$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/b35372ca-5521-3c0e-99d1-d94021d6f0b7.roa File: b35372ca-5521-3c0e-99d1-d94021d6f0b7.roa (raw, json) Hash identifier: eDeeknYt5Dhm+WfXnTQ4SQ5NRSk34Kr55yYxie2dmuQ= Subject key identifier: 4D:F1:CB:0D:99:6A:ED:4F:57:D0:93:1F:44:85:5A:1D:26:F5:BC:1B Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584F9D331A3DACD99B0B17288540 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/b35372ca-5521-3c0e-99d1-d94021d6f0b7.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 38551 IP address blocks: 161.121.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:1a:3d:ac:d9:9b:0b:17:28:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=cf3a5e7f-f88e-4ac7-a837-c73ad11545d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:20:b2:97:26:9e:c1:f5:af:43:36:e1:f2: 16:4c:67:36:8a:5c:46:06:94:32:35:4c:ea:1c:51: 87:fc:6c:8f:53:65:30:48:49:60:b1:5b:fd:52:c3: 0d:71:2c:fd:5b:55:f7:11:5f:bf:fd:fd:7b:b7:0c: 97:91:2d:34:48:68:23:3f:c0:b4:16:71:13:70:5c: 11:18:f4:a0:98:45:54:1f:45:04:71:63:ff:a7:51: 0b:db:43:f4:c2:f0:98:b7:a4:61:87:5d:5f:4a:90: 1f:90:7d:a7:08:c2:11:14:a7:ef:30:2f:31:cd:4f: d7:07:56:6b:db:59:3c:ab:2a:1e:09:60:de:f8:88: b0:52:23:e3:25:f6:c8:82:95:0a:3d:0d:d2:d4:94: 96:3e:19:55:b9:30:3c:c7:ad:3c:d4:f3:96:73:59: a6:0e:1d:70:05:c3:5a:ab:1f:ef:c4:3c:af:dd:e0: 22:f6:d3:27:77:b0:e5:57:48:4b:a6:ce:7d:8f:e0: 45:c4:02:a6:0e:99:8f:b4:8c:30:3a:b9:99:ef:98: 3a:3f:e0:b9:09:8b:05:53:85:66:d0:e6:20:99:9c: cb:76:24:5c:77:52:63:a3:60:78:d6:c2:2c:cb:af: 6c:c0:a6:72:81:f5:43:c9:24:ba:a6:68:dc:eb:a7: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F1:CB:0D:99:6A:ED:4F:57:D0:93:1F:44:85:5A:1D:26:F5:BC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/b35372ca-5521-3c0e-99d1-d94021d6f0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1e:5b:d6:ee:75:fc:56:1f:b8:10:fc:30:38:61:29:b9:f5: ef:01:21:c3:1a:d0:78:10:94:62:38:25:b8:d0:4a:2c:3c:a7: 75:9f:8a:e1:d4:68:ee:c9:87:7f:03:ad:65:6f:b2:84:d2:42: 1f:7b:9d:89:21:8c:b5:5b:0e:49:df:aa:98:ea:6c:73:c0:a2: 78:a0:8f:76:5e:ad:da:e5:93:f4:e8:62:83:15:a0:20:e4:d5: 87:1e:1d:58:5e:c9:4e:43:0e:c1:a5:71:73:02:6a:90:15:37: 05:93:e4:31:dd:58:26:d7:f8:c1:97:0d:d2:27:96:79:f9:d5: cd:9f:d0:31:7e:b1:66:9d:c1:f3:3d:f3:bc:e2:b5:35:34:27: 57:c9:a5:d5:3b:a4:08:33:30:15:db:bd:ef:3a:4b:60:17:8d: 69:8a:82:1a:28:64:d2:a4:16:45:60:79:11:02:ce:8e:44:e3: 0f:3f:52:48:c8:4b:29:d6:a7:24:cd:32:fd:ad:a0:43:d4:0c: ad:44:55:df:5d:3c:74:c8:b1:2e:34:95:41:5e:94:10:09:36: 45:58:48:0a:33:27:49:b5:eb:2d:ce:28:d0:a6:c6:ed:bc:69: 56:10:9b:ae:9a:e7:99:bd:0d:8d:dd:d1:24:da:db:1c:69:36: 29:ea:d1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxo9rNmbCxcohUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk Y2YzYTVlN2YtZjg4ZS00YWM3LWE4MzctYzczYWQxMTU0NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIYgspcmnsH1r0M24fIWTGc2ilxGBpQyNUzq HFGH/GyPU2UwSElgsVv9UsMNcSz9W1X3EV+//f17twyXkS00SGgjP8C0FnETcFwR GPSgmEVUH0UEcWP/p1EL20P0wvCYt6Rhh11fSpAfkH2nCMIRFKfvMC8xzU/XB1Zr 21k8qyoeCWDe+IiwUiPjJfbIgpUKPQ3S1JSWPhlVuTA8x6081POWc1mmDh1wBcNa qx/vxDyv3eAi9tMnd7DlV0hLps59j+BFxAKmDpmPtIwwOrmZ75g6P+C5CYsFU4Vm 0OYgmZzLdiRcd1Jjo2B41sIsy69swKZygfVDySS6pmjc66c1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3xyw2Zau1PV9CTH0SFWh0m9bwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvYjM1MzcyY2EtNTUyMS0z YzBlLTk5ZDEtZDk0MDIxZDZmMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoXnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYeW9budfxWH7gQ/DA4YSm59e8BIcMa0HgQlGI4JbjQSiw8p3WfiuHU aO7Jh38DrWVvsoTSQh97nYkhjLVbDknfqpjqbHPAonigj3Zerdrlk/ToYoMVoCDk 1YceHVheyU5DDsGlcXMCapAVNwWT5DHdWCbX+MGXDdInlnn51c2f0DF+sWadwfM9 87zitTU0J1fJpdU7pAgzMBXbve86S2AXjWmKghooZNKkFkVgeRECzo5E4w8/UkjI SynWpyTNMv2toEPUDK1EVd9dPHTIsS40lUFelBAJNkVYSAozJ0m16y3OKNCmxu28 aVYQm66a55m9DY3d0STa2xxpNinq0To= -----END CERTIFICATE-----Generated at Sun Nov 15 18:50:15 2026 by rpki-client