$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/85d3073a-bcd7-38c5-841c-2843397eb380.roa File: 85d3073a-bcd7-38c5-841c-2843397eb380.roa (raw, json) Hash identifier: g9P215VL28BG4/AoH2NRWR2uNV9ceQ+O1aVLuIsNLOE= Subject key identifier: AE:FA:4F:AE:A7:A3:2F:E9:40:40:A3:F7:8A:29:9C:63:38:F3:87:74 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EE6EE1E4AB0835AFCDD5CAE00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/85d3073a-bcd7-38c5-841c-2843397eb380.roa Signing time: Thu 20 Aug 2026 18:04:13 +0000 ROA not before: Thu 20 Aug 2026 18:04:13 +0000 ROA not after: Wed 11 Nov 2026 15:39:54 +0000 asID: 979 IP address blocks: 161.114.12.0/22 maxlen: 24 161.114.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:ee:1e:4a:b0:83:5a:fc:dd:5c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 20 18:04:13 2026 GMT Not After : Nov 11 15:39:54 2026 GMT Subject: CN=54c8d0e5-32f0-4053-8346-953017d8ee5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:0a:c7:bb:d1:f0:f4:78:64:a1:da:a6:6a: 93:cc:52:a6:22:3a:60:de:bb:b1:7b:41:e1:f9:b4: 69:4b:76:7c:6d:92:ca:8d:a6:b3:50:06:2c:4e:bd: 85:91:fe:70:ee:ff:c1:d3:f9:5e:a1:94:85:07:f9: 70:c5:b7:c0:40:74:18:55:b9:a6:30:c8:8e:d2:b8: 9f:cf:ff:15:7f:c4:ab:31:f1:9e:42:e2:74:29:4b: 76:76:a5:0f:33:71:28:6d:bd:bb:0e:2e:4d:80:00: 6c:28:3c:c2:a9:cf:4c:a8:90:35:53:da:4f:49:82: ed:81:cd:bd:f4:fc:56:bb:a5:8e:f9:7d:88:59:38: fc:4a:ea:2c:84:9c:3c:44:bb:ef:44:68:bb:14:c9: 62:6a:e9:b5:92:bc:84:15:9f:b5:55:3b:4b:69:52: 35:4f:66:0b:8d:67:34:ba:86:93:d4:d5:c7:c7:bd: 54:fe:ab:81:d1:e9:2e:74:27:b3:30:d8:ac:cd:86: c9:ce:c8:d5:c7:d9:46:41:27:7a:d7:46:d0:f0:13: 31:74:c4:41:c8:bb:ef:54:24:da:9e:c5:9d:c9:34: a2:cf:59:94:a0:f8:8d:14:b4:48:20:67:86:77:b6: a8:64:f7:a4:b0:db:4a:e4:b4:9d:09:c4:84:54:b6: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FA:4F:AE:A7:A3:2F:E9:40:40:A3:F7:8A:29:9C:63:38:F3:87:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/85d3073a-bcd7-38c5-841c-2843397eb380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 161.114.12.0/22 161.114.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:8c:f3:7c:1b:cb:01:4e:a0:0d:33:9b:da:4b:30:de:40: 13:72:4d:41:5e:2a:d8:81:1a:06:a4:a8:9e:28:79:a0:bb:90: b6:1a:d1:a9:05:a9:be:ae:03:d6:c9:a4:56:67:56:df:a3:66: f5:6c:d5:9a:ba:c5:ed:63:8b:83:63:59:71:86:48:87:4b:db: 5b:72:bf:d0:df:76:62:ee:a5:f2:ec:2f:a2:ae:6d:0f:9c:64: 40:ab:c2:09:8c:a1:16:93:61:97:56:a9:0f:a6:35:83:a0:e3: 41:03:2b:04:50:74:a1:5b:c1:c2:53:07:62:f2:fa:bf:d5:9b: e4:7c:6f:69:fc:69:9c:95:d5:13:b9:85:df:dd:58:18:dd:19: 9a:6d:1f:5f:1e:2a:39:43:2f:a0:ac:f2:dd:3f:69:a2:56:13: 8d:c0:1b:6e:46:0f:ac:b2:c7:c6:aa:b7:61:9b:04:8e:a2:21: 9d:ff:6e:f3:ae:5a:a0:0a:a3:5e:f1:db:f5:81:f1:56:eb:00: ae:6f:bf:34:36:f4:1c:f9:d3:e1:3d:4c:84:24:dd:c6:42:35: d3:61:e8:fe:6b:95:d2:29:e8:b7:b9:f9:2a:e1:33:ee:8e:50: 9f:4e:06:db:01:c7:38:1e:a3:a2:83:94:3e:c7:60:de:40:a4: e7:ef:2e:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7m7h5KsINa/N1crgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgyMDE4MDQxM1oXDTI2MTExMTE1Mzk1NFowLzEtMCsGA1UEAxMk NTRjOGQwZTUtMzJmMC00MDUzLTgzNDYtOTUzMDE3ZDhlZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8Kx7vR8PR4ZKHapmqTzFKmIjpg3ruxe0Hh +bRpS3Z8bZLKjaazUAYsTr2Fkf5w7v/B0/leoZSFB/lwxbfAQHQYVbmmMMiO0rif z/8Vf8SrMfGeQuJ0KUt2dqUPM3Eobb27Di5NgABsKDzCqc9MqJA1U9pPSYLtgc29 9PxWu6WO+X2IWTj8SuoshJw8RLvvRGi7FMliaum1kryEFZ+1VTtLaVI1T2YLjWc0 uoaT1NXHx71U/quB0ekudCezMNiszYbJzsjVx9lGQSd610bQ8BMxdMRByLvvVCTa nsWdyTSiz1mUoPiNFLRIIGeGd7aoZPeksNtK5LSdCcSEVLaSNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK76T66noy/pQECj94opnGM484d0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvODVkMzA3M2EtYmNkNy0z OGM1LTg0MWMtMjg0MzM5N2ViMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoXIMAwQC oXJwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEmkjPN8G8sBTqANM5vaSzDeQBNyTUFeKtiBGgakqJ4oeaC7 kLYa0akFqb6uA9bJpFZnVt+jZvVs1Zq6xe1ji4NjWXGGSIdL21tyv9DfdmLupfLs L6KubQ+cZECrwgmMoRaTYZdWqQ+mNYOg40EDKwRQdKFbwcJTB2Ly+r/Vm+R8b2n8 aZyV1RO5hd/dWBjdGZptH18eKjlDL6Cs8t0/aaJWE43AG25GD6yyx8aqt2GbBI6i IZ3/bvOuWqAKo17x2/WB8VbrAK5vvzQ29Bz50+E9TIQk3cZCNdNh6P5rldIp6Le5 +SrhM+6OUJ9OBtsBxzgeo6KDlD7HYN5ApOfvLnE= -----END CERTIFICATE-----Generated at Sun Sep 13 07:04:56 2026 by rpki-client