$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: QB+4bKzrCRzCMUgRtLJOGfrBH8YkNqJVXFCo4pbFaZo= Subject key identifier: FA:DB:9F:30:3A:83:53:48:05:D3:CD:54:C6:81:9D:0C:CA:3B:F0:BB Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584ED861DD54C6A6494D1E18CE00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:dd:54:c6:a6:49:4d:1e:18:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=0d5790d1-5b50-42af-85a4-eef30ec31b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:78:dd:8d:97:de:75:33:9e:ca:67:42:e5:a7: 0b:57:57:4a:4c:a9:88:30:b3:9d:1d:c2:24:49:58: 9e:65:23:c5:bc:37:c9:e6:67:d4:99:53:06:b6:21: da:bd:af:2e:54:b0:c0:b6:3a:bc:e8:98:b1:0a:42: 13:59:ec:fb:d9:6d:32:ae:62:07:77:a2:91:72:43: 5e:51:8f:97:9b:50:d2:c0:16:d2:49:6a:71:10:cc: e5:8f:68:cc:bb:26:63:07:31:f4:02:d1:9a:56:95: 66:8b:27:fe:f1:85:ef:0e:bd:19:c9:30:5f:54:37: 9f:67:e9:76:8d:58:9c:23:65:ea:a6:49:d1:72:d5: f1:2c:1a:71:52:fc:98:08:1c:e5:7e:01:26:7b:4e: 58:aa:c2:94:e6:27:f6:20:5d:68:ce:30:f9:5a:a3: 23:88:14:f6:7b:d7:21:bb:ba:da:fa:1c:8f:04:8f: ee:5b:6a:47:4d:6f:83:57:ca:a5:a7:4c:76:1a:bf: b9:ef:80:8c:99:6a:f7:b1:59:0a:4d:11:33:d5:27: be:b7:53:e1:54:7c:16:c7:d7:fa:5f:92:c0:73:05: 03:4d:94:f2:a2:33:79:f6:9c:5c:6c:47:1a:18:99: 4f:7e:3e:e1:17:a8:a5:46:3a:ee:fc:2f:df:ee:33: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:9F:30:3A:83:53:48:05:D3:CD:54:C6:81:9D:0C:CA:3B:F0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:12:ea:0e:45:0e:71:05:19:37:35:b4:f0:8f:8a:f8:21:ae: a4:73:c6:b7:29:cb:e9:98:11:2d:00:49:da:31:ee:37:33:27: 47:69:7d:99:b8:d0:20:f2:96:46:a4:4a:9e:db:11:b3:66:eb: 28:15:2a:44:66:44:7c:9c:fc:f1:40:fe:56:e9:2f:5d:d7:fb: 3e:87:df:51:20:3a:41:a7:98:02:bf:dc:fb:b1:65:64:9d:06: 46:25:79:5b:00:05:ad:0e:f5:05:25:ab:10:5c:4d:f8:50:47: 7f:c0:ad:e9:8d:46:5f:09:26:42:16:de:45:d0:dd:21:af:b7: 81:b7:42:ce:b0:34:9a:0b:31:ed:dd:d6:3e:a7:8b:34:bd:8b: 15:f4:fe:d1:d1:30:8c:c1:64:4a:2b:f2:cc:85:24:4e:9a:3d: 50:20:e3:78:d1:cf:5c:f2:b8:d5:94:0d:66:f0:8f:0b:b3:6a: e9:3c:ad:d7:c4:26:af:7e:f4:d7:a5:62:a6:84:7f:c8:c9:3b: d8:3f:66:1a:5d:55:52:17:cf:d6:44:ba:97:3c:f1:ee:d8:97: 66:76:c6:43:4d:b4:a1:68:50:e2:9c:dd:62:d0:34:f3:29:44: 4f:56:e8:61:7a:48:bc:d5:ed:06:e3:d9:75:e5:2b:ba:18:f8: a7:e6:0d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd1UxqZJTR4YzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MGQ1NzkwZDEtNWI1MC00MmFmLTg1YTQtZWVmMzBlYzMxYjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXjdjZfedTOeymdC5acLV1dKTKmIMLOdHcIk SVieZSPFvDfJ5mfUmVMGtiHava8uVLDAtjq86JixCkITWez72W0yrmIHd6KRckNe UY+Xm1DSwBbSSWpxEMzlj2jMuyZjBzH0AtGaVpVmiyf+8YXvDr0ZyTBfVDefZ+l2 jVicI2XqpknRctXxLBpxUvyYCBzlfgEme05YqsKU5if2IF1ozjD5WqMjiBT2e9ch u7ra+hyPBI/uW2pHTW+DV8qlp0x2Gr+574CMmWr3sVkKTREz1Se+t1PhVHwWx9f6 X5LAcwUDTZTyojN59pxcbEcaGJlPfj7hF6ilRjru/C/f7jPKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrbnzA6g1NIBdPNVMaBnQzKO/C7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4S6g5FDnEFGTc1tPCPivghrqRzxrcpy+mYES0ASdox7jczJ0dpfZm4 0CDylkakSp7bEbNm6ygVKkRmRHyc/PFA/lbpL13X+z6H31EgOkGnmAK/3PuxZWSd BkYleVsABa0O9QUlqxBcTfhQR3/AremNRl8JJkIW3kXQ3SGvt4G3Qs6wNJoLMe3d 1j6nizS9ixX0/tHRMIzBZEor8syFJE6aPVAg43jRz1zyuNWUDWbwjwuzauk8rdfE Jq9+9NelYqaEf8jJO9g/ZhpdVVIXz9ZEupc88e7Yl2Z2xkNNtKFoUOKc3WLQNPMp RE9W6GF6SLzV7Qbj2XXlK7oY+KfmDWU= -----END CERTIFICATE-----Generated at Sat Aug 22 18:41:10 2026 by rpki-client