$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/d049ec2f-268a-34d1-a26f-4af30194198b.roa File: d049ec2f-268a-34d1-a26f-4af30194198b.roa (raw, json) Hash identifier: 4gFnWATWKgSVuHGyc2mhfKP9GKiXshnFGa/A7dTRTIM= Subject key identifier: 60:69:FA:16:AD:8B:F5:CE:7D:8C:00:04:DA:AB:B8:C2:6D:40:78:73 Certificate issuer: /CN=e66620d0-bad7-4e88-82dd-63efe25bd4ce Certificate serial: 010D0C9F4328584F6C7D7699FA326E6EBB500A48 Authority key identifier: 15:7D:6C:DB:C8:9D:27:68:C5:C5:68:D6:D9:D7:15:24:5F:34:C2:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/d049ec2f-268a-34d1-a26f-4af30194198b.roa Signing time: Wed 07 Oct 2026 14:15:33 +0000 ROA not before: Wed 07 Oct 2026 14:15:33 +0000 ROA not after: Tue 05 Jan 2027 15:15:33 +0000 asID: 397640 IP address blocks: 161.199.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/e66620d0-bad7-4e88-82dd-63efe25bd4ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/e66620d0-bad7-4e88-82dd-63efe25bd4ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:7d:76:99:fa:32:6e:6e:bb:50:0a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66620d0-bad7-4e88-82dd-63efe25bd4ce Validity Not Before: Oct 7 14:15:33 2026 GMT Not After : Jan 5 15:15:33 2027 GMT Subject: CN=d4a8aa82-891f-41c7-9121-e489e9befe67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:be:c8:4c:ba:85:d0:27:08:7a:04:a6:4d: 47:c6:ed:db:b6:ed:12:cc:e1:ae:67:c1:f4:be:02: 16:a0:8d:68:6f:72:e8:84:e4:40:b0:71:ce:f0:5b: 54:bd:f8:29:bc:3e:00:95:b3:28:81:bd:b7:4a:f2: ad:7e:3c:f2:76:83:dc:50:08:3e:82:d8:35:a8:74: 11:ec:4d:1c:0f:fc:f5:b5:9a:d5:1f:30:de:47:7a: 2f:1d:e3:66:01:f3:0a:5c:62:aa:ee:58:1b:fb:86: db:32:78:f8:94:00:ab:c8:0f:6b:9f:42:6a:87:f5: 96:99:2c:cb:39:43:62:98:b6:34:1f:af:22:ac:14: d0:8b:29:ff:da:dc:69:04:82:58:57:cf:85:69:93: 23:97:78:40:b9:ec:ea:32:23:19:07:05:56:dd:c2: ed:ed:14:a5:d2:0d:26:09:9e:8d:96:25:10:3c:b1: 5f:e5:7d:68:65:87:98:19:09:0c:1b:14:82:c4:4b: 18:ea:4f:9a:e3:be:c7:ea:99:ea:fc:45:72:9e:83: 0a:47:63:a6:1c:36:ee:42:a1:2b:29:61:67:7f:7f: a6:08:46:c9:4c:51:e6:5c:e1:9a:ff:08:8b:da:dd: 50:53:2a:5e:dd:1e:58:a3:15:a0:76:b9:7c:51:0b: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:FA:16:AD:8B:F5:CE:7D:8C:00:04:DA:AB:B8:C2:6D:40:78:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/d049ec2f-268a-34d1-a26f-4af30194198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/e66620d0-bad7-4e88-82dd-63efe25bd4ce.crl X509v3 Authority Key Identifier: keyid:15:7D:6C:DB:C8:9D:27:68:C5:C5:68:D6:D9:D7:15:24:5F:34:C2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce.cer sbgp-ipAddrBlock: critical IPv4: 161.199.