$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa File: 12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json) Hash identifier: X/BX+lsQcS+nGof9v/jKXega3T8k2zEGyla/CF7hzl4= Subject key identifier: 4E:00:C0:F7:82:CF:A4:F7:39:47:0C:D5:56:6A:46:D6:20:23:BB:F1 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584F94D347F23DAFFC78C05529C0 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 8075 IP address blocks: 161.221.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:47:f2:3d:af:fc:78:c0:55:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=ccf6bac2-2822-438e-b46b-943991f18ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:e8:f9:cd:93:4f:d5:74:82:c3:c1:0f:a0: c7:0e:0b:aa:1d:d6:b6:b2:b4:6c:54:fb:03:2d:9d: f1:5f:18:c2:43:65:1d:67:af:94:65:e5:d2:83:75: 59:01:92:07:5d:c0:d4:b4:31:8e:12:ef:82:b0:95: ea:44:50:10:36:d2:b1:7b:2f:5c:8f:b9:54:ce:f7: 59:63:8b:0f:61:fe:b8:a6:a8:52:29:14:84:6d:4d: a6:30:25:02:63:0e:bd:55:ef:88:74:82:47:a0:b0: 01:fa:83:35:bb:93:59:53:38:9a:50:fd:95:db:f5: 4f:ef:61:ff:6f:63:a3:4b:93:77:01:7d:83:7a:3d: 9a:36:bd:45:8b:43:64:b0:7e:56:61:cd:26:43:bb: ea:f0:fc:45:01:fc:c8:8e:02:b4:06:ac:30:db:c2: d1:5b:31:28:4c:14:7e:70:eb:03:45:21:fb:fd:56: 40:c3:c6:9c:8e:d5:58:ab:b6:71:a3:c2:12:42:89: c0:66:f8:02:3d:1f:50:9c:62:85:49:29:0f:06:01: b3:d7:de:c2:e3:32:f6:92:41:70:cd:e3:07:67:f3: 8f:92:86:5b:0e:c4:80:f7:ec:12:a7:ef:a9:8f:68: ae:05:63:a4:9c:cd:e9:f4:2d:29:26:74:f5:8e:c0: 48:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:C0:F7:82:CF:A4:F7:39:47:0C:D5:56:6A:46:D6:20:23:BB:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0a:8b:3a:47:9c:b2:cb:e4:61:ec:be:7a:5f:3f:ac:1d:b0: 1f:22:66:77:26:ba:46:5e:d9:3c:49:16:69:58:1a:22:f7:49: d0:92:fe:c1:fd:1e:b7:87:6b:3b:48:6d:85:72:2e:53:e4:16: f7:19:c0:b6:55:fe:16:dc:66:03:0a:e3:90:90:e9:bb:79:59: ad:66:94:53:45:68:5f:aa:66:41:ed:68:c3:5b:90:25:2c:75: 25:96:d5:68:df:49:a3:6c:9a:71:ff:68:30:d8:fa:38:46:e1: 41:c5:96:75:2e:45:ff:67:9f:a2:1a:81:32:5b:c9:34:e2:76: 51:fa:70:69:df:c8:74:03:20:e1:39:dd:01:ed:a2:b8:85:bd: 85:8e:90:a4:99:8c:c8:f1:fb:17:9a:d7:d5:db:bf:d9:3d:ef: 42:92:71:c6:a2:b1:8d:c8:39:aa:12:b8:a6:47:78:dc:68:3b: 6e:0a:3d:5c:dc:67:09:5f:61:8a:33:40:e0:0a:9e:ec:a2:72: cf:ce:69:74:c4:c5:97:fc:24:76:2d:01:35:6a:01:56:29:7e: d5:ba:f6:fb:39:15:d5:6a:a0:02:28:26:43:94:74:71:b8:01: 77:e5:6e:69:1b:23:0a:e8:61:c3:3c:a7:5a:e8:23:89:29:51: 34:63:77:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U00fyPa/8eMBVKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2NmNmJhYzItMjgyMi00MzhlLWI0NmItOTQzOTkxZjE4ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX/o+c2TT9V0gsPBD6DHDguqHda2srRsVPsD LZ3xXxjCQ2UdZ6+UZeXSg3VZAZIHXcDUtDGOEu+CsJXqRFAQNtKxey9cj7lUzvdZ Y4sPYf64pqhSKRSEbU2mMCUCYw69Ve+IdIJHoLAB+oM1u5NZUziaUP2V2/VP72H/ b2OjS5N3AX2Dej2aNr1Fi0NksH5WYc0mQ7vq8PxFAfzIjgK0Bqww28LRWzEoTBR+ cOsDRSH7/VZAw8acjtVYq7Zxo8ISQonAZvgCPR9QnGKFSSkPBgGz197C4zL2kkFw zeMHZ/OPkoZbDsSA9+wSp++pj2iuBWOknM3p9C0pJnT1jsBIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4AwPeCz6T3OUcM1VZqRtYgI7vxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvMTIyMTFhOTgtYTQ2Ny0z OTVhLTgwMmYtMTNiNmI3OGMwN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMKizpHnLLL5GHsvnpfP6wdsB8iZncmukZe2TxJFmlYGiL3SdCS/sH9 HreHaztIbYVyLlPkFvcZwLZV/hbcZgMK45CQ6bt5Wa1mlFNFaF+qZkHtaMNbkCUs dSWW1WjfSaNsmnH/aDDY+jhG4UHFlnUuRf9nn6IagTJbyTTidlH6cGnfyHQDIOE5 3QHtoriFvYWOkKSZjMjx+xea19Xbv9k970KSccaisY3IOaoSuKZHeNxoO24KPVzc ZwlfYYozQOAKnuyics/OaXTExZf8JHYtATVqAVYpftW69vs5FdVqoAIoJkOUdHG4 AXflbmkbIwroYcM8p1roI4kpUTRjd9M= -----END CERTIFICATE-----Generated at Sat Oct 24 08:29:44 2026 by rpki-client