$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa File: efe38f12-5346-33f0-b996-32d3800a34fb.roa (raw, json) Hash identifier: Er21xmIsbmdNIGumMPmzXKc8gS5/mKBgQIFrsLmyq6U= Subject key identifier: D8:6A:76:62:A0:EC:B9:48:98:1D:F5:6C:53:2E:8C:31:70:8E:75:64 Certificate issuer: /CN=de95cd47-ae4c-4b35-822a-ac72bf6fdce2 Certificate serial: 010D0C9F4328584F7352CF01B556A65AB6A11240 Authority key identifier: 49:BC:DC:EA:14:AA:FD:9A:46:CD:B9:02:BD:7A:B2:C3:D7:E6:CE:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 210 IP address blocks: 161.28.0.0/16 maxlen: 16 192.80.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:cf:01:b5:56:a6:5a:b6:a1:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de95cd47-ae4c-4b35-822a-ac72bf6fdce2 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=a18f7a07-9d3f-495f-988f-596eeac3eb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:16:55:9e:34:fb:3b:40:50:96:62:a3:e4: 7e:fc:bb:5c:f7:97:e1:b4:8a:56:a1:fa:d7:2c:8f: d1:fd:b2:4a:ab:03:55:89:4e:4a:5d:b1:21:aa:a8: 2a:1c:d0:8b:b7:95:8c:af:c7:bd:eb:ed:e0:44:0d: 32:ca:94:ed:f6:05:1e:6a:cf:c8:f6:9f:c9:aa:86: 4b:87:96:d2:c2:1d:13:a2:b9:ca:1f:55:ea:36:ac: 9f:96:7a:75:db:97:66:1f:e3:64:32:ee:13:5e:1f: cb:ce:2a:10:ec:47:38:df:94:a9:3b:a9:b6:d5:83: 84:4a:a3:97:77:76:3f:82:a0:6d:93:8f:f5:15:fb: e5:94:3a:96:c7:5c:ac:ce:2f:b3:76:b6:82:99:51: 88:98:e3:9b:15:63:92:33:66:2a:30:32:ce:cc:47: 68:59:1c:c9:95:6f:9e:a2:77:4b:93:eb:94:6f:3b: 23:ac:a0:c2:4a:d0:86:b9:cb:c7:44:43:cf:58:cd: 52:64:c9:8b:a3:dd:89:0c:9f:c3:01:bb:96:11:6f: 70:66:6a:16:49:93:82:c4:8a:12:a1:8a:2f:13:80: 41:3e:33:dd:b9:5c:a7:5d:42:55:8e:da:cc:04:60: 7b:9a:ae:09:75:d7:7a:fe:c1:d5:d7:d6:66:d8:43: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:76:62:A0:EC:B9:48:98:1D:F5:6C:53:2E:8C:31:70:8E:75:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.crl X509v3 Authority Key Identifier: keyid:49:BC:DC:EA:14:AA:FD:9A:46:CD:B9:02:BD:7A:B2:C3:D7:E6:CE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer sbgp-ipAddrBlock: critical IPv4: 161.28.0.0/16 192.80.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:ca:51:ef:af:80:b6:9a:70:10:b8:77:e7:2d:6c:5a:73: 56:62:ce:f1:87:f0:06:59:4c:8d:03:18:cf:26:aa:c8:1e:1d: 25:45:95:32:1a:94:b6:67:67:c2:25:7d:a5:1f:a9:5f:08:e8: 3a:66:23:bb:da:3b:e9:c2:32:90:59:e5:c3:68:1c:25:51:2b: 3d:9f:ff:86:56:20:e6:d4:10:cb:46:a1:fa:01:4a:5d:e8:7b: 61:3f:4f:f8:99:a0:f4:3a:dd:14:44:83:2a:07:6d:29:7c:2f: f1:78:b2:a9:f0:fb:9a:40:81:89:bb:aa:c3:ce:aa:03:68:ef: 1c:55:37:2a:ea:9c:48:6f:af:e7:f4:f0:5d:be:98:cc:82:8a: 47:15:91:39:94:ff:37:e2:3e:6a:85:43:50:3b:9b:d4:b6:b1: eb:cc:95:d8:b7:ee:f3:06:36:42:56:d2:e6:b2:cf:bb:c3:9d: 5f:3e:c6:ee:a2:d9:9a:44:0d:80:d2:0f:6f:ce:36:0e:b6:fc: 47:89:1f:52:28:ad:c0:ec:5d:37:96:17:e5:92:e9:c1:38:33: 3e:4d:a9:f6:f3:1c:66:69:fe:fc:d5:f6:8c:f1:7e:3f:b8:30: fc:b4:ca:c8:05:35:b8:1b:46:e9:cb:9d:0a:5c:07:55:5c:0d: da:e0:71:46 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE9zUs8BtVamWrahEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU5NWNkNDctYWU0Yy00YjM1LTgyMmEtYWM3MmJmNmZk Y2UyMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YTE4ZjdhMDctOWQzZi00OTVmLTk4OGYtNTk2ZWVhYzNlYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUgWVZ40+ztAUJZio+R+/Ltc95fhtIpWofrX LI/R/bJKqwNViU5KXbEhqqgqHNCLt5WMr8e96+3gRA0yypTt9gUeas/I9p/JqoZL h5bSwh0TornKH1XqNqyflnp125dmH+NkMu4TXh/LzioQ7Ec435SpO6m21YOESqOX d3Y/gqBtk4/1FfvllDqWx1yszi+zdraCmVGImOObFWOSM2YqMDLOzEdoWRzJlW+e ondLk+uUbzsjrKDCStCGucvHREPPWM1SZMmLo92JDJ/DAbuWEW9wZmoWSZOCxIoS oYovE4BBPjPduVynXUJVjtrMBGB7mq4Jddd6/sHV19Zm2ENGvQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNhqdmKg7LlImB31bFMujDFwjnVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZTk1 Y2Q0Ny1hZTRjLTRiMzUtODIyYS1hYzcyYmY2ZmRjZTIvZWZlMzhmMTItNTM0Ni0z M2YwLWI5OTYtMzJkMzgwMGEzNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGU5NWNkNDctYWU0Yy00YjM1LTgy MmEtYWM3MmJmNmZkY2UyL2RlOTVjZDQ3LWFlNGMtNGIzNS04MjJhLWFjNzJiZjZm ZGNlMi5jcmwwHwYDVR0jBBgwFoAUSbzc6hSq/ZpGzbkCvXqyw9fmzqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZTk1Y2Q0Ny1hZTRjLTRiMzUtODIyYS1hYzcy YmY2ZmRjZTIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAoRwDBADA UBswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQyPKUe+vgLaacBC4d+ctbFpzVmLO8YfwBllMjQMYzyaqyB4d JUWVMhqUtmdnwiV9pR+pXwjoOmYju9o76cIykFnlw2gcJVErPZ//hlYg5tQQy0ah +gFKXeh7YT9P+Jmg9DrdFESDKgdtKXwv8XiyqfD7mkCBibuqw86qA2jvHFU3Kuqc SG+v5/TwXb6YzIKKRxWROZT/N+I+aoVDUDub1Lax68yV2Lfu8wY2QlbS5rLPu8Od Xz7G7qLZmkQNgNIPb842Drb8R4kfUiitwOxdN5YX5ZLpwTgzPk2p9vMcZmn+/NX2 jPF+P7gw/LTKyAU1uBtG6cudClwHVVwN2uBxRg== -----END CERTIFICATE-----Generated at Sun Oct 11 17:12:28 2026 by rpki-client