$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa File: 1123e5b1-5ec8-3464-89da-b623e37e2172.roa (raw, json) Hash identifier: zesbicSyrFRSrvlEAv/LPDSPXf3KxiLHzHce4FTLBW0= Subject key identifier: 8C:BA:85:37:95:D5:C2:1F:5F:29:2F:41:E1:EB:A1:DA:49:A7:90:A6 Certificate issuer: /CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1 Certificate serial: 010D0C9F4328584F86DDA3985A9916D67A544980 Authority key identifier: 09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 401912 IP address blocks: 161.97.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a3:98:5a:99:16:d6:7a:54:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7efbaef-2817-4a72-a1dd-cb7b66e942b1 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=8fb1b165-5d7a-4f4f-87f9-8123b6f9517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:71:af:73:6a:52:5e:1d:db:cc:21:64:b2: 88:a8:01:14:33:19:c8:a7:f9:06:8f:fb:ac:4e:7e: 83:7f:20:9c:f7:1f:87:f1:c4:cb:96:5d:92:3e:7d: 92:2e:4f:56:ac:3a:7f:95:1d:62:ef:8d:b2:8e:cd: c5:7a:4a:8d:22:41:28:69:6d:da:96:04:d1:7d:f7: b8:98:ca:c3:30:31:4c:aa:62:c5:be:cf:d8:21:17: 2f:4f:4b:50:9d:64:b6:3d:94:96:9f:e3:0d:fa:a5: b5:83:f6:09:5e:ba:85:3e:7a:03:b4:32:6a:a7:1b: 32:2c:f1:a0:84:28:e1:3c:ad:a7:89:18:eb:16:e7: 08:7c:78:fe:9b:45:3c:fe:79:e8:56:f6:86:92:35: b7:8e:f4:19:f3:80:f8:8c:01:60:08:bd:70:7c:5a: 7e:b6:fa:0b:1a:8d:b8:95:c9:b1:fe:66:29:70:85: 7f:35:dc:16:d9:79:8b:e4:d9:b0:e3:06:37:06:db: 8c:fb:bb:96:bf:57:3e:7a:54:fd:47:12:60:02:94: 46:bb:0c:76:8c:70:e4:9b:27:3b:91:a2:47:bb:71: e1:c3:9c:0c:dc:27:14:f0:ae:f4:d2:4f:c9:25:2a: 9e:ae:db:a7:fe:e3:79:86:0e:cd:bb:53:a0:d4:59: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BA:85:37:95:D5:C2:1F:5F:29:2F:41:E1:EB:A1:DA:49:A7:90:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/1123e5b1-5ec8-3464-89da-b623e37e2172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.crl X509v3 Authority Key Identifier: keyid:09:EF:96:7B:66:80:2E:74:E9:12:F5:82:B1:4B:46:DB:38:78:55:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7efbaef-2817-4a72-a1dd-cb7b66e942b1.cer sbgp-ipAddrBlock: critical IPv4: 161.97.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:eb:b8:9c:fd:a4:f1:1f:63:bf:cc:5b:7d:9e:b3:82:2c:af: 6c:2c:bd:32:04:f4:89:98:6b:33:e1:83:5b:54:aa:47:ae:fa: 32:be:19:5f:12:49:71:27:d8:fc:25:39:31:41:5f:c2:e8:96: 98:3f:31:4d:4b:a0:f4:8f:47:44:72:e7:f7:92:c5:0c:e1:ff: f9:ae:7c:87:c7:cb:1b:fb:6e:66:36:e0:72:23:a9:81:1b:b5: 99:fe:ee:62:a1:fe:6b:58:52:b3:80:5d:43:42:d7:7d:87:d2: 00:21:d3:9c:06:68:50:b9:4e:d5:4f:95:27:a4:3c:b4:67:64: df:72:21:64:98:51:7a:d7:3f:54:e4:b1:ca:66:ad:6b:05:b9: 5c:02:b6:e6:ed:98:a5:f1:b0:96:5e:d7:44:7c:2f:e5:ea:cb: 50:77:d5:40:13:53:57:4e:6b:f9:55:ad:39:26:a4:2e:54:bf: d6:92:23:74:ac:6c:15:a2:1e:16:74:f6:e3:9d:c8:50:70:01: 80:3e:11:2f:db:58:f4:75:d8:ab:aa:44:0d:18:1a:e1:1e:fe: b5:29:19:f9:4d:fd:d9:aa:85:06:66:c4:95:56:49:71:82:a4: 90:94:f8:ed:48:27:da:6c:6d:a3:8e:bd:cb:0e:57:e5:d5:09: 61:1b:65:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3aOYWpkW1npUSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlZmJhZWYtMjgxNy00YTcyLWExZGQtY2I3YjY2ZTk0 MmIxMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk OGZiMWIxNjUtNWQ3YS00ZjRmLTg3ZjktODEyM2I2Zjk1MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVxr3NqUl4d28whZLKIqAEUMxnIp/kGj/us Tn6DfyCc9x+H8cTLll2SPn2SLk9WrDp/lR1i742yjs3FekqNIkEoaW3algTRffe4 mMrDMDFMqmLFvs/YIRcvT0tQnWS2PZSWn+MN+qW1g/YJXrqFPnoDtDJqpxsyLPGg hCjhPK2niRjrFucIfHj+m0U8/nnoVvaGkjW3jvQZ84D4jAFgCL1wfFp+tvoLGo24 lcmx/mYpcIV/NdwW2XmL5Nmw4wY3BtuM+7uWv1c+elT9RxJgApRGuwx2jHDkmyc7 kaJHu3Hhw5wM3CcU8K700k/JJSqertun/uN5hg7Nu1Og1FliLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy6hTeV1cIfXykvQeHrodpJp5CmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kN2Vm YmFlZi0yODE3LTRhNzItYTFkZC1jYjdiNjZlOTQyYjEvMTEyM2U1YjEtNWVjOC0z NDY0LTg5ZGEtYjYyM2UzN2UyMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDdlZmJhZWYtMjgxNy00YTcyLWEx ZGQtY2I3YjY2ZTk0MmIxL2Q3ZWZiYWVmLTI4MTctNGE3Mi1hMWRkLWNiN2I2NmU5 NDJiMS5jcmwwHwYDVR0jBBgwFoAUCe+We2aALnTpEvWCsUtG2zh4VdIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kN2VmYmFlZi0yODE3LTRhNzItYTFkZC1jYjdi NjZlOTQyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoWEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjruJz9pPEfY7/MW32es4Isr2wsvTIE9ImYazPhg1tUqkeu+jK+GV8S SXEn2PwlOTFBX8Lolpg/MU1LoPSPR0Ry5/eSxQzh//mufIfHyxv7bmY24HIjqYEb tZn+7mKh/mtYUrOAXUNC132H0gAh05wGaFC5TtVPlSekPLRnZN9yIWSYUXrXP1Tk scpmrWsFuVwCtubtmKXxsJZe10R8L+Xqy1B31UATU1dOa/lVrTkmpC5Uv9aSI3Ss bBWiHhZ09uOdyFBwAYA+ES/bWPR12KuqRA0YGuEe/rUpGflN/dmqhQZmxJVWSXGC pJCU+O1IJ9psbaOOvcsOV+XVCWEbZcE= -----END CERTIFICATE-----Generated at Mon Oct 26 08:06:46 2026 by rpki-client