$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa File: c42140bb-6b45-3666-ab69-b0e1171139f1.roa (raw, json) Hash identifier: M1E9s8Ekig5hjesoFBr7yOF+QNz3P7wOClsi9/hRkYw= Subject key identifier: 7B:C6:93:23:F9:04:35:2E:6F:04:2A:67:E5:10:EF:F3:C8:A0:E0:6E Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584F549D646837CBED5AA95FE700 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 213122 IP address blocks: 161.129.32.0/24 maxlen: 24 161.129.33.0/24 maxlen: 24 161.129.36.0/24 maxlen: 24 161.129.37.0/24 maxlen: 24 161.129.38.0/24 maxlen: 24 161.129.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:64:68:37:cb:ed:5a:a9:5f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9458a654-a387-40b0-a5d9-faec823d685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:3d:86:62:a3:41:1f:bb:bf:5a:d5:c0:60: a4:d8:85:fa:6c:c3:d2:d7:ae:ea:39:c7:0b:08:43: 9c:de:cf:8e:ea:77:27:f7:7a:f1:b6:e1:29:17:9d: 7e:97:ac:8f:6a:c6:61:fe:b9:50:40:db:56:71:ac: a9:71:57:49:aa:d8:a1:c2:83:ea:b3:ae:f2:30:0b: 85:14:65:29:27:cd:46:cd:ba:e1:20:0b:bb:58:0e: b2:0b:5c:7c:5a:47:85:13:23:bd:12:e3:9e:01:ac: 8b:45:73:53:b0:98:48:1c:e5:1e:14:98:01:2e:35: 55:d9:5d:4d:ae:fb:5b:31:e1:7d:fa:72:06:6d:a1: a5:9f:5e:3e:dc:14:04:34:d9:43:0d:07:8a:63:99: 6d:e2:5c:96:99:a7:2e:18:7f:b2:cd:76:eb:04:6a: 8e:28:e9:d2:fc:76:f3:39:15:59:12:ff:c6:f2:74: f6:ac:f1:12:29:cd:05:da:19:a5:ab:02:37:7c:1a: 0c:03:41:d0:c9:9a:f6:2b:03:95:01:f5:23:18:59: a5:8d:c0:82:50:8e:d5:70:20:25:7f:63:9a:a7:1f: 96:20:d0:e6:27:47:5d:d7:fc:dd:a2:7a:e7:f8:eb: 10:88:ef:ae:11:f8:12:60:3c:90:d7:8e:e2:38:d4: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C6:93:23:F9:04:35:2E:6F:04:2A:67:E5:10:EF:F3:C8:A0:E0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.32.0/23 161.129.36.0-161.129.38.255 161.129.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c4:2c:61:9d:48:ad:5b:27:f6:3e:87:74:db:5e:e1:84:5e: c9:20:38:6c:3f:f1:50:02:c7:a6:f8:6f:3c:fc:b8:6d:b0:16: 94:61:5b:ef:dc:78:0b:b8:e8:c2:fc:10:e8:4d:f5:81:ce:f4: c3:54:44:6e:22:12:95:49:a2:84:6d:25:61:1b:0f:55:85:f1: 0f:b9:07:11:c3:d2:42:60:06:a7:ca:bc:08:d8:fb:68:0a:7f: d6:70:93:7f:2c:61:2f:a3:83:67:e2:32:3c:a5:ce:f1:59:2c: 8b:56:cd:66:7f:3d:0b:20:56:cd:80:c1:1e:f4:c0:5c:2e:2f: 9a:1c:f2:a0:b8:68:e3:2f:13:12:b3:0a:bf:73:ad:35:71:3a: 12:e7:44:62:07:fe:fc:95:9a:60:cd:ef:e3:8a:01:de:74:19: de:fe:1c:d4:d4:f7:9b:d2:e5:50:89:0c:3f:d0:c8:a7:17:eb: a5:d5:8d:3e:17:c1:c2:f3:01:a3:79:83:08:d9:b9:f3:a7:1c: f2:9e:90:f6:bc:ea:19:bb:a4:48:f1:f2:0d:26:63:b4:35:f1: 1d:25:61:d6:9e:57:a5:8a:39:7c:47:2c:1d:d6:ab:4f:29:aa: ce:d4:28:f7:ad:11:2f:05:99:e9:93:d5:c0:e4:76:05:d8:a0: f6:94:e1:de -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE9UnWRoN8vtWqlf5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTQ1OGE2NTQtYTM4Ny00MGIwLWE1ZDktZmFlYzgyM2Q2ODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E09hmKjQR+7v1rVwGCk2IX6bMPS167qOccL CEOc3s+O6ncn93rxtuEpF51+l6yPasZh/rlQQNtWcaypcVdJqtihwoPqs67yMAuF FGUpJ81GzbrhIAu7WA6yC1x8WkeFEyO9EuOeAayLRXNTsJhIHOUeFJgBLjVV2V1N rvtbMeF9+nIGbaGln14+3BQENNlDDQeKY5lt4lyWmacuGH+yzXbrBGqOKOnS/Hbz ORVZEv/G8nT2rPESKc0F2hmlqwI3fBoMA0HQyZr2KwOVAfUjGFmljcCCUI7VcCAl f2Oapx+WINDmJ0dd1/zdonrn+OsQiO+uEfgSYDyQ147iONQJIwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFHvGkyP5BDUubwQqZ+UQ7/PIoOBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYzQyMTQwYmItNmI0NS0z NjY2LWFiNjktYjBlMTE3MTEzOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBoYEgMAwD BAKhgSQDBAChgSYDBAChgSgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATsQsYZ1IrVsn9j6HdNte4YReySA4 bD/xUALHpvhvPPy4bbAWlGFb79x4C7jowvwQ6E31gc70w1REbiISlUmihG0lYRsP VYXxD7kHEcPSQmAGp8q8CNj7aAp/1nCTfyxhL6ODZ+IyPKXO8Vksi1bNZn89CyBW zYDBHvTAXC4vmhzyoLho4y8TErMKv3OtNXE6EudEYgf+/JWaYM3v44oB3nQZ3v4c 1NT3m9LlUIkMP9DIpxfrpdWNPhfBwvMBo3mDCNm586cc8p6Q9rzqGbukSPHyDSZj tDXxHSVh1p5XpYo5fEcsHdarTymqztQo960RLwWZ6ZPVwOR2Bdig9pTh3g== -----END CERTIFICATE-----Generated at Tue Oct 27 15:20:48 2026 by rpki-client