$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/6ac887a4-8c88-3bc9-abc5-2ad2b1f0e11a.roa File: 6ac887a4-8c88-3bc9-abc5-2ad2b1f0e11a.roa (raw, json) Hash identifier: o7J77i1Y3p1D8cr25RoAXCxdy/ubKmEdnlkdfmyyqks= Subject key identifier: 57:B6:8F:0F:D4:66:A5:8B:4A:E6:D4:84:C3:D6:69:9E:1F:C8:03:B5 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584EFB475EA1A98C1072B0453280 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/6ac887a4-8c88-3bc9-abc5-2ad2b1f0e11a.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 38551 IP address blocks: 161.121.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:5e:a1:a9:8c:10:72:b0:45:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=9266461b-4975-4837-948b-8168fc68181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:69:75:54:4b:97:89:b2:45:a7:19:66:1d: a3:d9:ae:38:28:0b:68:e3:dd:6d:a8:96:55:71:c1: 75:b9:a5:cb:c6:04:12:da:86:2b:6a:96:0b:67:a4: f0:4a:0d:c3:39:5c:c8:e3:d5:46:68:e9:67:c0:35: 0d:38:c3:41:cb:1c:a9:6e:c7:f0:fe:d4:e7:06:62: 74:cc:0f:bf:90:ea:c7:ed:b3:df:99:f8:3f:b5:a0: 6a:4c:95:8a:50:70:1a:e0:3e:ad:eb:4b:fe:27:c8: ea:85:88:32:1f:aa:92:07:a9:98:53:eb:b5:89:90: 99:f9:6d:8f:67:d7:a9:38:76:e0:b8:af:07:72:f8: 7f:59:49:5d:56:c7:90:81:4b:13:33:0b:73:9d:69: 90:42:5c:32:4b:ac:c3:62:7e:c2:5e:be:39:3e:42: f7:9b:63:66:55:48:36:f6:98:95:b0:9d:87:1e:08: ff:c6:59:b6:f7:01:a9:8e:8b:43:1a:b3:b1:a7:a7: 7f:11:6a:9c:29:de:92:13:2d:77:83:26:7a:93:e8: b6:af:80:62:1e:95:cf:0e:b8:29:62:d5:a8:38:03: fa:cc:9d:5a:dd:75:30:06:43:ec:89:61:ea:a3:ed: 4b:22:3a:95:73:40:f3:ce:29:f2:7d:dd:13:25:98: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:8F:0F:D4:66:A5:8B:4A:E6:D4:84:C3:D6:69:9E:1F:C8:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/6ac887a4-8c88-3bc9-abc5-2ad2b1f0e11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7d:8b:62:b2:12:37:cf:89:8d:48:7e:ab:c5:27:36:0a:cf: 56:2a:54:f8:de:78:84:ea:dd:8d:e9:5b:b2:07:cd:79:d8:9c: 4a:40:9f:6d:86:cd:67:0f:ab:3a:d0:c1:19:e0:d4:71:e1:ca: 89:2e:0d:c8:0b:ef:1c:bf:21:6f:a2:58:ed:81:3e:fa:63:3f: d9:a2:21:90:45:cf:b6:53:2c:80:2f:1d:58:d3:af:b9:60:78: 24:f0:fa:1c:23:ee:2c:3f:9c:dd:f4:7a:b0:e0:54:4c:dd:25: 01:3e:eb:33:51:0a:07:09:28:5c:af:bd:cd:78:0a:ad:ab:b8: b5:68:ee:2a:11:e3:d5:c0:23:49:7f:73:f2:f4:f0:a6:3e:51: 0c:fd:2b:26:a5:3c:d0:9b:c9:15:3a:92:fe:7a:02:07:f4:38: df:39:f5:6a:da:9b:ba:90:0b:65:d4:bb:31:0a:6b:af:d6:ed: 51:db:d8:4b:a4:53:40:1a:ed:05:cd:c6:c9:6e:9e:1c:ae:f6: dd:61:5b:69:dd:14:7a:86:2b:93:78:f2:93:7f:a5:c4:e7:9e: b4:e0:f6:36:1e:e0:4b:3e:de:b2:ec:b8:93:5f:4b:9c:b1:08: b8:71:01:da:e3:e6:83:c5:61:17:86:d7:42:13:29:7c:07:ae: b3:0e:51:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R16hqYwQcrBFMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk OTI2NjQ2MWItNDk3NS00ODM3LTk0OGItODE2OGZjNjgxODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zFpdVRLl4myRacZZh2j2a44KAto491tqJZV ccF1uaXLxgQS2oYrapYLZ6TwSg3DOVzI49VGaOlnwDUNOMNByxypbsfw/tTnBmJ0 zA+/kOrH7bPfmfg/taBqTJWKUHAa4D6t60v+J8jqhYgyH6qSB6mYU+u1iZCZ+W2P Z9epOHbguK8Hcvh/WUldVseQgUsTMwtznWmQQlwyS6zDYn7CXr45PkL3m2NmVUg2 9piVsJ2HHgj/xlm29wGpjotDGrOxp6d/EWqcKd6SEy13gyZ6k+i2r4BiHpXPDrgp YtWoOAP6zJ1a3XUwBkPsiWHqo+1LIjqVc0Dzzinyfd0TJZgCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe2jw/UZqWLSubUhMPWaZ4fyAO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvNmFjODg3YTQtOGM4OC0z YmM5LWFiYzUtMmFkMmIxZjBlMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoXnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp9i2KyEjfPiY1IfqvFJzYKz1YqVPjeeITq3Y3pW7IHzXnYnEpAn22G zWcPqzrQwRng1HHhyokuDcgL7xy/IW+iWO2BPvpjP9miIZBFz7ZTLIAvHVjTr7lg eCTw+hwj7iw/nN30erDgVEzdJQE+6zNRCgcJKFyvvc14Cq2ruLVo7ioR49XAI0l/ c/L08KY+UQz9KyalPNCbyRU6kv56Agf0ON859Wram7qQC2XUuzEKa6/W7VHb2Euk U0Aa7QXNxslunhyu9t1hW2ndFHqGK5N48pN/pcTnnrTg9jYe4Es+3rLsuJNfS5yx CLhxAdrj5oPFYReG10ITKXwHrrMOUWA= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:22 2026 by rpki-client