$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa File: 3228a7be-6150-3af1-9c53-ac3898b20397.roa (raw, json) Hash identifier: 5ek/CcVFx1SpeH2rs17S4jA50mI8+a9Bgx+Q7nw2O5M= Subject key identifier: B5:24:23:7C:97:49:67:49:32:E1:D9:0F:44:7A:C3:58:20:43:41:E7 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F4328584EABB6F62AEE472E3DA2CC9080 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 10995 IP address blocks: 161.150.86.0/24 maxlen: 24 161.150.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:f6:2a:ee:47:2e:3d:a2:cc:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=dedff07c-4b9e-4220-87db-96feeed0a7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:2e:a7:cc:86:78:46:65:63:2a:1f:fd:41: c2:90:42:e8:d4:87:8d:b5:15:6a:e3:10:0c:70:b3: 50:e7:49:58:d0:34:e3:0f:5e:ea:0f:1a:da:db:87: c2:24:74:5a:e4:27:43:88:84:55:23:2e:a3:05:a5: 06:7e:a4:7b:c4:9d:e4:58:47:34:39:56:8f:05:c4: a3:42:3f:04:05:0e:d7:37:b0:3f:1b:c9:6e:15:fc: 66:8d:64:35:5b:d9:5a:78:07:8a:b9:f9:d5:93:17: 14:ae:2e:40:57:9d:bb:61:4e:d8:a8:e5:4f:84:b3: c8:47:c0:dc:73:96:c8:8e:80:e0:c3:49:31:e6:a6: bf:9a:5a:ab:26:bf:73:25:00:dc:df:12:01:d0:b5: 8e:d9:11:29:d3:a1:e8:af:b0:d5:b4:f0:23:4e:19: 14:6d:25:8e:fe:14:38:6b:bb:8c:d3:ee:2b:b8:d6: 67:d4:65:12:e8:d5:c6:e3:c8:d5:83:84:a5:7c:0e: ec:98:cb:c9:ad:cb:5c:20:5a:35:2d:bb:d1:90:fd: a0:38:ec:7c:6e:89:8b:56:a9:c0:c7:14:88:26:2c: 69:1b:8d:88:62:45:10:11:3e:d4:6e:8a:ad:14:5a: 2f:6f:4a:e0:34:4c:34:44:18:d4:86:88:5c:8e:d7: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:23:7C:97:49:67:49:32:E1:D9:0F:44:7A:C3:58:20:43:41:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/3228a7be-6150-3af1-9c53-ac3898b20397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.86.0/24 161.150.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f2:61:0f:8d:e1:63:a4:4f:50:1e:7c:e2:05:6f:2b:7c:09: e2:ff:1b:8e:aa:e5:26:09:43:e3:32:f4:00:ed:51:4e:6e:f8: ca:aa:43:3d:e4:55:53:74:99:92:86:46:a8:b1:b9:3b:7d:7a: 2b:a3:52:74:21:b0:4a:34:0f:47:10:10:a3:3a:65:05:72:6a: 79:78:d7:56:b9:fb:86:66:5d:d0:fd:87:60:90:7e:cf:86:7e: 72:f7:b6:f0:fd:86:ce:1b:bf:bc:02:8a:bd:a5:58:fe:1b:4c: 17:11:cf:bb:40:73:b1:28:7b:56:c7:0f:2f:9b:30:13:e2:51: 09:91:83:e6:34:a4:7f:d4:e0:43:a2:6b:a1:a6:7d:9c:ac:c6: 63:55:61:43:a4:5c:9e:b4:4c:d9:c9:dd:f0:4e:97:68:5e:51: e3:71:1d:cb:35:d0:b5:fc:ef:a5:35:cb:5c:d8:16:09:6d:13: 31:f0:aa:4c:c0:5d:e8:8e:a9:43:6f:60:cd:ee:f7:b2:b7:0b: 7f:1d:36:38:3d:df:cf:1f:52:b8:7f:aa:5d:e0:70:45:92:90: 27:39:60:c2:6f:75:ca:37:b2:ee:dc:a3:77:f5:17:4e:6e:2f: 65:99:3a:c3:88:ca:82:d4:8b:ee:ad:50:c4:85:28:86:e4:00: 2f:f3:cd:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6rtvYq7kcuPaLMkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk ZGVkZmYwN2MtNGI5ZS00MjIwLTg3ZGItOTZmZWVlZDBhN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhsup8yGeEZlYyof/UHCkELo1IeNtRVq4xAM cLNQ50lY0DTjD17qDxra24fCJHRa5CdDiIRVIy6jBaUGfqR7xJ3kWEc0OVaPBcSj Qj8EBQ7XN7A/G8luFfxmjWQ1W9laeAeKufnVkxcUri5AV527YU7YqOVPhLPIR8Dc c5bIjoDgw0kx5qa/mlqrJr9zJQDc3xIB0LWO2REp06Hor7DVtPAjThkUbSWO/hQ4 a7uM0+4ruNZn1GUS6NXG48jVg4SlfA7smMvJrctcIFo1LbvRkP2gOOx8bomLVqnA xxSIJixpG42IYkUQET7UboqtFFovb0rgNEw0RBjUhohcjtdXXQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLUkI3yXSWdJMuHZD0R6w1ggQ0HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvMzIyOGE3YmUtNjE1MC0z YWYxLTljNTMtYWMzODk4YjIwMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoZZWAwQA oZZ6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEjyYQ+N4WOkT1AefOIFbyt8CeL/G46q5SYJQ+My9ADtUU5u +MqqQz3kVVN0mZKGRqixuTt9eiujUnQhsEo0D0cQEKM6ZQVyanl411a5+4ZmXdD9 h2CQfs+GfnL3tvD9hs4bv7wCir2lWP4bTBcRz7tAc7Eoe1bHDy+bMBPiUQmRg+Y0 pH/U4EOia6GmfZysxmNVYUOkXJ60TNnJ3fBOl2heUeNxHcs10LX876U1y1zYFglt EzHwqkzAXeiOqUNvYM3u97K3C38dNjg9388fUrh/ql3gcEWSkCc5YMJvdco3su7c o3f1F05uL2WZOsOIyoLUi+6tUMSFKIbkAC/zzdk= -----END CERTIFICATE-----Generated at Wed Aug 26 16:13:27 2026 by rpki-client