$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa File: 26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa (raw, json) Hash identifier: p4NSmJWJH67etiOtLHixYjmaj8O7UXBmikHpAdaNj0g= Subject key identifier: D8:38:1F:5F:98:05:E4:CB:78:FD:88:63:2A:FB:FD:C2:DE:4D:6C:76 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584E842A410C54BD517386E9DF00 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 22125 IP address blocks: 161.150.0.0/21 maxlen: 21 161.150.128.0/20 maxlen: 20 161.150.128.0/21 maxlen: 21 161.150.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:41:0c:54:bd:51:73:86:e9:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=ef68febc-96c6-4c34-86a8-f8c75ea9d37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:ab:ec:9b:dd:86:24:d7:6b:95:8a:07:97: 77:60:3a:4a:a3:91:7b:17:c5:f8:21:7e:7d:18:68: 88:9d:c8:6f:f4:47:bd:ac:e2:61:13:73:f7:55:84: bb:8d:24:bd:fd:bc:06:6f:0c:50:28:8f:67:99:1e: 12:0f:de:3e:b8:ee:89:1e:2c:a1:bc:b0:79:b8:98: 4d:09:d4:8d:ac:ae:68:c9:01:fd:33:ae:74:f4:15: 24:82:01:de:e5:9e:7a:2e:aa:98:2c:4f:24:20:09: 64:92:46:9c:17:8a:35:4e:cc:fb:c6:80:fe:f3:f7: d8:e3:90:f1:bc:f3:e2:4a:51:ec:49:52:88:c4:d3: f5:7a:67:74:ae:8a:38:73:32:e6:88:00:20:d2:4b: 22:b7:48:e6:cf:96:6c:5e:ca:71:0c:f3:8f:fb:00: 77:79:90:4c:7f:67:c9:c3:48:d2:81:29:3e:9d:bf: b8:bd:60:5e:d0:b2:c1:61:a3:16:f0:04:65:3d:3b: a1:07:6e:0d:d3:69:f1:fd:53:6c:bc:c6:51:53:4a: ad:c0:74:0d:09:31:e4:b3:7f:2a:24:19:52:c0:25: 92:fa:29:a6:4d:b9:1b:62:6c:22:7c:1e:cf:f0:a0: 87:6a:2e:bb:19:50:d2:e4:9a:ae:c4:67:c2:73:d9: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:38:1F:5F:98:05:E4:CB:78:FD:88:63:2A:FB:FD:C2:DE:4D:6C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/26c6c04e-3fc7-32a2-a83c-bd22a6faea5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.0.0/21 161.150.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9a:c3:11:4f:02:a3:39:75:34:08:3f:4e:57:7b:fb:23:db: 12:5f:c9:53:4e:e7:b2:04:5c:1d:5b:a6:5d:db:57:b0:d6:b8: 97:92:2b:1d:ec:d4:a3:13:06:2a:36:d6:c4:da:ab:fc:c1:19: fc:db:d0:c7:3d:4a:ff:5c:ac:94:b1:2a:25:c4:2f:be:92:2d: 33:6d:09:a9:64:7a:ca:0f:1f:14:3c:70:9d:76:cc:aa:f2:19: e2:e8:e4:0d:9b:b6:2f:a2:19:3f:04:92:ee:84:2d:0d:60:e2: a9:9d:42:71:e8:1a:16:51:6e:f7:9a:7e:cb:7c:ef:26:35:21: da:03:24:3b:29:33:6c:4f:4f:fd:fa:22:20:d4:50:da:70:d3: 63:9a:3e:f1:98:b6:e9:99:20:b1:21:77:70:a4:20:9c:c7:63: 7a:30:a9:d0:be:c2:06:ba:59:25:90:3c:39:29:92:f6:77:63: 9a:dc:9d:27:fd:39:94:7b:e4:7d:8e:93:83:3f:e5:7d:5c:d7: ed:5e:24:c5:eb:ad:77:e4:5d:ee:8d:0a:b4:83:48:9a:f0:95: a3:15:59:84:b3:66:b9:96:31:39:dd:b4:0b:04:8b:c3:4f:49: 57:28:9b:0f:b9:52:31:87:ae:c8:cf:38:5c:59:33:22:3b:4e: d2:c9:8e:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6EKkEMVL1Rc4bp3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk ZWY2OGZlYmMtOTZjNi00YzM0LTg2YTgtZjhjNzVlYTlkMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFer7JvdhiTXa5WKB5d3YDpKo5F7F8X4IX59 GGiInchv9Ee9rOJhE3P3VYS7jSS9/bwGbwxQKI9nmR4SD94+uO6JHiyhvLB5uJhN CdSNrK5oyQH9M6509BUkggHe5Z56LqqYLE8kIAlkkkacF4o1Tsz7xoD+8/fY45Dx vPPiSlHsSVKIxNP1emd0roo4czLmiAAg0ksit0jmz5ZsXspxDPOP+wB3eZBMf2fJ w0jSgSk+nb+4vWBe0LLBYaMW8ARlPTuhB24N02nx/VNsvMZRU0qtwHQNCTHks38q JBlSwCWS+immTbkbYmwifB7P8KCHai67GVDS5JquxGfCc9mPqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNg4H1+YBeTLeP2IYyr7/cLeTWx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMjZjNmMwNGUtM2ZjNy0z MmEyLWE4M2MtYmQyMmE2ZmFlYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDoZYAAwQE oZaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACiawxFPAqM5dTQIP05Xe/sj2xJfyVNO57IEXB1bpl3bV7DW uJeSKx3s1KMTBio21sTaq/zBGfzb0Mc9Sv9crJSxKiXEL76SLTNtCalkesoPHxQ8 cJ12zKryGeLo5A2bti+iGT8Eku6ELQ1g4qmdQnHoGhZRbveafst87yY1IdoDJDsp M2xPT/36IiDUUNpw02OaPvGYtumZILEhd3CkIJzHY3owqdC+wga6WSWQPDkpkvZ3 Y5rcnSf9OZR75H2Ok4M/5X1c1+1eJMXrrXfkXe6NCrSDSJrwlaMVWYSzZrmWMTnd tAsEi8NPSVcomw+5UjGHrsjPOFxZMyI7TtLJjtQ= -----END CERTIFICATE-----Generated at Fri Jul 24 00:24:47 2026 by rpki-client