:97:13:36:08:78:3e: f0:ab:2c:1c:15:b8:9f:79:84:90:fc:75:69:c9:32: 45:85:6d:f3:00:f8:ab:b1:14:b0:df:bf:a7:22:c4: e5:5e:1d:b1:46:3c:48:64:e4:ab:ad:11:02:44:20: 96:55:70:6c:00:7e:e1:5d:ac:29:78:2e:5b:34:35: ad:88:92:e9:6e:c7:8e:78:c8:c8:79:4a:70:3d:d2: a3:9a:e4:39:3d:cd:51:99:f8:53:97:42:c6:4f:27: 99:22:67:98:42:69:89:1c:5e:0c:c3:41:d7:23:27: 38:93:9b:d2:24:f5:aa:b4:64:89:26:48:8d:6a:9a: 7c:aa:9d:eb:4e:84:53:a6:5a:7b:d9:11:0c:7a:21: fd:af:b5:72:5c:ac:86:66:0a:db:3d:c8:ec:a1:a7: 62:5c:22:7b:22:e0:54:d0:fe:7a:08:1d:c4:69:67: f5:52:9c:60:19:73:4e:92:69:f4:88:73:be:bc:fc: 6e:86:05:24:64:37:b5:5d:d7:57:c2:10:e1:a8:58: 30:1f:38:5c:37:8a:ea:ce:7b:b8:ec:68:a5:c4:cb: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:E1:48:33:6D:FB:A8:BB:BD:48:28:51:24:BF:99:F3:B2:2E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ce:67:e0:66:a5:95:36:0d:bb:ba:36:c4:77:95:12:37:5a: e0:2c:49:c7:ca:9c:4c:9e:74:4a:06:3a:8f:53:16:3a:b4:96: f4:0f:f2:23:ed:f0:f9:69:e7:61:93:d3:3b:78:ca:50:5a:c1: e2:c9:16:bc:ca:8b:a5:7b:ae:9d:f2:f7:c1:78:f6:bf:61:f0: 12:fd:8a:d7:47:94:02:ea:90:65:9d:cb:20:9a:16:8b:8a:2b: 4d:ef:f6:c4:f0:ab:97:ac:91:1e:91:1e:e6:56:6d:06:29:41: 5b:8e:cf:b9:67:c9:36:e9:1d:79:e4:92:8f:6d:71:b3:8c:96: 58:2d:fb:7e:eb:5a:29:f9:85:b7:47:e9:ca:49:df:d0:ce:8d: 89:13:32:a3:9f:c6:58:86:f2:50:5e:78:be:45:f5:12:12:2b: 79:ab:ce:b1:ac:1a:2d:93:db:14:23:d3:bf:c7:62:f3:59:33: 69:7d:ab:11:7b:76:d3:9d:9f:6b:74:3e:92:06:ed:44:9b:64: 24:9a:23:8b:22:26:16:30:26:58:39:3f:4b:01:0e:61:a9:cb: ff:6e:f3:35:01:74:17:3c:7a:63:a1:ed:73:fa:82:d5:66:c6: 32:0c:76:fb:ae:5f:1f:e9:a3:26:eb:69:f9:1e:f4:3e:b2:25: 5e:b3:9d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9OpzInSzyuKAEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M4Y2ZmMmItODI2YS00YTZkLWFhN2MtNjZmNTZjN2VlMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2WBjcWnh88cR+IQeR5GetFSAZdCd9+9I+bS XTS6oxRPHF3zv8yXEzYIeD7wqywcFbifeYSQ/HVpyTJFhW3zAPirsRSw37+nIsTl Xh2xRjxIZOSrrRECRCCWVXBsAH7hXawpeC5bNDWtiJLpbseOeMjIeUpwPdKjmuQ5 Pc1RmfhTl0LGTyeZImeYQmmJHF4Mw0HXIyc4k5vSJPWqtGSJJkiNapp8qp3rToRT plp72REMeiH9r7VyXKyGZgrbPcjsoadiXCJ7IuBU0P56CB3EaWf1UpxgGXNOkmn0 iHO+vPxuhgUkZDe1XddXwhDhqFgwHzhcN4rqznu47GilxMtfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjT4Ugzbfuou71IKFEkv5nzsi6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDkyMjNhMmUtMjk0Ny0z NjFmLTkzOGEtOThjYmQ3ZGU1NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHOZ+BmpZU2Dbu6NsR3lRI3WuAsScfKnEyedEoGOo9TFjq0lvQP8iPt 8Plp52GT0zt4ylBaweLJFrzKi6V7rp3y98F49r9h8BL9itdHlALqkGWdyyCaFouK K03v9sTwq5eskR6RHuZWbQYpQVuOz7lnyTbpHXnkko9tcbOMllgt+37rWin5hbdH 6cpJ39DOjYkTMqOfxliG8lBeeL5F9RISK3mrzrGsGi2T2xQj07/HYvNZM2l9qxF7 dtOdn2t0PpIG7USbZCSaI4siJhYwJlg5P0sBDmGpy/9u8zUBdBc8emOh7XP6gtVm xjIMdvuuXx/poybrafke9D6yJV6znUM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:35:02 2026 by rpki-client