$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa File: 87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa (raw, json) Hash identifier: CG+xWMARGD6vSSqoM6CyuWsm3kswL5sQ0mTF5AzwLR0= Subject key identifier: DF:BD:09:26:DA:CF:44:90:08:8B:0C:5A:D7:60:5D:43:02:97:A5:92 Certificate issuer: /CN=b4bbcf4c-f013-41ff-946d-1e06d3c40679 Certificate serial: 010D0C9F4328584F761D7DE8455B2221F073F400 Authority key identifier: AB:31:B1:76:A7:FA:35:57:43:3D:EB:4A:4F:DD:9A:F7:FB:4E:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 210107 IP address blocks: 161.199.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7d:e8:45:5b:22:21:f0:73:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bbcf4c-f013-41ff-946d-1e06d3c40679 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=3cd90860-8f93-42df-a9a8-03a9f1943b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:dd:1a:0f:c8:cb:47:f7:30:bd:18:99:78: 19:45:97:0c:a3:7b:8b:ce:13:3d:b2:85:04:18:11: 93:89:38:38:c8:a6:b9:10:75:c9:3e:5a:f2:01:47: b3:a0:1d:ed:1e:2a:94:c9:3a:ad:d1:33:29:ff:ea: 8a:ec:c5:36:a7:94:c9:3c:b0:9c:59:53:32:35:f6: 2f:83:72:43:27:29:11:77:cd:62:46:b8:86:53:0e: 4a:9d:45:e6:e4:5e:8f:4e:3a:0f:17:6f:a3:ce:4c: 4f:9c:6a:c3:7c:99:a8:78:94:8b:88:54:f1:0b:71: a6:35:e3:ee:36:f0:11:3a:c5:04:8f:f1:58:40:e0: 09:0d:01:af:75:ac:b0:01:a0:ee:aa:66:4c:d5:27: 27:46:f2:28:39:cc:cc:d5:14:aa:19:4e:59:5c:8a: fe:a5:1b:9c:cf:b9:75:c7:ec:33:b2:00:e1:cb:13: be:cb:98:c5:13:fc:f9:b6:41:88:28:63:53:3a:8c: 24:53:15:b9:50:49:7f:f1:a6:5e:83:a4:79:4b:72: fe:7d:cd:86:09:22:4c:e1:ef:85:79:52:01:cb:f7: 9c:18:12:8d:f1:20:8d:ef:0b:02:c7:1b:17:75:8f: 23:65:03:5c:84:4f:50:cf:cd:2b:2e:4a:be:86:10: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:09:26:DA:CF:44:90:08:8B:0C:5A:D7:60:5D:43:02:97:A5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.crl X509v3 Authority Key Identifier: keyid:AB:31:B1:76:A7:FA:35:57:43:3D:EB:4A:4F:DD:9A:F7:FB:4E:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer sbgp-ipAddrBlock: critical IPv4: 161.199.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:92:1e:d1:aa:38:06:d5:24:de:f8:37:bb:33:12:10:f6:03: 8d:74:43:e3:a7:1e:63:1a:4e:cf:a8:23:f8:e2:5c:e0:82:e4: 46:e1:50:a6:f5:55:d6:47:06:54:9a:34:1a:6f:f5:5f:dd:5f: cf:12:36:78:34:6b:f0:ad:78:cb:1b:ab:09:0e:08:aa:6d:46: ef:ff:99:99:06:3e:3c:74:0a:4c:67:66:3f:8e:6b:7f:9e:69: ec:76:12:7d:bc:20:f5:18:ea:31:23:79:6a:a2:d8:98:09:05: 42:56:56:ec:6b:22:6e:4a:1d:cd:1b:30:42:37:b6:93:f2:aa: 54:e0:b1:4d:36:88:fe:f9:9e:10:2b:e0:1f:62:eb:20:54:16: 7a:81:4a:e9:8d:ba:dd:27:47:1d:57:91:44:bb:9b:b9:97:e5: 19:f0:7f:27:45:4d:3e:b1:a1:3f:6e:7f:3c:ae:ff:e0:8f:c2: be:23:b5:d3:9f:6c:bc:1a:09:a6:69:69:64:04:db:a8:f8:17: 5e:a4:1b:30:af:18:ec:01:da:1c:14:c6:31:02:5c:54:1d:33: 36:67:5f:7b:0c:a3:93:74:d0:60:73:23:57:1f:67:dc:73:e0: 62:85:1b:7a:a0:b1:7c:e1:fc:6b:8e:bb:af:4b:55:fa:cf:ca: ed:b7:ae:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HX3oRVsiIfBz9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRiYmNmNGMtZjAxMy00MWZmLTk0NmQtMWUwNmQzYzQw Njc5MB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk M2NkOTA4NjAtOGY5My00MmRmLWE5YTgtMDNhOWYxOTQzYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3dGg/Iy0f3ML0YmXgZRZcMo3uLzhM9soUE GBGTiTg4yKa5EHXJPlryAUezoB3tHiqUyTqt0TMp/+qK7MU2p5TJPLCcWVMyNfYv g3JDJykRd81iRriGUw5KnUXm5F6PTjoPF2+jzkxPnGrDfJmoeJSLiFTxC3GmNePu NvAROsUEj/FYQOAJDQGvdaywAaDuqmZM1ScnRvIoOczM1RSqGU5ZXIr+pRucz7l1 x+wzsgDhyxO+y5jFE/z5tkGIKGNTOowkUxW5UEl/8aZeg6R5S3L+fc2GCSJM4e+F eVIBy/ecGBKN8SCN7wsCxxsXdY8jZQNchE9Qz80rLkq+hhALmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+9CSbaz0SQCIsMWtdgXUMCl6WSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iNGJi Y2Y0Yy1mMDEzLTQxZmYtOTQ2ZC0xZTA2ZDNjNDA2NzkvODdmNjRmODMtZWYwYS0z YTZkLTkxNTgtNzYyZDA1NzBiOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYjRiYmNmNGMtZjAxMy00MWZmLTk0 NmQtMWUwNmQzYzQwNjc5L2I0YmJjZjRjLWYwMTMtNDFmZi05NDZkLTFlMDZkM2M0 MDY3OS5jcmwwHwYDVR0jBBgwFoAUqzGxdqf6NVdDPetKT92a9/tOdo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9iNGJiY2Y0Yy1mMDEzLTQxZmYtOTQ2ZC0xZTA2 ZDNjNDA2NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoccjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGSHtGqOAbVJN74N7szEhD2A410Q+OnHmMaTs+oI/jiXOCC5EbhUKb1 VdZHBlSaNBpv9V/dX88SNng0a/CteMsbqwkOCKptRu//mZkGPjx0CkxnZj+Oa3+e aex2En28IPUY6jEjeWqi2JgJBUJWVuxrIm5KHc0bMEI3tpPyqlTgsU02iP75nhAr 4B9i6yBUFnqBSumNut0nRx1XkUS7m7mX5RnwfydFTT6xoT9ufzyu/+CPwr4jtdOf bLwaCaZpaWQE26j4F16kGzCvGOwB2hwUxjECXFQdMzZnX3sMo5N00GBzI1cfZ9xz 4GKFG3qgsXzh/GuOu69LVfrPyu23rno= -----END CERTIFICATE-----Generated at Thu Oct 15 03:31:00 2026 by rpki-client