$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/75213e70-430f-3f83-8934-f03d41d77301.roa File: 75213e70-430f-3f83-8934-f03d41d77301.roa (raw, json) Hash identifier: 1zKcX2tqNjYTsmu/a1mlxChKNi+zuSXwV4f/VffS7Z8= Subject key identifier: 87:8A:34:86:8A:1F:A6:6B:B2:7E:96:80:60:EE:F0:E7:2D:F7:FF:05 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584EFB475EB5AD0E243E1665A2F0 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/75213e70-430f-3f83-8934-f03d41d77301.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 38551 IP address blocks: 161.121.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:5e:b5:ad:0e:24:3e:16:65:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=ebcb517d-f905-4fb0-bcd0-e49ea9059eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:30:2f:a9:9d:48:71:aa:81:72:eb:b9:3f: bc:93:02:f9:55:4c:5f:1a:8a:59:b9:d4:7a:8f:84: 72:d4:ca:b0:63:9f:64:31:8a:7f:02:4c:7f:3a:e2: 75:ae:e5:28:58:46:4c:e1:2f:19:84:e0:28:7c:be: 30:a5:59:cd:af:fc:34:6c:63:fc:6a:07:9e:3f:0a: ce:99:25:ef:fd:4e:d4:48:f1:8d:2c:b1:a4:ff:99: 20:d2:92:9c:14:51:93:5f:8f:63:2e:71:68:bd:68: 32:1d:4b:83:35:9a:a6:ca:6e:ef:d5:c9:2e:ee:69: 4b:3a:05:8e:af:29:74:5f:8c:95:4f:be:17:96:1e: ae:72:ea:ab:f0:dc:09:b1:e3:c7:35:79:6f:75:08: a5:b6:56:26:a3:ed:8c:73:26:c0:7b:f3:14:e8:46: 27:ae:ef:ec:36:d7:97:35:95:f9:2e:25:23:04:3c: dc:38:18:9f:94:90:c0:b9:2c:e1:82:6d:7e:ec:93: 31:11:4a:7f:ee:61:05:f5:bf:78:4a:23:c5:c2:75: 94:94:98:ee:46:ac:d7:1d:5c:86:a8:84:7e:34:18: cd:a2:49:ba:c6:6e:c5:97:8b:25:ed:43:cf:b1:e3: f3:8d:db:4a:ea:d2:4a:38:a3:5a:6d:87:76:71:bb: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8A:34:86:8A:1F:A6:6B:B2:7E:96:80:60:EE:F0:E7:2D:F7:FF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/75213e70-430f-3f83-8934-f03d41d77301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 161.121.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ff:07:97:24:fe:71:08:ea:8c:ce:1e:c1:23:9d:26:06:50: 74:ae:c4:e6:a8:13:0f:95:b1:b8:f4:58:e9:86:bd:fc:7b:58: fd:87:d0:ac:06:f5:82:e8:3d:e7:f6:7f:c8:7f:4e:9a:47:d4: 5d:17:40:22:ae:57:61:53:04:d3:3d:74:2e:43:88:3d:a8:29: 4f:50:12:7e:56:5d:5b:4a:b5:46:82:83:23:b8:14:4e:97:63: 45:a4:e5:72:35:dc:c2:74:19:af:f0:f7:4b:6d:bf:e3:99:be: 1b:9b:3f:7d:77:78:99:d7:88:94:9d:f9:8e:62:e0:1b:3c:02: 57:e1:1b:0c:33:5b:4f:ab:90:50:85:67:ad:dd:b3:d8:db:bf: ba:4c:c6:d9:5d:0e:3c:40:34:5f:b6:5c:d5:bd:37:fb:38:e3: 5c:79:ca:11:27:fe:fb:e6:fd:84:72:2e:f5:4c:19:14:55:1f: 83:91:ff:b7:07:bc:ed:90:92:79:4e:93:5d:9b:1a:54:3b:99: 51:c6:92:99:15:ce:9b:ff:1e:70:b1:55:c1:3d:c0:82:a9:2f: ad:ed:7a:4c:5d:42:76:d9:77:eb:c7:4a:5b:4c:fc:f0:43:78: 2a:ce:0e:32:11:36:80:aa:b5:47:41:26:9c:67:a0:51:49:26: f0:24:d2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R161rQ4kPhZlovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZWJjYjUxN2QtZjkwNS00ZmIwLWJjZDAtZTQ5ZWE5MDU5ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsngwL6mdSHGqgXLruT+8kwL5VUxfGopZudR6 j4Ry1MqwY59kMYp/Akx/OuJ1ruUoWEZM4S8ZhOAofL4wpVnNr/w0bGP8ageePwrO mSXv/U7USPGNLLGk/5kg0pKcFFGTX49jLnFovWgyHUuDNZqmym7v1cku7mlLOgWO ryl0X4yVT74Xlh6ucuqr8NwJsePHNXlvdQiltlYmo+2McybAe/MU6EYnru/sNteX NZX5LiUjBDzcOBiflJDAuSzhgm1+7JMxEUp/7mEF9b94SiPFwnWUlJjuRqzXHVyG qIR+NBjNokm6xm7Fl4sl7UPPsePzjdtK6tJKOKNabYd2cbt2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeKNIaKH6Zrsn6WgGDu8Oct9/8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvNzUyMTNlNzAtNDMwZi0z ZjgzLTg5MzQtZjAzZDQxZDc3MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoXnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH/B5ck/nEI6ozOHsEjnSYGUHSuxOaoEw+Vsbj0WOmGvfx7WP2H0KwG 9YLoPef2f8h/TppH1F0XQCKuV2FTBNM9dC5DiD2oKU9QEn5WXVtKtUaCgyO4FE6X Y0Wk5XI13MJ0Ga/w90ttv+OZvhubP313eJnXiJSd+Y5i4Bs8AlfhGwwzW0+rkFCF Z63ds9jbv7pMxtldDjxANF+2XNW9N/s441x5yhEn/vvm/YRyLvVMGRRVH4OR/7cH vO2QknlOk12bGlQ7mVHGkpkVzpv/HnCxVcE9wIKpL63tekxdQnbZd+vHSltM/PBD eCrODjIRNoCqtUdBJpxnoFFJJvAk0qk= -----END CERTIFICATE-----Generated at Mon Aug 31 11:25:13 2026 by rpki-client