$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/850ad532-7397-3c42-a80e-8698c26e7078.roa File: 850ad532-7397-3c42-a80e-8698c26e7078.roa (raw, json) Hash identifier: 0D6RNq1KWsku4t4746gzNe8NVvKW1knvx4voNSBVZSE= Subject key identifier: 55:74:B4:BC:78:4C:EC:AF:51:46:33:66:2E:AD:2C:A9:CB:84:11:A0 Certificate issuer: /CN=12e76770-9b8c-4119-91db-46ae6f4cfe97 Certificate serial: 010D0C9F4328584EFE123369D68B465391709380 Authority key identifier: 63:3D:9F:6E:3F:0B:F6:A4:F7:E5:13:F0:F0:65:54:D4:DE:85:52:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/850ad532-7397-3c42-a80e-8698c26e7078.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 36240 IP address blocks: 161.199.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/12e76770-9b8c-4119-91db-46ae6f4cfe97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/12e76770-9b8c-4119-91db-46ae6f4cfe97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:33:69:d6:8b:46:53:91:70:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e76770-9b8c-4119-91db-46ae6f4cfe97 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=5dd5a60b-eb84-4b36-8bca-13484ea08b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:ac:74:21:40:4a:e2:80:34:09:af:35:8b: e4:ae:9d:89:ce:d6:5e:62:48:c4:1b:88:c1:f4:a4: 50:dd:4d:ef:8d:31:61:41:0c:3a:a5:c1:e7:c3:5e: be:7c:0f:64:c3:f1:2b:bc:33:59:54:fc:f2:da:82: dd:3b:e1:eb:0c:c4:a7:1b:29:e3:12:4c:ec:30:08: 8e:c0:4b:9e:fe:ce:2d:41:1f:d0:4e:92:28:f8:cc: ab:ad:81:87:9f:40:ed:c5:12:26:9f:4d:16:9d:32: 03:34:56:0a:f8:8a:6d:72:5c:1d:a6:0e:ac:f0:70: fd:f0:a7:ea:9a:63:18:a7:d9:08:d8:09:04:b9:4f: d5:2e:78:09:c2:91:c4:90:21:fd:19:8d:6d:7a:aa: ee:1e:63:f2:ca:3d:27:bc:5c:8f:31:0e:59:6f:aa: a9:a0:0b:db:31:1c:2a:7c:fd:49:62:86:56:d9:6d: 3a:15:4e:57:61:ab:4a:b0:a5:67:f0:9c:39:c8:45: c5:fe:89:df:59:ff:4b:17:40:c6:b8:ab:c1:ce:4f: d3:9c:51:71:6c:23:d0:f5:f1:b3:42:3d:98:a2:29: 1c:99:f9:2d:c6:8d:67:3f:bc:49:5c:48:5a:23:16: c8:58:67:b4:ef:50:84:2d:4f:57:ed:22:c4:f0:c0: ea:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:74:B4:BC:78:4C:EC:AF:51:46:33:66:2E:AD:2C:A9:CB:84:11:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/850ad532-7397-3c42-a80e-8698c26e7078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97/12e76770-9b8c-4119-91db-46ae6f4cfe97.crl X509v3 Authority Key Identifier: keyid:63:3D:9F:6E:3F:0B:F6:A4:F7:E5:13:F0:F0:65:54:D4:DE:85:52:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12e76770-9b8c-4119-91db-46ae6f4cfe97.cer sbgp-ipAddrBlock: critical IPv4: 161.199.