$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa File: 2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa (raw, json) Hash identifier: ossDJPwC2l5i0HOysuwB2JYS4FnX9ypyqpXX5qaZnTw= Subject key identifier: FE:E3:0F:E7:71:FE:E8:2A:2B:D7:05:C6:EF:70:FE:F5:27:ED:70:AA Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584F49880ADF20B72797B7CC6640 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22125 IP address blocks: 161.150.11.0/24 maxlen: 24 161.150.11.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:0a:df:20:b7:27:97:b7:cc:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24fe7421-7776-4ab2-a754-9a51c24042e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:4e:da:ef:ab:b6:df:c3:7b:6f:78:37:e5: ed:15:8c:df:ac:cd:e8:7a:d5:78:87:e9:b7:88:7a: 9c:de:bf:d5:e1:30:8a:53:f9:d1:44:45:33:78:d1: 31:31:ac:6d:07:e2:e3:c3:b6:5f:07:48:0e:62:90: 90:cb:7a:3e:e0:ab:40:1e:0d:47:e9:07:0e:b6:4f: 78:cb:f3:8e:12:22:44:82:29:14:8d:fa:3c:1a:10: 7d:ed:12:e9:80:97:ef:b5:e9:c5:23:4e:a5:a1:e1: 2d:2f:d4:65:83:47:b3:3d:8a:3e:b0:c9:8f:91:2d: 9b:d7:d5:df:8a:f1:ae:64:a7:50:83:c7:98:cb:20: a9:98:10:73:56:03:de:67:cf:64:7e:89:e2:40:4d: 26:a8:6b:f9:48:11:7e:37:af:0d:c9:fc:3b:52:e2: ff:e7:af:7d:00:40:80:bd:d3:14:59:9c:30:3b:52: a7:31:ab:3f:9e:fa:eb:7e:df:96:e1:47:54:27:81: c2:a8:19:d5:21:bb:e3:18:83:49:93:72:e9:fb:cc: ce:41:50:ee:87:03:dc:47:69:1b:7b:65:05:c5:3f: c2:42:a0:32:2b:7f:2c:cc:d7:30:a8:5a:7c:ea:6c: cb:79:ea:79:cd:31:5e:4e:c5:d9:0c:1a:cd:50:a0: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:0F:E7:71:FE:E8:2A:2B:D7:05:C6:EF:70:FE:F5:27:ED:70:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/2bae2a1c-c01e-3be9-8e77-f2e78280e0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:13:57:02:21:b2:f3:40:f4:ab:4a:25:c1:63:5a:94:b4:3f: 57:da:88:6e:5a:10:f3:93:15:88:c3:26:d2:45:19:be:4d:77: a9:65:bf:04:15:82:9e:60:21:69:b1:12:d2:30:f1:d0:0f:00: 11:d6:b6:68:ee:06:22:ec:f1:18:88:3b:f5:7d:63:3d:7e:66: 87:73:25:dd:50:f1:e3:29:09:dc:39:5f:40:dd:ee:85:29:dc: 21:71:7f:02:27:ad:5e:0b:b6:fc:c8:cf:fc:a4:c4:5a:a7:68: d0:8b:58:df:a6:47:70:a0:61:0f:92:1e:c5:f0:65:be:48:cd: 61:85:e0:9a:da:79:7f:19:7b:bf:1d:72:86:eb:87:78:f2:a8: b3:c8:18:f2:03:09:71:ac:01:ba:9f:10:d1:82:0f:fa:b2:0e: e3:4c:99:27:0c:b5:73:bb:d0:4d:95:83:4b:bf:3f:88:ae:fe: 4e:e8:4e:28:46:6e:aa:dc:4e:46:9e:ee:41:06:13:b9:61:6d: 11:04:dc:8c:3e:18:c4:fd:a3:ee:23:03:d7:cb:31:a2:3e:1f: 99:02:e1:5d:8f:be:f5:30:d2:48:98:82:32:01:e0:de:67:cd: 0a:ab:10:62:c0:48:b5:d6:40:38:84:9b:cb:bc:e0:f6:a5:2d: f9:20:b9:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiArfILcnl7fMZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRmZTc0MjEtNzc3Ni00YWIyLWE3NTQtOWE1MWMyNDA0MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsxO2u+rtt/De294N+XtFYzfrM3oetV4h+m3 iHqc3r/V4TCKU/nRREUzeNExMaxtB+Ljw7ZfB0gOYpCQy3o+4KtAHg1H6QcOtk94 y/OOEiJEgikUjfo8GhB97RLpgJfvtenFI06loeEtL9Rlg0ezPYo+sMmPkS2b19Xf ivGuZKdQg8eYyyCpmBBzVgPeZ89kfoniQE0mqGv5SBF+N68Nyfw7UuL/5699AECA vdMUWZwwO1KnMas/nvrrft+W4UdUJ4HCqBnVIbvjGINJk3Lp+8zOQVDuhwPcR2kb e2UFxT/CQqAyK38szNcwqFp86mzLeep5zTFeTsXZDBrNUKAaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7jD+dx/ugqK9cFxu9w/vUn7XCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMmJhZTJhMWMtYzAxZS0z YmU5LThlNzctZjJlNzgyODBlMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoZYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoTVwIhsvNA9KtKJcFjWpS0P1faiG5aEPOTFYjDJtJFGb5Nd6llvwQV gp5gIWmxEtIw8dAPABHWtmjuBiLs8RiIO/V9Yz1+ZodzJd1Q8eMpCdw5X0Dd7oUp 3CFxfwInrV4LtvzIz/ykxFqnaNCLWN+mR3CgYQ+SHsXwZb5IzWGF4JraeX8Ze78d cobrh3jyqLPIGPIDCXGsAbqfENGCD/qyDuNMmScMtXO70E2Vg0u/P4iu/k7oTihG bqrcTkae7kEGE7lhbREE3Iw+GMT9o+4jA9fLMaI+H5kC4V2PvvUw0kiYgjIB4N5n zQqrEGLASLXWQDiEm8u84PalLfkguYI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:23:20 2026 by rpki-client