$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: m2sBQ7/qgVb/JvyxieSCCc/5eoRRZ4xZVa10LLJD1E8= Subject key identifier: 85:DD:B4:A9:71:1C:13:18:92:33:59:EE:B2:DF:DB:A2:2F:7D:86:FD Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4C3D4718559979AD6A657C00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:47:18:55:99:79:ad:6a:65:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0eb9e259-ec64-4dff-8fd8-b5e20aaccbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:30:b8:8d:f7:48:20:db:b1:a3:0e:d5:9f: 6b:7e:9a:64:13:d0:9a:47:98:b4:8d:5d:a2:28:33: d2:16:d7:25:06:6f:10:0d:10:3b:4e:0f:a9:3c:41: 8d:ff:9e:c5:ee:86:0d:c3:a5:6f:6a:0a:0a:23:48: 60:15:21:b6:02:ff:04:b4:69:af:2b:5f:df:f7:b4: 34:d3:7a:89:3d:c7:7e:9f:28:e3:2d:dc:59:b6:f5: e7:f7:ee:8a:5b:6b:44:db:59:f0:ab:1d:da:d6:a1: 10:61:fe:ad:1a:bb:2f:0b:e6:b1:dc:fe:48:be:f3: b9:86:9e:9d:bf:d7:e3:8c:2d:c7:63:75:66:29:b7: 04:5b:2c:54:15:8b:e4:d8:2d:7d:7e:14:a4:26:75: e3:e3:e1:d2:77:6a:c8:27:12:a6:a2:1d:aa:6c:87: 34:a0:f9:75:7a:31:4f:b2:7d:eb:9a:0a:3a:61:c6: 98:a0:3b:16:84:dc:7f:ee:59:23:2e:b9:4b:97:54: b7:e2:9e:4c:a7:f4:4b:84:56:d8:ca:4f:75:1f:15: 17:0c:08:14:14:9b:05:e9:05:7d:3a:e9:e9:d5:27: 98:cc:3f:af:07:9c:88:9d:a4:f6:46:03:cc:ce:dd: 88:3d:2a:7a:d7:85:42:4c:2b:85:bf:eb:fa:0c:6c: 14:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DD:B4:A9:71:1C:13:18:92:33:59:EE:B2:DF:DB:A2:2F:7D:86:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:43:50:d4:d8:d6:8c:8a:a6:0f:f1:ab:e4:42:78:94:5c:9c: a2:24:e6:e8:76:57:46:5e:aa:fb:ae:9c:f3:c5:48:34:4c:c2: 4b:b9:9a:71:aa:bc:15:ae:d3:ec:e2:29:b8:78:2a:cf:b5:1b: 3f:f6:43:7f:b5:8f:2b:9d:94:5a:16:ce:b0:52:ec:6e:8e:07: df:09:5a:c4:4e:06:20:88:bd:b4:fc:bf:40:1d:59:1d:ce:7c: 1d:99:33:0e:d7:3e:f2:a8:e8:78:31:b8:6e:aa:9e:2e:85:80: 9f:55:98:8d:a4:13:b5:c6:8a:4e:9f:b3:c6:24:35:ba:ec:00: f9:4f:e0:cf:92:8e:66:d5:10:51:cb:c4:b7:75:88:79:0e:de: 6b:66:dc:7d:97:21:40:20:c2:76:61:e3:0a:5a:b5:5b:c8:7d: e4:07:b1:43:e3:62:2b:b2:cb:43:b1:ce:10:22:ab:17:15:f2: 21:6d:f6:a0:52:77:54:8b:bb:b8:d6:b4:55:a5:af:0c:06:ae: c6:eb:79:4a:1a:42:60:a1:2c:05:c3:24:f0:12:9d:86:9b:b8: 8e:1a:0d:f9:1c:06:6a:64:88:8c:66:b7:3f:11:cd:6f:e1:cc: e7:27:c4:a2:86:cc:92:0f:16:d1:76:8f:05:22:00:dd:92:00: c0:57:42:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUcYVZl5rWplfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGViOWUyNTktZWM2NC00ZGZmLThmZDgtYjVlMjBhYWNjYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23kwuI33SCDbsaMO1Z9rfppkE9CaR5i0jV2i KDPSFtclBm8QDRA7Tg+pPEGN/57F7oYNw6VvagoKI0hgFSG2Av8EtGmvK1/f97Q0 03qJPcd+nyjjLdxZtvXn9+6KW2tE21nwqx3a1qEQYf6tGrsvC+ax3P5IvvO5hp6d v9fjjC3HY3VmKbcEWyxUFYvk2C19fhSkJnXj4+HSd2rIJxKmoh2qbIc0oPl1ejFP sn3rmgo6YcaYoDsWhNx/7lkjLrlLl1S34p5Mp/RLhFbYyk91HxUXDAgUFJsF6QV9 Ounp1SeYzD+vB5yInaT2RgPMzt2IPSp614VCTCuFv+v6DGwUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXdtKlxHBMYkjNZ7rLf26IvfYb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxDUNTY1oyKpg/xq+RCeJRcnKIk5uh2V0ZeqvuunPPFSDRMwku5mnGq vBWu0+ziKbh4Ks+1Gz/2Q3+1jyudlFoWzrBS7G6OB98JWsROBiCIvbT8v0AdWR3O fB2ZMw7XPvKo6HgxuG6qni6FgJ9VmI2kE7XGik6fs8YkNbrsAPlP4M+SjmbVEFHL xLd1iHkO3mtm3H2XIUAgwnZh4wpatVvIfeQHsUPjYiuyy0OxzhAiqxcV8iFt9qBS d1SLu7jWtFWlrwwGrsbreUoaQmChLAXDJPASnYabuI4aDfkcBmpkiIxmtz8RzW/h zOcnxKKGzJIPFtF2jwUiAN2SAMBXQiw= -----END CERTIFICATE-----Generated at Sun Sep 27 14:45:59 2026 by rpki-client