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a3:7d:d5:8d:cf:5e:5c:98:df:78:4f:0b:98:30:9b:08:06: 8e:3a:e1:4d:59:0f:bb:aa:38:21:a8:b8:81:bc:b7:86:53:b0: 3f:db:2e:b5:8e:01:f5:3c:f5:39:bf:ad:a7:e3:a4:cc:7e:dc: a8:1e:6c:5e:79:c4:be:c6:49:9b:77:94:2e:db:0b:34:b0:b7: 30:07:23:54:a6:da:e9:a1:4d:0e:00:21:86:bd:5b:05:87:1a: 1b:c7:54:f0:e2:e5:af:03:78:ef:96:c0:eb:58:31:b4:fb:b0: 8f:16:70:b2:1e:b7:44:4e:8a:29:03:96:1c:d7:a5:9f:2f:f1: 24:27:52:63:ad:48:2a:38:b1:c3:14:42:66:e3:d5:89:45:5c: c8:6f:63:8d:28:6c:66:51:42:c9:fe:2e:6d:24:b3:d7:8e:2a: 81:fa:fd:fb:59:ea:86:c7:81:02:5c:69:6d:6c:ae:f1:e0:67: d7:94:ec:ea:2a:72:21:71:74:76:04:9c:89:60:cb:7b:8d:89: 93:db:64:95:d4:0d:2e:d3:bc:38:4c:9a:c4:24:e8:5e:6c:79: 75:e2:c1:15:66:3f:dc:bd:45:c6:c8:ff:4f:c0:30:23:65:8e: c0:bd:99:07:82:69:63:1e:20:98:95:e4:5c:81:1b:79:de:f6: 7b:b8:b5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EjNp1otGU5Fwk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJlNzY3NzAtOWI4Yy00MTE5LTkxZGItNDZhZTZmNGNm ZTk3MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NWRkNWE2MGItZWI4NC00YjM2LThiY2EtMTM0ODRlYTA4Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskusdCFASuKANAmvNYvkrp2JztZeYkjEG4jB 9KRQ3U3vjTFhQQw6pcHnw16+fA9kw/ErvDNZVPzy2oLdO+HrDMSnGynjEkzsMAiO wEue/s4tQR/QTpIo+MyrrYGHn0DtxRImn00WnTIDNFYK+Iptclwdpg6s8HD98Kfq mmMYp9kI2AkEuU/VLngJwpHEkCH9GY1teqruHmPyyj0nvFyPMQ5Zb6qpoAvbMRwq fP1JYoZW2W06FU5XYatKsKVn8Jw5yEXF/onfWf9LF0DGuKvBzk/TnFFxbCPQ9fGz Qj2Yoikcmfktxo1nP7xJXEhaIxbIWGe071CELU9X7SLE8MDqAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV0tLx4TOyvUUYzZi6tLKnLhBGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMmU3 Njc3MC05YjhjLTQxMTktOTFkYi00NmFlNmY0Y2ZlOTcvODUwYWQ1MzItNzM5Ny0z YzQyLWE4MGUtODY5OGMyNmU3MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTJlNzY3NzAtOWI4Yy00MTE5LTkx ZGItNDZhZTZmNGNmZTk3LzEyZTc2NzcwLTliOGMtNDExOS05MWRiLTQ2YWU2ZjRj ZmU5Ny5jcmwwHwYDVR0jBBgwFoAUYz2fbj8L9qT35RPw8GVU1N6FUucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMmU3Njc3MC05YjhjLTQxMTktOTFkYi00NmFl NmY0Y2ZlOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIejfdWNz15cmN94TwuYMJsIBo464U1ZD7uqOCGouIG8t4ZTsD/bLrWO AfU89Tm/rafjpMx+3KgebF55xL7GSZt3lC7bCzSwtzAHI1Sm2umhTQ4AIYa9WwWH GhvHVPDi5a8DeO+WwOtYMbT7sI8WcLIet0ROiikDlhzXpZ8v8SQnUmOtSCo4scMU Qmbj1YlFXMhvY40obGZRQsn+Lm0ks9eOKoH6/ftZ6obHgQJcaW1srvHgZ9eU7Ooq ciFxdHYEnIlgy3uNiZPbZJXUDS7TvDhMmsQk6F5seXXiwRVmP9y9RcbI/0/AMCNl jsC9mQeCaWMeIJiV5FyBG3ne9nu4tSs= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:33 2026 by rpki-client