$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/468a99bf-e0c4-3475-a1f3-cfc996a78e45.roa File: 468a99bf-e0c4-3475-a1f3-cfc996a78e45.roa (raw, json) Hash identifier: JpW68HC/8D3Z/+C/0rVZc91DxdtZoJ4/xccV5lze310= Subject key identifier: 1D:96:F5:22:E8:01:36:9D:A5:32:83:DA:F1:46:CE:87:E3:8B:9F:30 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584EFB475E3CCEDF726724BB2580 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/468a99bf-e0c4-3475-a1f3-cfc996a78e45.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 17929 IP address blocks: 161.121.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:5e:3c:ce:df:72:67:24:bb:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=0a39ea48-3d62-4b2f-8a25-4b5b7bffab1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:0a:ca:dd:9a:e5:f4:c6:59:78:86:a1:53: 19:3b:95:4e:d1:36:5a:a3:79:09:d0:cc:5c:9b:68: 12:a7:a7:c5:6e:9a:54:bc:06:e5:3e:8e:ef:2f:9a: 38:84:d5:56:e9:6b:c1:ef:40:4f:a6:4d:f5:15:1b: ee:1b:f6:3c:a8:5f:60:5b:6b:f2:b8:9e:79:9b:26: 3d:fb:51:59:5e:2a:b1:13:ce:5c:a2:0b:b7:3a:10: d3:04:53:c4:06:2e:19:79:b2:7e:69:f4:8b:a2:35: 32:f5:bc:16:c6:da:d6:0a:dc:5d:ca:6e:6d:6f:7a: 15:15:60:10:bc:ed:ad:dc:58:74:65:15:84:4e:fc: d5:fb:42:a4:5a:e7:74:09:0e:17:fe:6a:29:d7:30: 3d:e7:8c:4f:1d:dd:18:78:ac:6e:dd:d0:df:4a:d8: 7c:b6:27:f3:ad:c5:4f:53:16:24:30:6c:49:08:7b: b6:05:b1:6f:7f:a0:3c:ca:be:bd:09:16:29:8e:8c: 41:c8:89:9a:3c:ad:9b:b6:52:36:9b:a2:6b:06:b7: b8:f8:e8:f8:a9:d2:b9:b8:76:77:b7:02:ae:35:57: df:5c:c7:a1:bf:64:58:a9:4f:67:d3:e9:7e:36:e1: e0:b3:38:c4:85:06:ff:52:44:5f:e8:ae:4f:25:06: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:F5:22:E8:01:36:9D:A5:32:83:DA:F1:46:CE:87:E3:8B:9F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/468a99bf-e0c4-3475-a1f3-cfc996a78e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1a:45:42:93:43:2c:74:fb:31:1c:ff:ca:3b:de:a6:84:45: ad:81:74:47:22:e9:61:65:d1:6d:9f:bd:21:1e:97:ec:78:1e: 28:86:85:e4:46:cb:49:71:2e:a8:17:bb:4c:26:0d:18:03:de: 7b:9a:7f:f2:bb:d2:43:78:a7:d4:f2:14:c0:f6:e1:5a:27:3b: 6a:06:0c:55:3b:a0:46:ed:23:3c:81:a3:d1:1c:67:62:fc:14: 52:34:57:40:70:22:94:a3:0d:3a:59:a4:7b:6a:5e:9a:18:e5: 28:59:6a:0c:4f:d6:35:60:93:ce:10:6c:a3:04:b4:8c:9e:67: 42:fc:58:c6:7f:65:27:fc:bd:0e:e5:a8:09:44:32:c5:5a:54: 46:1c:b6:f8:b8:58:cd:e2:1f:1c:3e:45:3d:62:96:c7:f7:09: 31:fc:d7:ad:fa:0e:c4:ee:fc:75:13:5c:f9:d8:63:55:df:97: 9d:5a:07:9a:b4:a8:76:cb:36:4f:ab:6a:5b:0f:07:e4:03:72: b3:74:09:60:ba:3d:a7:4c:f6:8d:a9:33:05:63:b5:db:99:2d: 7c:56:1a:3f:23:e9:d3:9e:e4:38:eb:7b:6c:9b:02:81:93:63: ef:3e:95:3b:51:a4:01:d3:26:74:75:ad:1f:b9:b6:4a:db:d3: 1f:f9:29:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R148zt9yZyS7JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk MGEzOWVhNDgtM2Q2Mi00YjJmLThhMjUtNGI1YjdiZmZhYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFEKyt2a5fTGWXiGoVMZO5VO0TZao3kJ0Mxc m2gSp6fFbppUvAblPo7vL5o4hNVW6WvB70BPpk31FRvuG/Y8qF9gW2vyuJ55myY9 +1FZXiqxE85cogu3OhDTBFPEBi4ZebJ+afSLojUy9bwWxtrWCtxdym5tb3oVFWAQ vO2t3Fh0ZRWETvzV+0KkWud0CQ4X/mop1zA954xPHd0YeKxu3dDfSth8tifzrcVP UxYkMGxJCHu2BbFvf6A8yr69CRYpjoxByImaPK2btlI2m6JrBre4+Oj4qdK5uHZ3 twKuNVffXMehv2RYqU9n0+l+NuHgszjEhQb/UkRf6K5PJQbBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2W9SLoATadpTKD2vFGzofji58wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvNDY4YTk5YmYtZTBjNC0z NDc1LWExZjMtY2ZjOTk2YTc4ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUaRUKTQyx0+zEc/8o73qaERa2BdEci6WFl0W2fvSEel+x4HiiGheRG y0lxLqgXu0wmDRgD3nuaf/K70kN4p9TyFMD24VonO2oGDFU7oEbtIzyBo9EcZ2L8 FFI0V0BwIpSjDTpZpHtqXpoY5ShZagxP1jVgk84QbKMEtIyeZ0L8WMZ/ZSf8vQ7l qAlEMsVaVEYctvi4WM3iHxw+RT1ilsf3CTH81636DsTu/HUTXPnYY1Xfl51aB5q0 qHbLNk+ralsPB+QDcrN0CWC6PadM9o2pMwVjtduZLXxWGj8j6dOe5Djre2ybAoGT Y+8+lTtRpAHTJnR1rR+5tkrb0x/5KYw= -----END CERTIFICATE-----Generated at Mon Aug 31 11:23:36 2026 by rpki-client