$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa File: 0be8454d-aa3f-3887-b929-e6f6935a2918.roa (raw, json) Hash identifier: n8iUjzjbSC5PDMN0Cy5sxpt6irF6OMRj1O2drKXkc8c= Subject key identifier: A9:6F:F9:65:F3:01:5D:E7:3B:9C:BD:99:A0:D6:58:F4:A9:6A:C4:8E Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584EA79078D401823655FDA6D900 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10794 IP address blocks: 171.161.20.0/22 maxlen: 22 171.161.20.0/24 maxlen: 24 171.161.21.0/24 maxlen: 24 171.161.22.0/24 maxlen: 24 171.161.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:78:d4:01:82:36:55:fd:a6:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=227cb1df-e7ce-4ce7-8eac-8021b1049829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:6a:87:5a:da:15:7e:76:a1:19:80:0f:63: 8e:b4:93:1b:27:8f:da:88:58:06:d9:28:cd:11:ee: 98:92:40:e5:64:91:a5:48:b6:c9:a1:88:52:35:4d: ff:9f:9d:5f:5d:66:d8:01:90:5c:36:6e:29:9d:dc: ff:d6:08:d2:c5:0e:9a:2c:a1:57:8c:be:c6:dc:e9: 1e:f7:da:94:dd:37:d9:e5:57:37:c3:60:4d:c5:6b: 0b:22:e3:d7:ef:c9:50:52:79:72:48:76:eb:6b:3f: 8a:83:76:68:db:a4:49:12:ce:d4:e8:ca:55:48:60: d7:f6:35:42:f1:f2:2a:00:c2:3d:9a:54:5a:5a:ad: 97:8b:f5:9c:ce:fe:17:8b:b2:80:49:13:26:05:a4: eb:4d:e1:87:11:f4:55:06:eb:5c:3c:ca:46:4d:11: 9b:6a:a8:7f:2e:a0:11:29:e3:da:51:1a:f1:da:2a: e6:5d:90:c3:a9:0d:a3:cb:5c:e1:77:ee:67:60:9f: 08:50:f6:dc:74:07:d1:f8:d2:18:b0:52:cc:d6:c4: c0:08:31:64:92:16:4d:f9:48:ee:d1:c4:d6:d0:d2: d2:05:ea:68:b4:24:66:a8:6f:79:71:5b:02:f4:49: a7:8b:5c:09:20:1c:0a:b0:96:85:e1:ab:a3:56:2c: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:F9:65:F3:01:5D:E7:3B:9C:BD:99:A0:D6:58:F4:A9:6A:C4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1b:69:23:42:07:f3:f4:02:c1:f9:06:98:9e:92:7b:93:28: 00:40:29:9c:af:cf:db:ea:1c:25:b5:28:19:ee:2f:1b:be:80: 70:34:ce:56:6c:2e:0a:43:87:18:d8:2c:c7:df:9a:55:9d:82: 81:53:9b:fd:e9:bb:f5:d3:f3:29:33:79:1b:54:3c:c2:b2:0d: 51:67:ad:19:d7:80:d1:96:eb:8f:cd:e4:34:62:c1:24:73:e6: b9:fc:2f:bc:77:4f:87:a1:f4:51:cb:23:27:b3:2f:1f:9e:24: 55:29:11:16:c2:9c:5e:f5:d3:8b:a9:ea:e9:c7:20:53:1e:80: 7f:21:0e:b2:fc:6e:ff:d4:d8:b9:ff:1d:48:a2:f7:5e:6e:b0: 16:3b:49:e8:c6:eb:cc:53:ec:80:9b:32:fe:56:95:ee:db:9c: f8:5a:e7:25:f6:40:45:5a:f2:82:63:bf:f9:7f:5e:6d:22:0c: 9a:f2:a5:6c:26:67:9f:e5:e7:11:ce:30:62:77:db:89:a8:2b: 3e:b1:47:8e:dc:07:36:7d:c0:15:50:5d:ff:73:80:4e:2b:d1: 65:e2:4d:da:8f:6c:3d:1d:c7:7b:eb:5c:91:bc:3d:25:f8:96: 81:ed:0e:ce:20:1b:5b:0d:d0:9a:6a:90:9e:eb:b2:6a:da:ca: 2f:8d:28:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkHjUAYI2Vf2m2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjI3Y2IxZGYtZTdjZS00Y2U3LThlYWMtODAyMWIxMDQ5ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg5qh1raFX52oRmAD2OOtJMbJ4/aiFgG2SjN Ee6YkkDlZJGlSLbJoYhSNU3/n51fXWbYAZBcNm4pndz/1gjSxQ6aLKFXjL7G3Oke 99qU3TfZ5Vc3w2BNxWsLIuPX78lQUnlySHbraz+Kg3Zo26RJEs7U6MpVSGDX9jVC 8fIqAMI9mlRaWq2Xi/Wczv4Xi7KASRMmBaTrTeGHEfRVButcPMpGTRGbaqh/LqAR KePaURrx2irmXZDDqQ2jy1zhd+5nYJ8IUPbcdAfR+NIYsFLM1sTACDFkkhZN+Uju 0cTW0NLSBepotCRmqG95cVsC9Emni1wJIBwKsJaF4aujVixZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlv+WXzAV3nO5y9maDWWPSpasSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGJlODQ1NGQtYWEzZi0z ODg3LWI5MjktZTZmNjkzNWEyOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwbaSNCB/P0AsH5BpieknuTKABAKZyvz9vqHCW1KBnuLxu+gHA0zlZs LgpDhxjYLMffmlWdgoFTm/3pu/XT8ykzeRtUPMKyDVFnrRnXgNGW64/N5DRiwSRz 5rn8L7x3T4eh9FHLIyezLx+eJFUpERbCnF7104up6unHIFMegH8hDrL8bv/U2Ln/ HUii915usBY7SejG68xT7ICbMv5Wle7bnPha5yX2QEVa8oJjv/l/Xm0iDJrypWwm Z5/l5xHOMGJ324moKz6xR47cBzZ9wBVQXf9zgE4r0WXiTdqPbD0dx3vrXJG8PSX4 loHtDs4gG1sN0JpqkJ7rsmrayi+NKGc= -----END CERTIFICATE-----Generated at Fri Sep 11 03:52:14 2026 by rpki-client