$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa File: 42f0fab8-4484-3253-b11e-e6516205eed0.roa (raw, json) Hash identifier: ou69utB1BHM6D2RfRoeHHF5+tCocG1+GuaCPeg95MN4= Subject key identifier: D0:3F:8F:E5:0B:00:09:55:0A:66:00:09:D8:D0:4D:6E:1D:30:EA:E3 Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Certificate serial: 010D0C9F4328584ED0020CC5DC38DA8150B63700 Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 394352 IP address blocks: 161.129.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:0c:c5:dc:38:da:81:50:b6:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=4055cd98-1192-4040-8d1b-d0aa0051ce9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6a:fc:e0:cd:32:a6:9a:38:e5:13:53:e2:70: 8c:68:df:ca:16:20:87:16:3b:78:68:13:11:31:d7: cb:16:46:64:dc:f5:53:38:74:c0:9e:e9:6c:03:5b: 44:6d:04:40:0e:1f:c0:58:12:23:1b:13:4f:2e:a9: 9b:a9:5f:ab:75:5d:5d:3e:53:86:99:d7:bb:21:01: 23:45:71:47:53:c6:5f:8f:bc:cf:74:4e:e8:e6:8b: 08:f4:3d:3d:2b:d4:f5:b9:17:a0:cb:7f:ae:bf:bd: 04:06:1c:2f:e3:71:81:e7:79:0b:f0:12:c6:fb:53: 45:fa:15:2f:f7:a2:f5:82:7e:4e:12:67:e7:70:af: f4:28:e6:41:db:71:22:7d:73:82:ea:68:c4:69:73: bf:67:0d:89:f7:d5:80:65:02:b9:b1:10:bb:39:f3: 9f:8e:f6:4a:a5:71:ae:b5:08:a8:4b:20:f2:04:f3: 1c:88:97:96:4f:b4:dd:a0:c3:64:1a:f1:fe:85:3d: 1d:de:d0:20:e7:2a:0a:1d:71:d5:f9:b3:9d:56:dc: ec:58:2a:cd:32:4e:9b:29:d5:5e:08:72:99:4a:b2: 7e:f8:69:4f:c9:b6:ac:22:f4:eb:64:04:80:6c:d2: 36:66:61:fe:3a:bd:8b:59:a4:33:39:26:a0:06:a4: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:8F:E5:0B:00:09:55:0A:66:00:09:D8:D0:4D:6E:1D:30:EA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl X509v3 Authority Key Identifier: keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer sbgp-ipAddrBlock: critical IPv4: 161.129.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b8:7f:6c:90:2f:78:c6:f7:04:8f:10:25:39:eb:f7:9d:c3: d1:36:93:99:fb:b1:23:71:98:e6:56:b3:0c:f1:72:64:7d:5b: ac:be:d4:b4:9c:8e:77:20:c4:98:26:91:73:2b:1e:5d:be:ad: 10:08:be:b8:92:c9:78:a6:94:45:6b:b4:43:30:fd:ba:d5:bd: 87:55:e0:f5:c8:97:74:70:5b:cd:d0:13:0c:7f:53:af:0d:7e: 67:69:f7:86:90:ba:a4:99:b4:65:34:f3:b0:a2:dc:f0:52:af: 58:96:fa:4d:a7:cf:17:7c:95:dc:3f:32:59:7f:da:89:74:20: 82:c2:9c:9a:e5:3f:d5:77:2d:17:bf:cc:0e:b3:73:ca:4c:60: 8c:83:3f:0b:d9:07:66:08:4f:81:4b:36:4e:78:93:25:06:d6: 97:9b:be:56:95:e1:ff:a7:e2:cf:ce:ae:b4:0f:0c:72:eb:d2: 59:5b:75:77:90:7e:04:19:3e:28:d0:5c:09:35:41:cd:2b:0d: 54:23:79:84:3f:c7:09:41:8a:36:79:45:c8:1f:85:40:75:09: 6f:ee:91:6b:e1:87:b7:d6:3d:d6:2b:a2:fd:7c:94:68:df:42: 1f:89:a8:ed:ed:c8:43:93:d5:94:fa:fd:7b:ac:23:0b:5d:15: a9:72:6b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgzF3DjagVC2NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDA1NWNkOTgtMTE5Mi00MDQwLThkMWItZDBhYTAwNTFjZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGr84M0yppo45RNT4nCMaN/KFiCHFjt4aBMR MdfLFkZk3PVTOHTAnulsA1tEbQRADh/AWBIjGxNPLqmbqV+rdV1dPlOGmde7IQEj RXFHU8Zfj7zPdE7o5osI9D09K9T1uRegy3+uv70EBhwv43GB53kL8BLG+1NF+hUv 96L1gn5OEmfncK/0KOZB23EifXOC6mjEaXO/Zw2J99WAZQK5sRC7OfOfjvZKpXGu tQioSyDyBPMciJeWT7TdoMNkGvH+hT0d3tAg5yoKHXHV+bOdVtzsWCrNMk6bKdVe CHKZSrJ++GlPybasIvTrZASAbNI2ZmH+Or2LWaQzOSagBqQzKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA/j+ULAAlVCmYACdjQTW4dMOrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNDJmMGZhYjgtNDQ4NC0z MjUzLWIxMWUtZTY1MTYyMDVlZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1 MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa4f2yQL3jG9wSPECU56/edw9E2k5n7sSNxmOZWswzxcmR9W6y+1LSc jncgxJgmkXMrHl2+rRAIvriSyXimlEVrtEMw/brVvYdV4PXIl3RwW83QEwx/U68N fmdp94aQuqSZtGU087Ci3PBSr1iW+k2nzxd8ldw/Mll/2ol0IILCnJrlP9V3LRe/ zA6zc8pMYIyDPwvZB2YIT4FLNk54kyUG1pebvlaV4f+n4s/OrrQPDHLr0llbdXeQ fgQZPijQXAk1Qc0rDVQjeYQ/xwlBijZ5RcgfhUB1CW/ukWvhh7fWPdYrov18lGjf Qh+JqO3tyEOT1ZT6/XusIwtdFalya2c= -----END CERTIFICATE-----Generated at Mon Aug 31 10:37:51 2026 by rpki-client