$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa File: f63a9c1a-e317-37cb-b863-42b390358653.roa (raw, json) Hash identifier: Z2kvl0UkP9i5EX98fEJkdGAcy1KdajCed+kzenpyikI= Subject key identifier: C8:EE:2C:9A:25:D4:F9:BF:94:D0:30:DD:F7:2C:24:15:7A:24:97:E2 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584EF87CBD150AA0D55FA633BC80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 161.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bd:15:0a:a0:d5:5f:a6:33:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=d15e4ab3-be6d-455b-be8c-87ef92a2c941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:86:73:2b:a7:58:51:e2:ad:d3:0e:25:80: 71:c7:d8:54:60:70:0b:bb:16:16:45:8a:e3:e6:92: c7:a1:aa:d4:e2:be:9b:a8:d4:a8:fe:0c:44:4a:04: 7c:af:43:ad:b7:c4:ca:5d:bb:e0:3f:ea:5b:aa:0e: 66:6e:08:66:0c:93:a6:cb:38:2e:e6:d4:2c:da:88: dd:f9:b1:8c:b1:78:63:54:ad:a0:92:7b:78:bf:af: 8d:dc:3b:d2:32:37:1e:1f:8d:eb:ed:28:81:6c:74: 3b:41:c6:12:3d:0b:fd:a3:8b:b8:9f:09:51:f0:37: 3a:11:56:74:b2:c9:f3:3c:d6:cf:8c:8d:d8:49:4e: c4:ce:90:5e:fc:5c:9f:c2:a9:6e:1f:6a:1d:86:ad: a0:6c:07:3d:e5:b3:ce:32:13:2e:3a:4f:4a:a4:33: dd:e1:7a:58:e2:5b:6f:21:c7:73:63:e1:83:3b:22: 49:24:63:a1:27:ff:fa:c2:78:6b:a2:a9:79:49:ec: d4:2f:fb:2a:68:4f:6a:47:e1:d8:19:2e:cd:1b:8e: 27:0e:97:88:b4:15:95:fc:b8:38:4d:b7:08:20:e6: a5:a8:bd:24:f6:13:85:ea:6b:65:da:f3:86:95:f8: 50:82:45:48:16:c1:51:f1:ee:6c:6e:3f:8b:c3:93: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:2C:9A:25:D4:F9:BF:94:D0:30:DD:F7:2C:24:15:7A:24:97:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:6c:8b:a2:cd:38:c1:44:a7:6b:dd:a2:76:3f:f5:7b:c9:af: 32:63:a5:da:38:e4:6b:60:7f:00:fc:08:89:7e:06:d5:cc:03: 0f:01:4f:2f:b0:23:2e:39:79:bd:8c:e5:ed:40:da:df:05:99: d9:1c:93:cf:23:e7:60:ac:a0:d8:f2:f8:a3:11:da:9d:07:ba: d7:0a:eb:19:a0:23:93:12:bf:a0:79:2d:f0:33:e6:e5:cf:ff: 56:7c:16:2c:de:59:07:a3:9b:88:81:13:17:44:1f:bb:c9:35: ac:60:f6:93:ed:29:cb:cd:5b:54:7e:14:d0:e9:10:66:6c:47: 77:b3:1f:12:a2:dc:63:71:e3:bb:25:cc:4a:ca:76:39:9f:6d: 4e:59:3f:c0:35:cd:65:bc:a1:a4:79:6f:51:7c:62:bc:bf:50: f4:4a:f9:46:21:6c:0a:4d:f3:47:f0:32:b8:78:5d:95:3e:55: 76:1e:ec:9f:85:02:7b:c6:dd:98:70:7b:4f:ce:51:e9:2c:b8: 3c:21:a5:ee:ca:d5:d2:29:68:74:9f:ec:2f:b4:a2:e6:31:80: d4:5e:cf:c6:a3:64:5e:46:f2:81:78:ee:35:b4:1e:f7:d9:3f: 61:49:46:bd:b2:cf:14:44:5e:5f:53:03:e1:f2:a8:8e:94:c1: a0:6e:dd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL0VCqDVX6YzvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDE1ZTRhYjMtYmU2ZC00NTViLWJlOGMtODdlZjkyYTJjOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup+GcyunWFHirdMOJYBxx9hUYHALuxYWRYrj 5pLHoarU4r6bqNSo/gxESgR8r0Ott8TKXbvgP+pbqg5mbghmDJOmyzgu5tQs2ojd +bGMsXhjVK2gknt4v6+N3DvSMjceH43r7SiBbHQ7QcYSPQv9o4u4nwlR8Dc6EVZ0 ssnzPNbPjI3YSU7EzpBe/FyfwqluH2odhq2gbAc95bPOMhMuOk9KpDPd4XpY4ltv IcdzY+GDOyJJJGOhJ//6wnhroql5SezUL/sqaE9qR+HYGS7NG44nDpeItBWV/Lg4 TbcIIOalqL0k9hOF6mtl2vOGlfhQgkVIFsFR8e5sbj+Lw5MXJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjuLJol1Pm/lNAw3fcsJBV6JJfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjYzYTljMWEtZTMxNy0z N2NiLWI4NjMtNDJiMzkwMzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNsi6LNOMFEp2vdonY/9XvJrzJjpdo45GtgfwD8CIl+BtXMAw8BTy+w Iy45eb2M5e1A2t8Fmdkck88j52CsoNjy+KMR2p0HutcK6xmgI5MSv6B5LfAz5uXP /1Z8FizeWQejm4iBExdEH7vJNaxg9pPtKcvNW1R+FNDpEGZsR3ezHxKi3GNx47sl zErKdjmfbU5ZP8A1zWW8oaR5b1F8Yry/UPRK+UYhbApN80fwMrh4XZU+VXYe7J+F AnvG3Zhwe0/OUeksuDwhpe7K1dIpaHSf7C+0ouYxgNRez8ajZF5G8oF47jW0HvfZ P2FJRr2yzxREXl9TA+HyqI6UwaBu3aI= -----END CERTIFICATE-----Generated at Sat Sep 5 01:58:45 2026 by rpki-client