$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fd1b6f40-c1c1-3c81-b033-af7f16d02731.roa File: fd1b6f40-c1c1-3c81-b033-af7f16d02731.roa (raw, json) Hash identifier: 8LZYKrRBaCAYoMjrVfMvB0PKUMCqHzfrcLoojqz6RTg= Subject key identifier: 98:58:4A:CF:BF:1D:88:84:23:68:21:16:D5:5F:8B:35:95:8A:B6:4F Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584E6B0A0E881A3B03EABE5EE900 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fd1b6f40-c1c1-3c81-b033-af7f16d02731.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 396502 IP address blocks: 161.129.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0e:88:1a:3b:03:ea:be:5e:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=c09643b2-960c-43b2-98a0-a5db12677fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:b9:72:8b:63:e0:48:96:65:71:8a:f1:be: 0a:ad:2b:92:36:b6:fb:b5:d7:95:a8:8a:ae:0f:7c: 00:84:36:44:06:49:f4:ef:3f:e7:ea:0e:97:78:56: af:31:ca:54:fd:82:e5:4d:1c:74:ef:56:c0:95:d9: db:bf:e2:57:38:77:e9:23:4a:33:09:d3:23:b9:8e: cf:c8:bb:b9:c0:ab:5e:9f:43:32:05:77:1d:93:88: 30:00:cd:da:e4:b0:e6:0f:bc:e0:ed:09:9a:13:41: 48:0f:70:c4:06:30:4f:5b:78:93:9f:b5:f4:d1:ad: cd:73:6f:98:45:51:e5:be:4a:eb:98:04:80:2b:34: bf:97:50:1d:14:8a:7f:68:88:6a:f3:fe:a0:bf:8a: 62:f4:a8:f7:25:2c:f8:46:8a:66:f8:b3:00:ed:74: 82:a3:57:04:e7:82:21:1b:99:fe:18:08:48:61:b8: 86:72:9e:55:e0:75:58:ea:7d:f7:96:46:66:0c:ba: 7a:43:69:8f:44:95:77:22:8d:52:e2:5b:d4:16:b5: df:cb:df:74:41:23:d9:d8:28:4a:74:b1:ce:47:a2: 5f:ce:5b:a4:12:5f:ea:ee:a7:c8:55:e1:b8:08:bc: 80:65:75:8a:44:85:a0:14:4a:59:32:a7:b8:48:ad: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:4A:CF:BF:1D:88:84:23:68:21:16:D5:5F:8B:35:95:8A:B6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fd1b6f40-c1c1-3c81-b033-af7f16d02731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 161.129.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:30:34:22:9f:f8:55:38:52:61:61:a6:50:59:94:1d:f3: 08:0f:5d:7c:f8:91:c8:50:e5:77:59:9c:73:47:97:4a:73:15: ac:57:ec:a3:81:2c:0e:be:e2:bd:0f:82:97:49:68:f8:e1:67: 36:48:0d:00:ec:e0:4e:0f:18:76:20:ea:fe:2e:2a:38:7e:f0: 7e:9b:0a:3e:e4:ee:b2:a9:77:08:95:58:09:2e:e7:74:46:0f: 08:f4:65:5e:3c:32:f7:98:f5:3a:89:1a:ab:d6:57:21:2e:b2: f4:53:7d:09:fc:20:71:87:f6:f6:13:fe:4b:e7:d4:e0:4a:1c: b5:83:d2:ab:fb:38:6a:93:95:c8:0c:14:58:ca:66:03:2c:d1: 96:eb:6b:4c:29:92:67:ef:3c:d2:c0:f9:ea:1e:8c:7b:1b:95: 62:bc:23:67:ac:f6:00:a2:6a:f6:2b:4d:c7:69:a2:56:06:ec: 04:bd:51:5f:56:da:56:1a:65:2b:ae:92:bd:1d:1b:e0:45:49: 6b:5e:03:e1:ac:ed:34:d7:59:8e:3a:0a:d3:b3:0e:b6:bb:16: 64:3b:c4:69:02:74:4f:1c:35:7f:75:07:34:ce:5e:da:c7:a2: 6c:ec:26:93:b8:e1:59:84:0a:cb:fb:ee:d6:af:5c:f0:05:20: cd:64:04:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCg6IGjsD6r5e6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YzA5NjQzYjItOTYwYy00M2IyLTk4YTAtYTVkYjEyNjc3ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoS5cotj4EiWZXGK8b4KrSuSNrb7tdeVqIqu D3wAhDZEBkn07z/n6g6XeFavMcpU/YLlTRx071bAldnbv+JXOHfpI0ozCdMjuY7P yLu5wKten0MyBXcdk4gwAM3a5LDmD7zg7QmaE0FID3DEBjBPW3iTn7X00a3Nc2+Y RVHlvkrrmASAKzS/l1AdFIp/aIhq8/6gv4pi9Kj3JSz4Ropm+LMA7XSCo1cE54Ih G5n+GAhIYbiGcp5V4HVY6n33lkZmDLp6Q2mPRJV3Io1S4lvUFrXfy990QSPZ2ChK dLHOR6JfzlukEl/q7qfIVeG4CLyAZXWKRIWgFEpZMqe4SK2BjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhYSs+/HYiEI2ghFtVfizWVirZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvZmQxYjZmNDAtYzFjMS0z YzgxLWIwMzMtYWY3ZjE2ZDAyNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVcMDQin/hVOFJhYaZQWZQd8wgPXXz4kchQ5XdZnHNHl0pzFaxX7KOB LA6+4r0PgpdJaPjhZzZIDQDs4E4PGHYg6v4uKjh+8H6bCj7k7rKpdwiVWAku53RG Dwj0ZV48MveY9TqJGqvWVyEusvRTfQn8IHGH9vYT/kvn1OBKHLWD0qv7OGqTlcgM FFjKZgMs0Zbra0wpkmfvPNLA+eoejHsblWK8I2es9gCiavYrTcdpolYG7AS9UV9W 2lYaZSuukr0dG+BFSWteA+Gs7TTXWY46CtOzDra7FmQ7xGkCdE8cNX91BzTOXtrH omzsJpO44VmECsv77tavXPAFIM1kBP0= -----END CERTIFICATE-----Generated at Fri Jul 24 13:06:25 2026 by rpki-client