$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa File: 61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json) Hash identifier: 3bGrNsS5m9f1C4J1jsICauLqxq7AwiAfsfxyu6PA++M= Subject key identifier: 73:C8:C5:F8:32:77:78:9E:42:DB:B4:75:33:05:A8:01:E3:CC:69:11 Certificate issuer: /CN=e91007f4-8b69-443f-87b7-248480814a0d Certificate serial: 010D0C9F4328584EF71763359851E15874A4D000 Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 11039 IP address blocks: 128.164.0.0/16 maxlen: 16 161.253.0.0/16 maxlen: 16 161.253.0.0/17 maxlen: 17 161.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:63:35:98:51:e1:58:74:a4:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=09e2f8e3-6604-4427-932a-25050d9a0531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:f4:4c:91:e6:3d:c1:60:64:40:93:db:c5: ca:04:33:93:42:de:71:6b:f0:8b:60:3d:5c:94:7f: 85:8e:c9:11:dc:be:51:1e:c2:d1:81:d0:b7:d5:eb: 8e:ca:10:b3:4d:84:3b:f7:0c:c6:66:44:9c:1f:8b: eb:19:db:2a:dd:f0:37:c3:6f:23:9f:04:33:3e:51: 19:08:03:4f:81:5f:6b:9a:e6:d3:6b:7d:0a:0d:cf: c6:6f:a3:30:dc:5b:73:57:8f:67:b4:55:17:6b:b5: c5:dc:b6:19:f0:ad:0a:af:86:68:fe:8d:14:53:f2: 0a:d0:ed:ff:80:a5:da:ff:53:99:04:d0:c1:b7:e4: 40:3e:9e:6d:29:c2:79:82:11:88:fb:f5:71:be:3c: 05:65:a1:c9:e5:23:5e:85:f3:a3:93:50:6a:c6:62: c3:fb:d0:ba:30:0d:41:78:00:a0:3d:ed:76:30:51: 77:47:50:0a:d7:a0:d5:d6:3d:9e:f4:1d:67:ea:11: ef:11:0b:95:db:ad:cc:04:7f:f2:f4:53:d2:2b:b3: 83:61:58:47:7e:a8:a9:17:bd:03:bd:d9:bd:de:a4: c5:10:9e:d9:bf:36:c2:33:d6:32:65:ee:87:2c:9d: 26:c0:d0:60:31:4a:79:0a:b1:3f:ed:28:84:1a:80: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C8:C5:F8:32:77:78:9E:42:DB:B4:75:33:05:A8:01:E3:CC:69:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl X509v3 Authority Key Identifier: keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer sbgp-ipAddrBlock: critical IPv4: 128.164.0.0/16 161.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d5:cf:10:62:98:c9:42:d7:df:bd:48:21:94:fc:46:10:fc: 74:65:f9:a0:c1:51:b5:bb:7d:3a:28:a9:ff:81:9e:6a:a5:cd: d5:79:3d:a3:18:6b:cd:86:3b:0d:6c:75:44:6a:42:be:df:46: f6:18:8d:74:94:b2:c9:0b:a6:d3:f0:0e:8e:26:29:fe:52:7c: d0:4f:f5:fa:de:ff:88:99:f5:a8:56:30:e1:cc:c7:42:dd:85: 11:fc:5d:57:5b:c1:da:0b:95:58:3c:12:c2:54:3e:ed:48:f9: f8:8c:f7:4c:d1:4a:1c:82:a9:4b:4b:25:a3:fd:a5:8a:68:43: bb:79:2e:43:48:a4:c5:72:8b:b0:a7:34:c4:94:0e:f4:2a:b6: 20:01:ad:25:9f:f5:92:5c:29:94:75:fb:05:18:95:a7:55:32: 08:d6:31:f3:e9:e9:3e:22:b7:1b:a2:35:60:e8:11:0a:b0:64: 53:38:c6:99:34:f2:85:a0:22:00:aa:83:3c:07:59:1b:32:cd: 66:2c:aa:46:d9:e7:8a:a8:96:11:23:59:e9:b7:0d:5d:2e:65: 6b:2c:1d:1f:68:78:ac:c1:c6:c6:fb:a2:52:ef:f4:cb:23:41: e2:10:b3:f4:04:25:2e:16:15:d4:ca:f4:92:fe:40:5d:8a:47: 12:f6:b5:53 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE73F2M1mFHhWHSk0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0 YTBkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MDllMmY4ZTMtNjYwNC00NDI3LTkzMmEtMjUwNTBkOWEwNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul/0TJHmPcFgZECT28XKBDOTQt5xa/CLYD1c lH+FjskR3L5RHsLRgdC31euOyhCzTYQ79wzGZkScH4vrGdsq3fA3w28jnwQzPlEZ CANPgV9rmubTa30KDc/Gb6Mw3FtzV49ntFUXa7XF3LYZ8K0Kr4Zo/o0UU/IK0O3/ gKXa/1OZBNDBt+RAPp5tKcJ5ghGI+/VxvjwFZaHJ5SNehfOjk1BqxmLD+9C6MA1B eACgPe12MFF3R1AK16DV1j2e9B1n6hHvEQuV263MBH/y9FPSK7ODYVhHfqipF70D vdm93qTFEJ7ZvzbCM9YyZe6HLJ0mwNBgMUp5CrE/7SiEGoByIQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFHPIxfgyd3ieQtu0dTMFqAHjzGkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEw MDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvNjFkZThhMTEtOWY1ZC0z ZTc2LWE3MmQtNmYzMGFhNDk0ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTkxMDA3ZjQtOGI2OS00NDNmLTg3 YjctMjQ4NDgwODE0YTBkL2U5MTAwN2Y0LThiNjktNDQzZi04N2I3LTI0ODQ4MDgx NGEwZC5jcmwwHwYDVR0jBBgwFoAUp5WjqOExc4w6TNxh6CCvjk9w4I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0 ODA4MTRhMGQuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgKQDAwCh /TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBo1c8QYpjJQtffvUghlPxGEPx0ZfmgwVG1u306KKn/gZ5qpc3V eT2jGGvNhjsNbHVEakK+30b2GI10lLLJC6bT8A6OJin+UnzQT/X63v+ImfWoVjDh zMdC3YUR/F1XW8HaC5VYPBLCVD7tSPn4jPdM0UocgqlLSyWj/aWKaEO7eS5DSKTF couwpzTElA70KrYgAa0ln/WSXCmUdfsFGJWnVTII1jHz6ek+IrcbojVg6BEKsGRT OMaZNPKFoCIAqoM8B1kbMs1mLKpG2eeKqJYRI1nptw1dLmVrLB0faHiswcbG+6JS 7/TLI0HiELP0BCUuFhXUyvSS/kBdikcS9rVT -----END CERTIFICATE-----Generated at Sat Oct 3 03:12:50 2026 by rpki-client