$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa File: 8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json) Hash identifier: iJz2A3fv/k4VHeS19BrClhFVGylrhnq4wlcYn5EnIWc= Subject key identifier: 10:64:B5:2D:17:11:57:8E:89:31:81:46:72:5D:F1:4F:60:F9:E2:12 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584F9BCDBC09A35C75656C53C7C0 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3356 IP address blocks: 161.129.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:bc:09:a3:5c:75:65:6c:53:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=ddde1c6f-0148-4b33-b17d-0ba087ad9f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:33:38:aa:87:27:84:d6:89:ce:ba:6d:11: 63:cf:54:ed:13:2e:d7:45:7d:58:4b:21:f7:08:db: 54:55:5a:af:2f:a8:ea:df:d3:02:9c:f0:e2:8a:0d: 3b:ee:d8:2b:62:84:e2:9f:f6:58:00:89:a0:a9:44: 1e:fa:91:f6:c6:e7:6b:a7:52:ea:e9:5a:cc:03:ca: 9b:cb:e8:92:0c:56:ab:34:02:82:a9:bb:11:d0:6f: d7:b8:41:3c:98:f7:7e:1c:51:92:45:28:f8:84:72: f5:a7:87:e5:49:b5:3b:f6:e2:6f:be:42:d2:d3:3d: e0:b7:fc:19:c5:2b:ea:2d:87:92:86:82:5d:d5:8a: 4a:8f:5b:1c:63:a3:69:26:09:7c:dd:28:b3:04:13: 7d:3b:e4:b1:7b:c8:1e:25:b0:29:4e:e3:c5:c7:54: a2:a3:7c:26:15:73:60:ee:7b:aa:8a:c1:9b:c8:34: 63:bd:1e:5a:bf:5e:f8:b6:af:8d:90:e1:da:00:c4: 0c:98:44:cf:42:c8:3d:20:41:bc:4f:9e:e5:ec:b4: d3:cc:71:2c:99:9b:fd:46:7f:95:6b:5d:99:ad:bd: 4d:48:8d:c6:48:a5:52:b4:32:82:64:7a:68:92:6c: 7b:68:e1:de:c2:a9:20:f8:04:50:dc:39:ef:8a:a0: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:B5:2D:17:11:57:8E:89:31:81:46:72:5D:F1:4F:60:F9:E2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:58:7b:e2:64:c2:0a:79:55:6e:58:bd:93:1b:06:91:0e:5e: 76:43:a9:08:8b:d5:b4:41:19:75:78:eb:72:bb:cc:af:28:b8: 93:8c:dd:32:81:bc:ff:fa:18:c5:dc:ae:36:69:70:03:be:32: d0:e1:7f:36:75:3f:4a:78:5b:47:10:d8:9d:80:f0:cd:03:d7: 6c:af:68:ad:3c:94:93:73:7d:e1:3f:b5:6b:2d:ce:b9:ee:46: 01:e7:53:4c:49:0d:3f:61:2a:79:11:37:4e:b4:ff:89:d0:b9: 6f:2b:46:49:50:f8:22:c3:36:92:4a:2d:e8:28:1b:90:93:27: 13:13:f8:74:95:a2:0d:f9:15:cc:f3:5f:b8:65:17:2f:5c:1f: e1:62:b6:96:37:36:52:6c:62:a8:c2:a6:98:fa:46:d3:05:47: 26:8f:62:6e:b9:29:9e:71:42:b9:0f:23:fc:03:83:cc:bf:56: 55:7a:35:c8:bd:94:ea:d2:4a:25:6c:58:42:9f:e4:98:65:a7: 01:f1:f5:14:a3:d9:27:2a:27:c5:34:e6:cc:79:72:0f:f2:c8: 4e:43:43:70:0c:ae:15:fb:43:fd:85:ae:a8:be:67:25:c1:d7: cc:24:61:47:c7:7b:3e:a3:df:ad:4c:25:ac:2f:a2:4d:a5:4b: 20:80:0d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzbwJo1x1ZWxTx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGRkZTFjNmYtMDE0OC00YjMzLWIxN2QtMGJhMDg3YWQ5ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpQzOKqHJ4TWic66bRFjz1TtEy7XRX1YSyH3 CNtUVVqvL6jq39MCnPDiig077tgrYoTin/ZYAImgqUQe+pH2xudrp1Lq6VrMA8qb y+iSDFarNAKCqbsR0G/XuEE8mPd+HFGSRSj4hHL1p4flSbU79uJvvkLS0z3gt/wZ xSvqLYeShoJd1YpKj1scY6NpJgl83SizBBN9O+Sxe8geJbApTuPFx1Sio3wmFXNg 7nuqisGbyDRjvR5av174tq+NkOHaAMQMmETPQsg9IEG8T57l7LTTzHEsmZv9Rn+V a12Zrb1NSI3GSKVStDKCZHpokmx7aOHewqkg+ARQ3DnviqCElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBktS0XEVeOiTGBRnJd8U9g+eISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvOGYyOTYwOWEtMzQ2Zi0z MzQ3LWFiYmYtMjYxY2UwOGNlNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOlYe+Jkwgp5VW5YvZMbBpEOXnZDqQiL1bRBGXV463K7zK8ouJOM3TKB vP/6GMXcrjZpcAO+MtDhfzZ1P0p4W0cQ2J2A8M0D12yvaK08lJNzfeE/tWstzrnu RgHnU0xJDT9hKnkRN060/4nQuW8rRklQ+CLDNpJKLegoG5CTJxMT+HSVog35Fczz X7hlFy9cH+FitpY3NlJsYqjCppj6RtMFRyaPYm65KZ5xQrkPI/wDg8y/VlV6Nci9 lOrSSiVsWEKf5JhlpwHx9RSj2ScqJ8U05sx5cg/yyE5DQ3AMrhX7Q/2Frqi+ZyXB 18wkYUfHez6j361MJawvok2lSyCADQI= -----END CERTIFICATE-----Generated at Tue Oct 27 11:05:44 2026 by rpki-client