$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ef9d8509-963b-37bf-8b2e-7ccda43e123b.roa File: ef9d8509-963b-37bf-8b2e-7ccda43e123b.roa (raw, json) Hash identifier: pOKjUcz7fjYO+ah2CyNeHqNcmSu4popRqHPTtdsD6zg= Subject key identifier: 87:7E:3E:F0:4B:17:97:D7:06:AA:FF:85:FC:2C:20:63:15:A5:D2:04 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584F51D2C5DA2B3D0F59575F5880 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ef9d8509-963b-37bf-8b2e-7ccda43e123b.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 62044 IP address blocks: 161.151.232.0/24 maxlen: 24 161.151.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c5:da:2b:3d:0f:59:57:5f:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=8fe60ec1-baf8-42fe-83dd-c936652baef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:7d:68:d8:c3:8f:3a:fa:af:60:b1:e2:9e: 8a:02:30:07:4c:f8:3a:d6:7e:2b:a0:6b:5c:3a:2c: 73:a5:57:a3:fb:1a:c1:20:77:1d:52:41:3b:f9:e8: 52:07:f2:f4:a4:7e:78:32:7b:31:ed:e0:28:a9:40: 7f:1a:9b:50:6d:20:0a:58:be:c7:46:f7:b0:9d:da: ea:e6:8a:8e:ef:a7:bf:1d:cf:85:f8:f6:0c:b4:cc: e2:15:aa:57:84:54:54:a3:48:5c:45:e7:22:63:93: 0d:ec:f9:f9:ae:a5:4b:ef:56:13:30:4b:1e:96:a8: 14:ff:ca:68:fa:4f:e4:f2:b4:26:05:64:b3:51:5c: 3f:06:0f:1d:48:d5:60:82:0a:38:d8:1c:49:99:3a: 1c:c1:e2:9d:4c:38:77:4c:29:55:1f:ee:68:0a:d6: 52:3b:59:f0:4b:2f:f4:1f:dd:1d:2f:28:45:ea:24: 3b:00:49:e6:f1:69:41:04:a1:59:44:8a:0a:02:45: 71:9e:2f:82:9d:04:50:1b:ca:62:6a:c1:57:e7:09: 20:d3:22:56:0b:41:ed:ae:65:c1:c0:c3:00:6c:98: aa:4e:4f:16:8c:01:9a:f6:0b:75:a9:0c:68:bf:bb: 6d:7f:dc:68:1e:58:20:1c:98:5a:b1:d1:54:f1:cf: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:3E:F0:4B:17:97:D7:06:AA:FF:85:FC:2C:20:63:15:A5:D2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ef9d8509-963b-37bf-8b2e-7ccda43e123b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8b:50:67:6a:d8:44:00:1d:d3:c1:36:34:57:5d:32:ef:c6: 88:12:f3:d2:11:e6:bd:b4:b0:2a:f5:01:bd:ed:02:19:14:48: 15:e2:74:e9:f6:dd:19:82:9a:05:63:c0:30:1a:05:4a:38:05: 94:7f:bb:03:74:63:9a:f2:90:1f:03:99:48:9f:2d:c0:44:fc: 89:6d:5a:94:37:9e:cc:8f:ea:ee:a1:2c:07:50:05:81:c4:0a: 81:2a:4a:46:79:e8:bb:b6:ec:ca:db:6f:48:eb:d0:2a:13:16: a5:5e:66:0e:7c:d2:50:21:3e:52:f7:c1:53:03:3f:f5:a0:dc: 60:1f:88:62:44:f9:c5:d6:42:ff:c1:03:15:e3:3c:03:7e:44: 0d:72:05:ea:b1:db:05:4c:ae:38:c1:38:a1:f4:3b:48:be:6f: 24:ab:cc:fd:43:6d:d1:42:89:c0:fd:a7:d4:20:02:b0:73:65: 51:bd:04:3a:c9:9c:bc:48:83:99:c7:58:c1:3d:7d:69:fc:db: 2e:5e:aa:c1:4f:dd:d5:1c:3a:87:cc:05:8c:24:5b:f3:2f:55: 62:4b:8c:c2:bd:66:59:73:85:ef:06:70:3d:96:6a:59:3e:c3: f0:32:63:ce:9e:8e:e2:6f:3d:01:49:e8:c6:b8:bf:51:63:47: 0b:2f:2d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0sXaKz0PWVdfWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OGZlNjBlYzEtYmFmOC00MmZlLTgzZGQtYzkzNjY1MmJhZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwd9aNjDjzr6r2Cx4p6KAjAHTPg61n4roGtc OixzpVej+xrBIHcdUkE7+ehSB/L0pH54Mnsx7eAoqUB/GptQbSAKWL7HRvewndrq 5oqO76e/Hc+F+PYMtMziFapXhFRUo0hcReciY5MN7Pn5rqVL71YTMEselqgU/8po +k/k8rQmBWSzUVw/Bg8dSNVgggo42BxJmTocweKdTDh3TClVH+5oCtZSO1nwSy/0 H90dLyhF6iQ7AEnm8WlBBKFZRIoKAkVxni+CnQRQG8piasFX5wkg0yJWC0HtrmXB wMMAbJiqTk8WjAGa9gt1qQxov7ttf9xoHlggHJhasdFU8c8ebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId+PvBLF5fXBqr/hfwsIGMVpdIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvZWY5ZDg1MDktOTYzYi0z N2JmLThiMmUtN2NjZGE0M2UxMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoZfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqLUGdq2EQAHdPBNjRXXTLvxogS89IR5r20sCr1Ab3tAhkUSBXidOn2 3RmCmgVjwDAaBUo4BZR/uwN0Y5rykB8DmUifLcBE/IltWpQ3nsyP6u6hLAdQBYHE CoEqSkZ56Lu27Mrbb0jr0CoTFqVeZg580lAhPlL3wVMDP/Wg3GAfiGJE+cXWQv/B AxXjPAN+RA1yBeqx2wVMrjjBOKH0O0i+bySrzP1DbdFCicD9p9QgArBzZVG9BDrJ nLxIg5nHWME9fWn82y5eqsFP3dUcOofMBYwkW/MvVWJLjMK9Zllzhe8GcD2Walk+ w/AyY86ejuJvPQFJ6Ma4v1FjRwsvLYQ= -----END CERTIFICATE-----Generated at Mon Oct 26 13:24:18 2026 by rpki-client