$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa File: e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa (raw, json) Hash identifier: MMCyRLOK+rToquAPHzj1R/rXX3TYgbbehEpGimVl5CA= Subject key identifier: 3C:7E:09:E8:7F:A8:1B:60:D6:78:AF:E6:10:40:E7:40:09:2A:66:0F Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584EF44CB45477822DB00567F480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 161.69.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b4:54:77:82:2d:b0:05:67:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=d0f19f4c-f55f-4626-829f-5f86c70cd0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:33:d5:11:b8:6c:b2:dd:0e:dd:c3:ae:40: 7b:cf:ab:2e:9c:4e:0b:66:db:b3:43:c9:a7:e8:31: 78:6d:ec:d4:cd:0e:9f:2a:d6:f0:0a:63:04:bd:07: e9:29:87:26:99:87:b9:16:b5:48:30:b0:8e:f6:a2: 86:d8:1b:32:6f:30:89:71:ae:4f:ec:b7:58:1f:fe: 89:03:3b:0f:22:a4:60:69:60:5b:98:f3:d9:70:8c: ad:c9:c0:e5:6b:e3:f9:67:d4:da:86:50:db:b9:1e: e0:ed:b0:fa:5d:b8:3a:29:3f:8b:f1:37:a7:ed:5f: 44:61:d0:be:8c:d6:bb:ac:af:c8:e3:c6:70:a1:51: d5:2c:08:f3:7b:9d:b9:b7:37:1f:c4:54:f7:06:2c: 7e:b4:c7:df:92:ee:24:52:8d:8a:04:92:37:15:71: ed:b1:c8:fb:0c:76:61:aa:67:d3:af:b4:d0:6d:30: 02:04:96:74:60:46:0f:4a:39:db:99:06:29:f7:f3: 7f:08:6b:18:3c:50:21:80:6c:48:b8:4e:3a:c9:ee: 8c:b0:85:b5:b4:e0:5a:5e:b7:09:c3:51:cc:92:81: 20:a6:da:99:92:4e:c4:c0:56:8a:6d:38:a9:14:a3: b2:26:28:01:ef:bd:66:75:cd:c1:8a:91:0e:93:69: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:09:E8:7F:A8:1B:60:D6:78:AF:E6:10:40:E7:40:09:2A:66:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0f:fd:c2:19:25:dd:4f:97:b2:2d:0c:93:fc:07:d6:cf:e4: f9:d0:60:73:7e:01:14:27:e7:86:81:b0:13:d8:a1:aa:77:62: 49:f3:02:06:f1:07:c9:ae:5b:fc:f6:cd:14:48:02:c5:2c:6b: c6:41:93:65:40:9a:6b:bb:71:da:85:7d:12:bf:d6:41:2d:9e: c8:61:86:8a:6d:70:42:e6:81:18:57:c5:5f:b4:6b:60:c2:b7: dd:42:69:b3:73:65:6b:e3:86:fc:e0:3a:69:f7:c5:d1:c0:51: 12:bc:1f:07:09:2c:5c:7a:5a:1b:fc:f7:ee:78:f0:82:fd:ca: 6a:7e:9c:6e:88:7d:e6:86:e8:ce:5b:74:c3:62:07:44:d3:cc: 48:24:db:d4:a8:ba:ef:5c:2a:20:65:a4:fa:9d:1c:c7:bc:c8: 34:b1:7b:8a:4d:45:6b:3a:21:c0:37:c3:5d:59:a9:67:82:47: 88:86:5b:57:13:0c:18:4d:1f:82:1d:60:8c:04:62:c4:71:e4: e6:d7:73:b5:26:ad:82:4d:b1:18:34:5e:19:10:89:39:e2:a9: 71:fa:b9:17:6c:8c:b7:18:2c:88:91:66:a4:32:05:2f:c6:61: 23:67:3d:cd:4f:64:ac:9d:8d:31:b9:67:7a:94:9d:5b:4e:a1: 34:d9:eb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLRUd4ItsAVn9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDBmMTlmNGMtZjU1Zi00NjI2LTgyOWYtNWY4NmM3MGNkMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw4z1RG4bLLdDt3DrkB7z6sunE4LZtuzQ8mn 6DF4bezUzQ6fKtbwCmMEvQfpKYcmmYe5FrVIMLCO9qKG2BsybzCJca5P7LdYH/6J AzsPIqRgaWBbmPPZcIytycDla+P5Z9TahlDbuR7g7bD6Xbg6KT+L8Ten7V9EYdC+ jNa7rK/I48ZwoVHVLAjze525tzcfxFT3Bix+tMffku4kUo2KBJI3FXHtscj7DHZh qmfTr7TQbTACBJZ0YEYPSjnbmQYp9/N/CGsYPFAhgGxIuE46ye6MsIW1tOBaXrcJ w1HMkoEgptqZkk7EwFaKbTipFKOyJigB771mdc3BipEOk2nzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx+Ceh/qBtg1niv5hBA50AJKmYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZThjOGQ5OGQtMDUzYy0z ZmQ1LTg1MzMtNGE5MWI1MDdmMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoUXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQP/cIZJd1Pl7ItDJP8B9bP5PnQYHN+ARQn54aBsBPYoap3YknzAgbx B8muW/z2zRRIAsUsa8ZBk2VAmmu7cdqFfRK/1kEtnshhhoptcELmgRhXxV+0a2DC t91CabNzZWvjhvzgOmn3xdHAURK8HwcJLFx6Whv89+548IL9ymp+nG6IfeaG6M5b dMNiB0TTzEgk29Souu9cKiBlpPqdHMe8yDSxe4pNRWs6IcA3w11ZqWeCR4iGW1cT DBhNH4IdYIwEYsRx5ObXc7UmrYJNsRg0XhkQiTniqXH6uRdsjLcYLIiRZqQyBS/G YSNnPc1PZKydjTG5Z3qUnVtOoTTZ67s= -----END CERTIFICATE-----Generated at Sat Sep 19 14:56:48 2026 by rpki-client