$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/35e6f2c6-9e86-3d1a-ba0e-c2d1c2ab137e.roa File: 35e6f2c6-9e86-3d1a-ba0e-c2d1c2ab137e.roa (raw, json) Hash identifier: 0/aX0CJvpWyoa5dR2PSZgXqaCf/U6/G9aCSrqK1D0C8= Subject key identifier: 4F:34:A8:D5:37:84:E0:7D:EC:C4:15:ED:9B:25:D8:D6:15:83:D9:77 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EE6EDE06628AF5E0F6F25DD80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/35e6f2c6-9e86-3d1a-ba0e-c2d1c2ab137e.roa Signing time: Thu 20 Aug 2026 18:03:43 +0000 ROA not before: Thu 20 Aug 2026 18:03:43 +0000 ROA not after: Wed 11 Nov 2026 15:38:19 +0000 asID: 206300 IP address blocks: 161.114.12.0/22 maxlen: 24 161.114.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:ed:e0:66:28:af:5e:0f:6f:25:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 20 18:03:43 2026 GMT Not After : Nov 11 15:38:19 2026 GMT Subject: CN=817e6b1a-abed-4685-93df-72dada74e1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:d7:c8:0f:71:17:21:2c:28:ee:dc:d5:d2: b1:91:4b:69:f0:3c:9e:53:79:39:a9:6a:e9:56:a3: 9b:36:da:91:12:74:cd:18:18:51:80:d7:34:31:65: d8:a9:d4:c2:b6:c0:81:2f:3d:9f:8d:b5:1e:8a:d1: 92:b7:da:f0:4d:96:d5:ce:b2:ad:c4:82:a2:2b:45: 4d:50:c7:2f:75:c0:42:e1:25:f4:ae:10:ee:f7:2c: 30:e6:e6:78:2f:82:78:35:18:78:01:6a:d8:ce:82: cc:0a:58:20:ff:f7:dd:17:ed:c8:62:04:1b:c5:78: c5:a4:f2:9a:40:e9:07:06:d1:ee:07:ff:a5:ce:ec: cf:03:30:f0:39:8b:1c:c5:ba:33:6f:51:d9:d7:69: ae:56:a3:70:6d:f8:c3:e3:81:55:b2:36:c2:3e:5d: aa:3b:67:8d:85:97:6e:db:93:1a:f0:13:7b:82:77: 21:ab:64:bb:b2:ed:86:a8:a3:30:8a:f2:ef:19:1f: 7c:c4:53:7c:df:0a:35:20:55:10:24:37:aa:20:3a: 1f:c2:ef:b9:b8:47:e7:d2:bb:72:41:19:f8:c1:98: e4:90:1c:07:4f:36:81:02:38:84:4b:d6:95:8b:a5: d6:07:5a:c2:b7:84:d3:04:9e:4c:db:86:3d:67:2a: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:A8:D5:37:84:E0:7D:EC:C4:15:ED:9B:25:D8:D6:15:83:D9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/35e6f2c6-9e86-3d1a-ba0e-c2d1c2ab137e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 161.114.12.0/22 161.114.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5c:90:b0:96:49:bc:25:05:f3:fb:12:c4:00:7d:82:52:82: 1a:88:1e:78:1b:b3:d1:77:3e:80:30:ad:13:98:68:e1:2d:03: 3b:53:db:76:42:5a:f1:02:e3:b8:f8:9d:fe:7a:66:04:98:06: 26:56:a6:3f:04:d6:38:e5:72:e4:a8:71:c4:91:f9:c7:a4:ab: 45:e4:19:91:1a:29:2a:54:74:c7:6a:78:6e:56:dc:cb:0d:ea: e5:94:ea:b4:fd:6f:79:d5:08:12:e2:0c:1c:a6:09:7f:2b:ba: 4b:04:f6:52:b5:8a:18:d3:65:38:07:df:24:c6:be:e4:27:91: 58:c2:c0:49:c5:9a:b0:b3:43:a2:99:e3:01:d4:bb:ee:3b:90: 54:77:5c:6b:f7:3d:55:e8:21:4f:5f:ca:14:08:a8:8f:ab:56: f3:3b:d1:4a:ca:0e:52:19:ca:7c:43:41:91:0f:fd:c9:de:81: 38:33:00:de:c6:7d:50:09:9a:a1:24:64:bc:61:ad:f6:af:d3: 2b:bb:f3:da:be:2f:f0:c9:a7:86:e9:77:30:5a:32:e6:74:93: d8:70:f7:8f:77:b2:17:bb:02:90:0c:0f:3e:09:86:fd:93:12: d3:10:90:a4:dd:32:ef:38:86:06:f7:fe:b5:fd:4e:5d:8f:07: eb:20:89:b7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7m7eBmKK9eD28l3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgyMDE4MDM0M1oXDTI2MTExMTE1MzgxOVowLzEtMCsGA1UEAxMk ODE3ZTZiMWEtYWJlZC00Njg1LTkzZGYtNzJkYWRhNzRlMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4fXyA9xFyEsKO7c1dKxkUtp8DyeU3k5qWrp VqObNtqREnTNGBhRgNc0MWXYqdTCtsCBLz2fjbUeitGSt9rwTZbVzrKtxIKiK0VN UMcvdcBC4SX0rhDu9yww5uZ4L4J4NRh4AWrYzoLMClgg//fdF+3IYgQbxXjFpPKa QOkHBtHuB/+lzuzPAzDwOYscxbozb1HZ12muVqNwbfjD44FVsjbCPl2qO2eNhZdu 25Ma8BN7gnchq2S7su2GqKMwivLvGR98xFN83wo1IFUQJDeqIDofwu+5uEfn0rty QRn4wZjkkBwHTzaBAjiES9aVi6XWB1rCt4TTBJ5M24Y9ZyqItQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE80qNU3hOB97MQV7Zsl2NYVg9l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMzVlNmYyYzYtOWU4Ni0z ZDFhLWJhMGUtYzJkMWMyYWIxMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoXIMAwQC oXJwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGhckLCWSbwlBfP7EsQAfYJSghqIHngbs9F3PoAwrROYaOEt AztT23ZCWvEC47j4nf56ZgSYBiZWpj8E1jjlcuSoccSR+cekq0XkGZEaKSpUdMdq eG5W3MsN6uWU6rT9b3nVCBLiDBymCX8ruksE9lK1ihjTZTgH3yTGvuQnkVjCwEnF mrCzQ6KZ4wHUu+47kFR3XGv3PVXoIU9fyhQIqI+rVvM70UrKDlIZynxDQZEP/cne gTgzAN7GfVAJmqEkZLxhrfav0yu789q+L/DJp4bpdzBaMuZ0k9hw9493she7ApAM Dz4Jhv2TEtMQkKTdMu84hgb3/rX9Tl2PB+sgibc= -----END CERTIFICATE-----Generated at Thu Aug 27 18:26:11 2026 by rpki-client