$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa File: 2782020a-b333-378b-976a-19c150b5397c.roa (raw, json) Hash identifier: rNJ/fX1WPU2lPnPhAlJ2U9ax6/4TvDu6Zeu2X5914fA= Subject key identifier: 4E:65:C8:AD:A9:86:C4:3E:A4:D0:20:52:FA:E0:0F:00:E8:26:F7:F0 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584F9A686B52CC8626FC1E0AFA80 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 8075 IP address blocks: 161.221.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:6b:52:cc:86:26:fc:1e:0a:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=eb8e98aa-28bc-4e44-a1a7-3e54534fb1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:0e:bc:af:94:27:41:04:be:4e:d8:55:98: f3:22:4d:9d:e3:3c:70:5b:76:ab:9b:d9:e1:76:72: 2f:0b:14:c3:83:a6:87:c8:28:92:ea:f6:6b:0a:d8: 95:73:11:c0:17:ca:42:b8:ac:5d:06:0f:11:89:d3: a1:3c:75:ca:e7:9c:5a:26:d8:23:27:35:77:5e:90: 84:3f:59:34:57:8b:4f:ff:a4:2d:56:51:27:d9:bb: e6:ad:cd:30:91:62:1c:84:8f:d3:08:67:6b:58:d8: 8a:3e:95:85:87:19:ce:07:8c:54:eb:ba:74:6d:0c: 96:d9:b8:e8:54:09:a6:d1:eb:7c:67:a3:be:ab:52: 19:bc:c3:b3:f6:3f:0b:3e:40:8e:5a:a5:55:7c:4b: 26:3f:b8:e9:ee:0b:70:d0:42:80:05:35:4e:a0:d0: cf:73:60:2a:11:cb:28:85:18:7f:57:85:d4:2b:88: 3d:be:fa:14:47:5e:a5:9e:19:1a:de:0a:76:5f:10: 9f:ee:a9:63:f2:49:10:5a:51:75:47:d7:f3:40:c1: d6:50:0c:5c:a3:5d:1b:50:cc:6e:42:68:89:10:c3: ad:d3:d2:ea:3e:50:a5:16:cd:20:83:09:78:f5:ac: bc:66:bb:17:c5:16:18:17:ff:e3:f8:45:2a:cc:92: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:65:C8:AD:A9:86:C4:3E:A4:D0:20:52:FA:E0:0F:00:E8:26:F7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:a6:54:38:91:a7:d4:1a:20:a3:18:0d:21:80:43:d2:e5:e0: dd:26:3c:c5:ed:10:4a:86:a9:3e:0f:df:32:86:ca:73:01:b1: 4b:4b:76:cb:1b:34:a4:1a:d9:8a:6f:96:26:e6:88:4f:d8:f6: 87:fb:47:24:5e:3b:70:2c:70:64:5d:f9:7a:ee:ee:90:75:6d: e0:b6:74:49:92:f5:b7:ee:b4:db:f4:b0:7b:15:27:a1:1a:64: 78:cf:c7:b1:57:e9:3b:47:5c:71:d9:64:18:ec:a4:7b:73:58: 7d:a3:b9:16:eb:6a:02:00:c9:b5:62:f2:df:46:80:2e:d8:85: 4d:da:66:3d:8c:88:7b:2f:3c:26:2e:97:a4:85:7f:a2:1c:4a: a2:a5:33:7e:67:c0:92:8e:0a:88:38:e0:da:80:33:8f:79:55: 45:4d:c0:8f:7c:3d:c0:7f:18:15:94:4a:76:8b:21:f3:de:d2: c9:7e:38:e3:6b:d4:0d:17:66:0f:8a:f5:e0:7a:d6:64:f8:c6: b9:83:74:02:bf:c6:c2:eb:e1:40:34:ab:da:1d:d3:7e:95:7c: f0:ca:92:cf:e4:ab:b7:71:06:3e:88:a1:fe:a8:a6:ab:b3:48: ef:ec:67:9e:3e:14:ad:4e:d6:19:25:62:9d:ba:f1:ac:4e:27: 5f:47:1d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGtSzIYm/B4K+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWI4ZTk4YWEtMjhiYy00ZTQ0LWExYTctM2U1NDUzNGZiMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsAOvK+UJ0EEvk7YVZjzIk2d4zxwW3arm9nh dnIvCxTDg6aHyCiS6vZrCtiVcxHAF8pCuKxdBg8RidOhPHXK55xaJtgjJzV3XpCE P1k0V4tP/6QtVlEn2bvmrc0wkWIchI/TCGdrWNiKPpWFhxnOB4xU67p0bQyW2bjo VAmm0et8Z6O+q1IZvMOz9j8LPkCOWqVVfEsmP7jp7gtw0EKABTVOoNDPc2AqEcso hRh/V4XUK4g9vvoUR16lnhka3gp2XxCf7qlj8kkQWlF1R9fzQMHWUAxco10bUMxu QmiJEMOt09LqPlClFs0ggwl49ay8ZrsXxRYYF//j+EUqzJLeDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5lyK2phsQ+pNAgUvrgDwDoJvfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvMjc4MjAyMGEtYjMzMy0z NzhiLTk3NmEtMTljMTUwYjUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMumVDiRp9QaIKMYDSGAQ9Ll4N0mPMXtEEqGqT4P3zKGynMBsUtLdssb NKQa2YpvlibmiE/Y9of7RyReO3AscGRd+Xru7pB1beC2dEmS9bfutNv0sHsVJ6Ea ZHjPx7FX6TtHXHHZZBjspHtzWH2juRbragIAybVi8t9GgC7YhU3aZj2MiHsvPCYu l6SFf6IcSqKlM35nwJKOCog44NqAM495VUVNwI98PcB/GBWUSnaLIfPe0sl+OONr 1A0XZg+K9eB61mT4xrmDdAK/xsLr4UA0q9od036VfPDKks/kq7dxBj6Iof6opquz SO/sZ54+FK1O1hklYp268axOJ19HHRc= -----END CERTIFICATE-----Generated at Tue Oct 27 11:09:04 2026 by rpki-client