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d3:82:cf:43:66:62:0e:56:8f:b6:6d:3a:be:7e:7b:f7:aa: 31:a8:f0:57:f6:d6:0c:6b:ab:04:2e:ad:3e:29:00:98:0b:08: 04:e7:b3:4e:f6:e1:0a:41:87:73:75:a2:1e:78:77:d8:04:76: 7e:db:11:d1:94:3e:c9:7f:fb:fa:45:a6:53:89:ef:5d:b0:67: b8:85:98:be:ba:ce:1f:d7:8e:ea:0f:14:02:04:b9:ba:7b:27: bd:62:fe:b8:4b:26:64:c8:be:36:39:e5:08:8f:74:d6:96:03: 60:55:6c:25:8d:90:80:52:b9:cd:d6:6f:24:95:15:0a:a6:0e: 51:af:dc:cb:ff:0c:ca:d3:c5:2f:cb:a5:40:af:c5:23:ce:e2: b9:0e:2b:e5:47:60:25:4c:93:9a:84:fb:ca:97:64:d6:5a:f4: 99:93:e4:a4:50:ca:5d:74:fc:5e:8b:b1:bc:72:56:49:73:3f: 36:a7:bf:de:e1:1b:fc:b3:4b:63:6e:3c:5b:5e:2b:6f:ab:6e: b6:ad:8a:ff:5f:d5:31:42:06:38:05:d3:d2:89:f4:ba:f2:a1: d2:55:cd:62:76:48:9d:a4:68:f6:f6:e2:82:60:ff:bb:bf:cd: 96:6f:fc:50:0d:d9:4a:07:a2:6f:a6:d0:f5:8f:5d:1d:72:98: fa:20:e9:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sfXaZ+jJubrtQCkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY2NjIwZDAtYmFkNy00ZTg4LTgyZGQtNjNlZmUyNWJk NGNlMB4XDTI2MTAwNzE0MTUzM1oXDTI3MDEwNTE1MTUzM1owLzEtMCsGA1UEAxMk ZDRhOGFhODItODkxZi00MWM3LTkxMjEtZTQ4OWU5YmVmZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrO+yEy6hdAnCHoEpk1Hxu3btu0SzOGuZ8H0 vgIWoI1ob3LohORAsHHO8FtUvfgpvD4AlbMogb23SvKtfjzydoPcUAg+gtg1qHQR 7E0cD/z1tZrVHzDeR3ovHeNmAfMKXGKq7lgb+4bbMnj4lACryA9rn0Jqh/WWmSzL OUNimLY0H68irBTQiyn/2txpBIJYV8+FaZMjl3hAuezqMiMZBwVW3cLt7RSl0g0m CZ6NliUQPLFf5X1oZYeYGQkMGxSCxEsY6k+a477H6pnq/EVynoMKR2OmHDbuQqEr KWFnf3+mCEbJTFHmXOGa/wiL2t1QUype3R5YoxWgdrl8UQuVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBp+hati/XOfYwABNqruMJtQHhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lNjY2 MjBkMC1iYWQ3LTRlODgtODJkZC02M2VmZTI1YmQ0Y2UvZDA0OWVjMmYtMjY4YS0z NGQxLWEyNmYtNGFmMzAxOTQxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZTY2NjIwZDAtYmFkNy00ZTg4LTgy ZGQtNjNlZmUyNWJkNGNlL2U2NjYyMGQwLWJhZDctNGU4OC04MmRkLTYzZWZlMjVi ZDRjZS5jcmwwHwYDVR0jBBgwFoAUFX1s28idJ2jFxWjW2dcVJF80wtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lNjY2MjBkMC1iYWQ3LTRlODgtODJkZC02M2Vm ZTI1YmQ0Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBocc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrTgs9DZmIOVo+2bTq+fnv3qjGo8Ff21gxrqwQurT4pAJgLCATns072 4QpBh3N1oh54d9gEdn7bEdGUPsl/+/pFplOJ712wZ7iFmL66zh/XjuoPFAIEubp7 J71i/rhLJmTIvjY55QiPdNaWA2BVbCWNkIBSuc3WbySVFQqmDlGv3Mv/DMrTxS/L pUCvxSPO4rkOK+VHYCVMk5qE+8qXZNZa9JmT5KRQyl10/F6LsbxyVklzPzanv97h G/yzS2NuPFteK2+rbrativ9f1TFCBjgF09KJ9LryodJVzWJ2SJ2kaPb24oJg/7u/ zZZv/FAN2UoHom+m0PWPXR1ymPog6Xw= -----END CERTIFICATE-----Generated at Thu Nov 5 14:40:46 2026 by rpki-client