$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa File: a9966c45-3097-3836-a14e-cf2190dd857d.roa (raw, json) Hash identifier: +HoPjVDvZgmwsIWod6Vi+fpqwW54x0VjJ+YSh26UHzg= Subject key identifier: A1:D4:87:23:B9:02:92:07:8F:29:6F:E2:9F:6A:A2:AF:07:DA:9A:15 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584F9BCDBF633C2DC48B533C3840 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3356 IP address blocks: 161.129.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:bf:63:3c:2d:c4:8b:53:3c:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=e4ff3d98-e4f4-4e5b-b8ed-f921a23da4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:98:11:67:1c:ec:70:ee:8d:bf:82:35:a9: c7:41:20:f6:dd:26:1a:1e:9f:6d:cd:d9:04:9b:3c: 22:dd:9b:61:5c:56:35:54:6e:7c:c4:07:60:40:8b: 78:f0:ce:46:80:5b:a2:92:8f:d4:fc:9b:48:f3:bc: be:ff:b9:88:53:4e:50:84:2c:76:52:c6:d9:80:63: 43:b0:f2:5c:e9:b2:d9:d6:06:25:70:76:08:16:9d: 0d:e9:76:78:7a:ee:91:ef:46:43:50:e4:67:7b:c8: d9:06:e3:b7:08:33:1a:5c:bc:96:b9:35:bb:74:7f: dd:da:ae:9b:1a:61:18:6b:d9:32:94:33:f0:8a:33: a1:1c:4b:26:76:8c:1e:20:e9:6a:6f:2c:b2:1c:82: 4d:30:71:43:99:8d:25:9e:ab:b0:28:f9:ea:f7:2c: dc:c0:ae:68:d8:e9:14:73:f5:64:02:80:ae:37:99: a0:36:9a:9e:61:e3:e7:9f:fa:b0:f0:6f:e6:65:40: 55:46:d7:95:00:b7:5a:4b:4a:0e:0e:63:d7:48:f8: 48:a9:cf:3c:4b:be:26:ac:03:99:f1:0d:e4:aa:3c: 68:d7:1b:8c:7e:69:1e:63:bc:61:65:a4:92:91:c3: f3:34:0f:38:0a:83:ef:e5:ee:58:97:d2:5f:f9:82: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:87:23:B9:02:92:07:8F:29:6F:E2:9F:6A:A2:AF:07:DA:9A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:5c:58:0b:bd:26:cf:fc:59:57:b9:34:e5:91:5a:8d:48:a8: 2f:44:ee:e1:f8:5b:de:a7:59:8f:b3:e7:14:f0:b5:17:26:8a: 40:2a:82:71:8f:1d:72:8e:ca:8c:c6:87:8c:b6:63:f6:05:1f: a6:94:25:0d:fa:79:63:de:0a:ca:6a:ca:95:5c:1f:6b:3f:90: 37:89:d3:c1:ea:26:a4:91:6a:ec:f9:26:01:f4:9b:2b:37:da: bc:82:99:d3:b0:e4:d2:59:d3:05:e4:5d:77:40:69:c5:ce:6b: af:d4:98:fd:2b:07:c5:03:f4:c4:7a:7d:53:e1:21:e0:4c:fc: 0f:6f:0d:14:0f:3b:05:bf:d1:7b:3c:09:fc:57:68:72:1e:35: 5c:50:8b:4c:0c:97:d9:27:68:b9:20:bd:1f:f9:bf:6e:e8:33: b2:75:ef:bc:b5:dc:0b:0a:f0:9e:61:9a:00:8f:e9:00:4b:65: e8:b5:c2:82:aa:a2:89:f5:5a:90:c1:2b:8c:d8:a6:f2:60:f1: 5d:dc:15:2c:11:8d:2d:d2:f0:9a:f2:3a:95:2b:bd:a6:b0:cd: eb:20:8c:eb:53:b7:c9:6d:fc:48:ff:c7:fe:0c:70:3e:a1:ce: 68:b8:a4:16:0c:eb:f1:f1:28:b2:b3:41:c7:bd:95:0b:08:be: 2c:8f:dc:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzb9jPC3Ei1M8OEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTRmZjNkOTgtZTRmNC00ZTViLWI4ZWQtZjkyMWEyM2RhNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KCYEWcc7HDujb+CNanHQSD23SYaHp9tzdkE mzwi3ZthXFY1VG58xAdgQIt48M5GgFuiko/U/JtI87y+/7mIU05QhCx2UsbZgGND sPJc6bLZ1gYlcHYIFp0N6XZ4eu6R70ZDUORne8jZBuO3CDMaXLyWuTW7dH/d2q6b GmEYa9kylDPwijOhHEsmdoweIOlqbyyyHIJNMHFDmY0lnquwKPnq9yzcwK5o2OkU c/VkAoCuN5mgNpqeYePnn/qw8G/mZUBVRteVALdaS0oODmPXSPhIqc88S74mrAOZ 8Q3kqjxo1xuMfmkeY7xhZaSSkcPzNA84CoPv5e5Yl9Jf+YKsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHUhyO5ApIHjylv4p9qoq8H2poVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYTk5NjZjNDUtMzA5Ny0z ODM2LWExNGUtY2YyMTkwZGQ4NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRcWAu9Js/8WVe5NOWRWo1IqC9E7uH4W96nWY+z5xTwtRcmikAqgnGP HXKOyozGh4y2Y/YFH6aUJQ36eWPeCspqypVcH2s/kDeJ08HqJqSRauz5JgH0mys3 2ryCmdOw5NJZ0wXkXXdAacXOa6/UmP0rB8UD9MR6fVPhIeBM/A9vDRQPOwW/0Xs8 CfxXaHIeNVxQi0wMl9knaLkgvR/5v27oM7J177y13AsK8J5hmgCP6QBLZei1woKq oon1WpDBK4zYpvJg8V3cFSwRjS3S8JryOpUrvaawzesgjOtTt8lt/Ej/x/4McD6h zmi4pBYM6/HxKLKzQce9lQsIviyP3Fk= -----END CERTIFICATE-----Generated at Sun Oct 25 20:57:06 2026 by rpki-client