$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa File: f41a9853-e483-3c30-a3de-9689461adaf4.roa (raw, json) Hash identifier: TO2HIIKXIG8+LhrPNqjg4XlRDsH1PgVpUgg24cI7rk8= Subject key identifier: 20:7B:F2:1E:8A:86:06:1B:05:60:EF:C5:73:BC:3B:4C:A4:F7:F6:CF Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584F8DD88C9CEF707B2D6AE5BA00 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 16823 IP address blocks: 161.115.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8c:9c:ef:70:7b:2d:6a:e5:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=dacdc86a-1b42-4fb6-96f3-d6d16a42b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:bd:2c:fd:87:86:16:1c:e5:4e:f3:af:38: 26:c8:b1:ab:85:e5:67:91:6e:95:ce:54:b6:84:4c: 39:ab:6b:10:8b:23:18:1f:41:d9:8b:37:f1:7d:8d: 51:c0:78:42:51:e6:39:1c:ba:7d:c5:2e:62:f9:a5: 74:54:6b:fd:93:a9:7f:e8:59:69:bc:cf:18:74:9a: 5a:5b:35:7a:74:c2:fd:52:c7:f8:4c:92:af:9c:74: e3:bf:0d:58:af:f6:36:e1:09:8e:81:07:ad:c6:5f: 8e:b1:c4:53:2f:24:82:40:cb:c8:18:f8:64:18:49: 6c:8f:5f:92:4c:a5:4a:f7:0b:7b:0f:0b:80:13:f2: 25:3e:65:6f:8e:c1:01:45:62:a2:70:5d:86:f6:6d: d5:93:06:67:b7:1a:d9:1f:d3:cf:da:ce:d9:d7:1e: f9:54:c7:c2:a0:34:85:2c:85:2b:56:9f:6d:7d:86: 5d:c5:80:e3:59:9b:bc:1e:54:c1:9b:8e:8a:96:6c: 46:62:a0:72:43:bc:77:94:01:91:97:9a:14:75:6e: f6:b8:34:69:6e:e0:65:a8:e6:72:1a:de:5a:4f:bc: 18:21:15:d4:5e:c5:5d:07:99:68:71:8b:29:f3:e2: 35:88:da:4c:5b:ef:00:d1:e8:3e:82:39:6b:f8:37: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7B:F2:1E:8A:86:06:1B:05:60:EF:C5:73:BC:3B:4C:A4:F7:F6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 161.115.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b2:0e:12:af:35:39:5c:35:66:2a:07:18:0d:c6:7e:28:c5: 71:02:16:10:56:c2:b5:02:3a:af:bf:c1:46:ac:f6:f1:a2:52: a1:81:56:c0:3a:14:f4:1d:79:82:3b:7b:ae:6d:4b:3d:a4:38: da:73:ea:fb:ba:ef:4e:bd:d7:90:65:a0:f4:a2:bd:4f:f5:bd: c7:99:89:c3:06:10:79:56:71:4d:62:1a:f2:ce:7b:bf:2a:f9: e5:f6:ca:6c:c6:32:af:c2:56:79:f1:b3:bc:52:3a:07:b2:b1: 90:11:43:73:00:7e:58:a6:60:0e:d0:d0:89:87:60:bd:ba:18: 39:99:1b:fd:15:b2:30:61:7b:eb:36:06:3a:b7:1b:c8:a5:a9: 97:77:69:5d:03:93:70:28:c8:3a:95:79:e5:06:fe:97:86:b3: 59:b4:4f:42:d0:2d:56:2d:30:29:85:8d:2e:66:a9:bf:80:04: 5d:0e:f8:49:10:8b:a2:9c:43:43:2c:e0:a9:89:56:c6:c1:d4: e2:7e:ce:e6:89:cd:65:a4:8f:b6:83:f0:03:67:bc:c6:26:c6: fe:c6:37:af:30:eb:90:17:ac:0d:07:b0:cd:0c:33:82:3e:d3: a2:c4:b0:ad:a6:09:9c:2a:21:2c:fe:76:03:44:6e:14:8d:c0: 7b:0d:bb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2Iyc73B7LWrlugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGFjZGM4NmEtMWI0Mi00ZmI2LTk2ZjMtZDZkMTZhNDJiNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidW9LP2HhhYc5U7zrzgmyLGrheVnkW6VzlS2 hEw5q2sQiyMYH0HZizfxfY1RwHhCUeY5HLp9xS5i+aV0VGv9k6l/6FlpvM8YdJpa WzV6dML9Usf4TJKvnHTjvw1Yr/Y24QmOgQetxl+OscRTLySCQMvIGPhkGElsj1+S TKVK9wt7DwuAE/IlPmVvjsEBRWKicF2G9m3VkwZntxrZH9PP2s7Z1x75VMfCoDSF LIUrVp9tfYZdxYDjWZu8HlTBm46KlmxGYqByQ7x3lAGRl5oUdW72uDRpbuBlqOZy Gt5aT7wYIRXUXsVdB5locYsp8+I1iNpMW+8A0eg+gjlr+Dc1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB78h6KhgYbBWDvxXO8O0yk9/bPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvZjQxYTk4NTMtZTQ4My0z YzMwLWEzZGUtOTY4OTQ2MWFkYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKyDhKvNTlcNWYqBxgNxn4oxXECFhBWwrUCOq+/wUas9vGiUqGBVsA6 FPQdeYI7e65tSz2kONpz6vu6706915BloPSivU/1vceZicMGEHlWcU1iGvLOe78q +eX2ymzGMq/CVnnxs7xSOgeysZARQ3MAflimYA7Q0ImHYL26GDmZG/0VsjBhe+s2 Bjq3G8ilqZd3aV0Dk3AoyDqVeeUG/peGs1m0T0LQLVYtMCmFjS5mqb+ABF0O+EkQ i6KcQ0Ms4KmJVsbB1OJ+zuaJzWWkj7aD8ANnvMYmxv7GN68w65AXrA0HsM0MM4I+ 06LEsK2mCZwqISz+dgNEbhSNwHsNu1w= -----END CERTIFICATE-----Generated at Tue Oct 27 17:05:44 2026 by rpki-client