$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/911bb8c2-aa73-323f-929e-7b8f82161b53.roa File: 911bb8c2-aa73-323f-929e-7b8f82161b53.roa (raw, json) Hash identifier: ZqyUM3XFFEk3COcfBxj4ZUdW4BwB7YEp1Uqqz5Tn8mE= Subject key identifier: 0E:32:0A:B3:A5:D7:B1:0C:20:E5:2C:2A:90:10:D1:EB:AF:15:14:02 Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F0D6CE405040858BDA471CD40 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/911bb8c2-aa73-323f-929e-7b8f82161b53.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396502 IP address blocks: 161.129.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e4:05:04:08:58:bd:a4:71:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=aa678368-eb1d-4feb-8abd-329d16aadf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:46:47:55:ca:3e:ed:0a:43:b5:cb:5f:9e: 9d:45:d8:8b:ac:25:53:fd:00:87:52:b0:8b:39:a0: aa:1b:42:4b:80:c4:d6:3b:3b:93:1f:4e:a4:54:d0: 9b:68:91:67:03:df:27:b7:45:e6:20:d5:c0:c0:55: 2f:e9:28:26:ae:9a:1b:e0:28:2a:97:0d:91:d7:72: 30:58:8e:c6:ce:cb:12:da:6f:ea:87:42:fa:77:0a: 06:cf:be:09:ed:eb:95:36:6a:c2:7b:24:1f:55:38: 46:5d:e2:18:52:1d:d4:3d:dc:09:24:86:95:05:5f: 5c:68:a3:ee:c6:66:aa:0c:58:27:2a:a2:b6:31:82: 3c:62:44:40:aa:56:ae:66:6f:4a:b3:59:dc:45:98: 6b:7e:92:ec:16:81:78:f8:25:70:de:aa:f8:3a:bf: 27:7c:ca:fa:7a:79:3a:2b:bf:a5:6a:a7:a9:b6:11: d3:20:79:09:05:03:e1:01:81:84:b3:c9:2a:85:a5: a4:36:8a:c7:90:f5:b9:b7:62:ce:d1:ee:54:d4:ec: 75:9e:b9:df:7b:88:78:ea:49:97:77:ba:86:80:81: bb:12:0a:0a:d9:ba:3b:df:f4:a9:30:e1:6f:b1:35: b3:b2:bf:59:5a:e6:7d:c1:b6:2c:76:a9:91:4a:b9: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:0A:B3:A5:D7:B1:0C:20:E5:2C:2A:90:10:D1:EB:AF:15:14:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/911bb8c2-aa73-323f-929e-7b8f82161b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 161.129.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ec:8f:00:98:2a:8b:fd:bd:76:6d:c5:58:27:a2:77:49:d1: b4:d3:28:70:96:ce:60:92:d1:04:c8:53:83:f4:2d:ff:0b:7a: 1f:28:bf:9c:05:92:f8:8c:a0:c8:39:8d:0c:51:c5:cf:0b:54: db:60:a6:03:6d:d4:d9:f9:67:a2:fc:01:4f:b4:16:2d:ec:3c: 7b:f9:3b:3d:86:ce:fd:09:83:c2:e9:34:8a:97:bd:70:01:7f: 86:13:3b:bb:fe:1d:14:8e:49:9b:22:94:32:4c:98:79:45:5f: c7:76:b6:56:0a:db:73:df:14:d9:13:01:cb:82:1c:be:ca:dc: a6:b4:5d:88:5c:52:56:82:ae:3b:01:9d:8b:32:41:1e:ee:3b: cb:e6:ee:80:32:7f:45:b2:fc:5e:5a:d0:22:98:5f:3d:3e:2e: b4:e4:e0:44:ef:64:90:ef:32:db:08:dc:f5:0a:09:ef:7b:e8: a7:5f:15:4a:2d:a4:61:69:f7:5f:1f:af:ea:15:10:5f:ad:71: 37:de:e0:e0:59:fd:fa:bd:8b:59:3f:0a:2b:b1:1d:62:b7:27: 56:d5:df:17:e2:82:69:27:27:16:16:b2:ec:b1:b4:31:37:3a: 49:3b:b1:41:1d:2d:d2:66:66:47:df:68:80:bc:60:9c:83:0c: e4:e7:cc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOQFBAhYvaRxzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YWE2NzgzNjgtZWIxZC00ZmViLThhYmQtMzI5ZDE2YWFkZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ZGR1XKPu0KQ7XLX56dRdiLrCVT/QCHUrCL OaCqG0JLgMTWOzuTH06kVNCbaJFnA98nt0XmINXAwFUv6Sgmrpob4Cgqlw2R13Iw WI7GzssS2m/qh0L6dwoGz74J7euVNmrCeyQfVThGXeIYUh3UPdwJJIaVBV9caKPu xmaqDFgnKqK2MYI8YkRAqlauZm9Ks1ncRZhrfpLsFoF4+CVw3qr4Or8nfMr6enk6 K7+laqepthHTIHkJBQPhAYGEs8kqhaWkNorHkPW5t2LO0e5U1Ox1nrnfe4h46kmX d7qGgIG7EgoK2bo73/SpMOFvsTWzsr9ZWuZ9wbYsdqmRSrnWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4yCrOl17EMIOUsKpAQ0euvFRQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvOTExYmI4YzItYWE3My0z MjNmLTkyOWUtN2I4ZjgyMTYxYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbsjwCYKov9vXZtxVgnondJ0bTTKHCWzmCS0QTIU4P0Lf8Leh8ov5wF kviMoMg5jQxRxc8LVNtgpgNt1Nn5Z6L8AU+0Fi3sPHv5Oz2Gzv0Jg8LpNIqXvXAB f4YTO7v+HRSOSZsilDJMmHlFX8d2tlYK23PfFNkTAcuCHL7K3Ka0XYhcUlaCrjsB nYsyQR7uO8vm7oAyf0Wy/F5a0CKYXz0+LrTk4ETvZJDvMtsI3PUKCe976KdfFUot pGFp918fr+oVEF+tcTfe4OBZ/fq9i1k/CiuxHWK3J1bV3xfigmknJxYWsuyxtDE3 Okk7sUEdLdJmZkffaIC8YJyDDOTnzG4= -----END CERTIFICATE-----Generated at Sun Oct 11 16:55:10 2026 by rpki-client