$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa File: 0ea7e4d7-09c6-3ffa-8dee-902326476334.roa (raw, json) Hash identifier: zQ3DUS6e/gXzCIHY3QwqpcM2xXXixwdgmKx0HTnf4ZA= Subject key identifier: 1E:A4:48:46:2D:22:B3:29:B1:17:CA:89:53:4A:2C:80:95:EC:15:03 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584F9D33172864FFF18E424C6580 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 38551 IP address blocks: 161.121.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:17:28:64:ff:f1:8e:42:4c:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=6f8d3918-9d49-479e-974b-1bfee337ac69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:73:7d:35:71:8b:d5:d5:a4:ba:0f:fa:e4: 2a:0e:7b:86:54:14:56:af:de:a1:4b:19:5c:bc:35: 51:32:7e:34:5f:b1:7c:b9:48:40:d8:81:82:38:6a: 00:56:f7:e5:53:5f:e0:c2:2b:28:53:93:dd:60:8f: 67:75:7c:06:df:b1:36:38:2d:1b:62:b1:a2:e9:db: 16:c0:28:92:f3:98:74:b8:a8:0e:43:b4:a9:3a:0c: 98:11:ce:6e:7a:7b:20:41:3e:88:9a:1e:ef:a0:56: be:69:59:ed:1c:f3:e6:f1:d4:3b:05:7d:61:d5:43: e4:4f:9b:39:a7:da:03:d7:1b:9c:0a:1e:28:e3:f7: 61:95:da:c6:82:26:57:87:8b:66:fe:1a:52:e4:d7: 3e:d2:f8:31:88:3a:ea:c7:5f:54:ed:97:e0:45:74: df:1e:5d:0f:45:ce:6f:43:a6:16:da:51:cb:48:75: a7:c4:b7:3b:74:4d:4d:85:d9:ca:19:f5:ad:c8:87: 0a:95:2f:70:89:f6:e6:81:32:9c:d4:35:0c:c7:0f: eb:1a:4e:61:4d:d6:af:7e:7e:ac:33:78:42:e9:44: a9:a2:b5:7c:54:53:79:ad:8f:c7:af:f1:2c:81:db: ea:c6:8e:d6:84:f0:fc:41:aa:a1:18:cb:b1:df:9e: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:48:46:2D:22:B3:29:B1:17:CA:89:53:4A:2C:80:95:EC:15:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:46:89:c1:26:fd:13:f8:59:1b:be:f0:0c:2e:d5:5b:55:23: 0b:d5:97:7e:9b:5e:0e:9a:b6:ce:41:72:12:22:ce:cf:64:68: f6:9c:b7:48:59:66:04:e3:3e:24:bc:d0:a1:e1:5a:0f:cc:99: a2:b3:96:c6:79:b6:e8:ab:8a:10:90:1e:bf:90:93:02:17:9a: 7b:a5:86:af:50:fb:22:41:48:78:eb:3c:39:e5:1e:f1:98:07: 7b:07:9a:95:69:bf:98:70:d5:b1:c0:91:73:aa:f8:ac:78:f6: 4e:07:8a:4a:1d:4f:57:24:3b:43:e0:82:37:96:9f:7b:e4:32: d2:5a:70:86:49:45:23:14:dc:bb:92:1f:03:1e:0a:15:02:94: 37:91:66:8c:6e:07:0c:eb:a6:26:9e:04:8b:eb:1a:07:6b:ce: c4:5f:74:67:a3:26:ed:97:63:b0:13:65:20:19:df:34:72:e8: 14:93:39:ff:5e:4a:29:ad:b5:29:bf:26:8b:d0:37:8b:a0:1e: ac:e0:dd:62:b6:af:18:72:a1:3a:0b:0a:4a:4e:c2:50:fd:21: 11:ba:28:f1:00:78:0b:61:36:92:fc:96:38:0e:7b:2a:22:a4: e0:b6:2c:70:8c:f3:d9:31:a5:a9:ba:c6:ed:2b:63:5f:43:2e: e0:90:4f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxcoZP/xjkJMZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk NmY4ZDM5MTgtOWQ0OS00NzllLTk3NGItMWJmZWUzMzdhYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbJzfTVxi9XVpLoP+uQqDnuGVBRWr96hSxlc vDVRMn40X7F8uUhA2IGCOGoAVvflU1/gwisoU5PdYI9ndXwG37E2OC0bYrGi6dsW wCiS85h0uKgOQ7SpOgyYEc5uensgQT6Imh7voFa+aVntHPPm8dQ7BX1h1UPkT5s5 p9oD1xucCh4o4/dhldrGgiZXh4tm/hpS5Nc+0vgxiDrqx19U7ZfgRXTfHl0PRc5v Q6YW2lHLSHWnxLc7dE1NhdnKGfWtyIcKlS9wifbmgTKc1DUMxw/rGk5hTdavfn6s M3hC6USporV8VFN5rY/Hr/Esgdvqxo7WhPD8QaqhGMux356kJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6kSEYtIrMpsRfKiVNKLICV7BUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMGVhN2U0ZDctMDljNi0z ZmZhLThkZWUtOTAyMzI2NDc2MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoXnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNGicEm/RP4WRu+8Awu1VtVIwvVl36bXg6ats5BchIizs9kaPact0hZ ZgTjPiS80KHhWg/MmaKzlsZ5tuirihCQHr+QkwIXmnulhq9Q+yJBSHjrPDnlHvGY B3sHmpVpv5hw1bHAkXOq+Kx49k4HikodT1ckO0PggjeWn3vkMtJacIZJRSMU3LuS HwMeChUClDeRZoxuBwzrpiaeBIvrGgdrzsRfdGejJu2XY7ATZSAZ3zRy6BSTOf9e SimttSm/JovQN4ugHqzg3WK2rxhyoToLCkpOwlD9IRG6KPEAeAthNpL8ljgOeyoi pOC2LHCM89kxpam6xu0rY19DLuCQT+U= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:24 2026 by rpki-client