$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa File: 3228a7be-6150-3af1-9c53-ac3898b20397.roa (raw, json) Hash identifier: olZXRw44dBIzZBlw3WolCxowKxUdCKXXmhW5vatQWTM= Subject key identifier: 10:E2:89:61:34:7C:85:28:DC:D1:4B:85:3D:A7:7A:EB:C6:63:54:6A Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584F4F07FA4CF6EBE3C320F0E260 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 10995 IP address blocks: 161.150.86.0/24 maxlen: 24 161.150.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:fa:4c:f6:eb:e3:c3:20:f0:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=1b508e61-ef20-4467-9469-1250774c1056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:9a:83:3c:f1:62:1b:2d:8c:c2:0d:cf:98: b3:23:01:ba:ed:c7:ac:82:59:1e:60:5a:e9:ff:92: 64:34:b7:b2:94:26:56:b2:d1:69:e9:96:07:95:0f: 9a:4f:05:f6:6b:63:2e:2c:e9:4b:04:3a:69:71:4e: 6c:3a:d2:3f:3d:ad:6b:57:d1:11:2e:47:2e:3c:88: 46:e6:7a:f4:60:d5:18:05:c1:04:e2:b3:2c:ac:70: 4a:0b:83:ef:b9:ac:d3:43:1a:20:bc:d6:88:8e:e7: b5:72:42:b9:1f:46:e5:99:c7:d8:c2:7a:72:93:a3: 4a:44:71:3c:03:fe:40:f2:7f:df:78:0a:cd:a5:a1: e6:cd:1c:7d:41:85:35:cb:3c:cf:96:45:3a:35:dc: d6:2c:5c:33:c6:fd:31:4b:93:d8:87:61:7f:e8:55: d5:8d:9c:31:d9:e0:78:83:ec:8c:ea:59:3d:b4:3a: b6:ee:ea:0a:fc:d7:08:d5:7a:7a:31:62:ce:5a:ba: a7:f2:c2:c6:0f:c5:6c:6a:3b:4b:a0:ef:d6:44:26: 86:a0:06:e6:d2:cd:64:48:ac:d4:1e:f4:2c:ce:1f: 57:cf:9b:18:26:ed:ab:a9:57:44:06:1f:36:35:bd: 29:cb:a7:22:ec:fb:02:7e:ef:e1:64:98:84:49:5e: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E2:89:61:34:7C:85:28:DC:D1:4B:85:3D:A7:7A:EB:C6:63:54:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.86.0/24 161.150.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5a:82:20:29:dd:d5:58:4a:92:4f:88:74:5b:0e:34:81:2e: 41:f4:f8:9a:8f:84:f4:3b:70:78:ad:e7:c1:4c:38:88:f9:0e: 2b:60:ac:03:be:21:59:23:f6:2a:b0:07:f1:4f:35:4f:c1:0c: 61:11:2c:84:7c:e6:52:b6:50:59:2c:b0:0b:ff:b9:68:5c:04: 90:86:28:e8:81:73:df:fc:99:bf:8d:56:89:a8:94:f5:4e:5c: bc:12:b9:ce:84:0c:31:6b:05:48:9d:1e:02:76:d9:36:30:d4: 59:10:1b:27:0a:82:6b:61:30:97:6f:41:b3:ce:a2:26:79:1d: fc:3a:96:1f:11:6d:99:53:47:c7:4a:e6:88:8a:72:84:be:ea: dc:c3:09:a2:05:24:48:93:3f:5e:1c:bc:fc:59:42:6f:1e:12: 35:11:5f:23:06:26:f2:78:ac:6a:88:ce:b9:7c:7b:77:90:7a: 5e:2d:b8:21:24:45:66:97:82:07:b4:b0:ae:ed:bc:64:c1:90: 1f:72:33:c0:6c:bd:f3:9c:e0:53:2a:6c:23:69:ec:3f:47:ed: 98:fd:7c:3e:42:d4:c5:b7:a2:1a:7e:be:d8:94:29:1c:4f:d8: 26:fd:23:97:1b:09:01:4d:ac:39:ba:66:ef:ba:50:47:01:1a: 40:a5:c1:57 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9PB/pM9uvjwyDw4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MWI1MDhlNjEtZWYyMC00NDY3LTk0NjktMTI1MDc3NGMxMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktyagzzxYhstjMINz5izIwG67cesglkeYFrp /5JkNLeylCZWstFp6ZYHlQ+aTwX2a2MuLOlLBDppcU5sOtI/Pa1rV9ERLkcuPIhG 5nr0YNUYBcEE4rMsrHBKC4PvuazTQxogvNaIjue1ckK5H0blmcfYwnpyk6NKRHE8 A/5A8n/feArNpaHmzRx9QYU1yzzPlkU6NdzWLFwzxv0xS5PYh2F/6FXVjZwx2eB4 g+yM6lk9tDq27uoK/NcI1Xp6MWLOWrqn8sLGD8VsajtLoO/WRCaGoAbm0s1kSKzU HvQszh9Xz5sYJu2rqVdEBh82Nb0py6ci7PsCfu/hZJiESV4fRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBDiiWE0fIUo3NFLhT2neuvGY1RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMzIyOGE3YmUtNjE1MC0z YWYxLTljNTMtYWMzODk4YjIwMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoZZWAwQA oZZ6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEJagiAp3dVYSpJPiHRbDjSBLkH0+JqPhPQ7cHit58FMOIj5 DitgrAO+IVkj9iqwB/FPNU/BDGERLIR85lK2UFkssAv/uWhcBJCGKOiBc9/8mb+N VomolPVOXLwSuc6EDDFrBUidHgJ22TYw1FkQGycKgmthMJdvQbPOoiZ5Hfw6lh8R bZlTR8dK5oiKcoS+6tzDCaIFJEiTP14cvPxZQm8eEjURXyMGJvJ4rGqIzrl8e3eQ el4tuCEkRWaXgge0sK7tvGTBkB9yM8BsvfOc4FMqbCNp7D9H7Zj9fD5C1MW3ohp+ vtiUKRxP2Cb9I5cbCQFNrDm6Zu+6UEcBGkClwVc= -----END CERTIFICATE-----Generated at Sun Oct 4 12:58:06 2026 by rpki-client