$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa File: 322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa (raw, json) Hash identifier: J/ESbetGlZQkuH34oOc/R9VaOkV98ArUU3Vc3e+Vh5Y= Subject key identifier: AE:F0:3B:6E:64:97:B6:48:DB:D5:54:01:9E:99:89:74:13:02:C7:42 Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584F5A32DA1C115EC622C9897200 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:da:1c:11:5e:c6:22:c9:89:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3b1c03d2-1eba-420a-a823-b5145918b5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:bb:a9:65:be:fa:93:30:2e:56:0c:8a:2b: f6:f0:05:b7:76:09:b1:6f:e3:2d:bb:de:b2:0d:30: 0a:7c:19:11:a8:8e:23:c0:fc:21:37:dd:ad:81:8d: 9f:cb:b7:c2:63:e2:d6:53:23:65:1c:d9:e0:c2:36: 7d:26:f4:c9:18:95:20:63:74:0e:5a:1a:47:c1:7a: b6:39:56:cc:2d:a1:2a:12:c6:88:d1:86:5d:bd:2d: 79:3a:42:7d:43:42:46:e4:33:e6:36:46:3d:7a:59: e2:e2:6e:1f:19:cc:31:2d:0c:6d:ea:d0:e1:a1:fb: 22:96:f2:ea:e4:a9:a0:de:a7:5b:64:3e:95:d1:17: 7a:d1:16:8b:ec:70:56:73:d9:af:18:ca:0d:6a:68: 66:cd:8f:25:43:45:cd:20:e3:2b:e5:10:6e:a4:91: fe:c6:fb:7b:bf:6f:a6:72:3f:dc:ae:16:b4:09:a3: 07:63:04:59:bb:f8:60:66:63:8e:49:d4:c6:a8:60: cb:82:e1:84:7a:c9:bc:ed:2c:2f:91:71:5b:3e:01: 86:a1:ad:64:bd:61:08:f8:21:b9:f6:6e:62:b8:13: ae:cd:f6:f2:3e:8a:0d:f3:5e:d7:c0:84:24:6f:6e: e6:a6:23:78:a2:a1:36:46:26:97:20:ca:0e:1c:76: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:3B:6E:64:97:B6:48:DB:D5:54:01:9E:99:89:74:13:02:C7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8e:83:04:c3:d1:37:47:b5:e6:45:93:a5:37:d9:d8:98:55: 6b:2d:b4:9a:c1:cc:a0:77:7e:39:da:98:1b:b9:2a:73:ea:13: 12:5b:19:f7:d1:31:dc:32:18:f3:5c:8b:c3:1d:4c:56:00:fc: c1:ee:9d:b0:ea:26:c7:55:c6:21:3e:6c:d6:74:79:dd:06:88: cb:00:fc:b8:4e:d6:21:57:ca:83:a7:e1:39:8f:5d:b2:40:53: 4e:0e:9b:1d:22:c0:41:79:3a:9a:c9:86:c4:ce:d0:05:f1:3c: 0e:97:ac:71:7b:7f:69:64:68:a3:2c:a9:fa:63:ee:8c:51:27: 1a:9d:06:73:5c:e4:3a:fb:e9:a7:97:55:32:96:3b:7f:fa:37: ad:9a:80:b9:4b:3e:a1:97:c5:a3:12:ef:77:fd:d1:dd:83:73: 02:3c:16:ba:85:ae:90:a5:ce:9d:3a:f7:3c:d4:48:cb:a1:b9: d8:06:45:8a:c6:ff:92:8e:13:32:7e:c7:8d:e4:fe:8c:e4:cb: 95:93:b2:2a:65:ad:a0:67:37:a1:be:34:d1:8a:76:8f:37:97: 23:ed:42:7e:c0:1f:49:c4:79:7d:1a:b5:be:79:bf:53:76:2c: 98:d7:e7:11:6e:eb:96:d4:c4:ba:c3:fc:50:ae:4d:32:65:95: 33:7d:73:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtocEV7GIsmJcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2IxYzAzZDItMWViYS00MjBhLWE4MjMtYjUxNDU5MThiNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzea7qWW++pMwLlYMiiv28AW3dgmxb+Mtu96y DTAKfBkRqI4jwPwhN92tgY2fy7fCY+LWUyNlHNngwjZ9JvTJGJUgY3QOWhpHwXq2 OVbMLaEqEsaI0YZdvS15OkJ9Q0JG5DPmNkY9elni4m4fGcwxLQxt6tDhofsilvLq 5Kmg3qdbZD6V0Rd60RaL7HBWc9mvGMoNamhmzY8lQ0XNIOMr5RBupJH+xvt7v2+m cj/crha0CaMHYwRZu/hgZmOOSdTGqGDLguGEesm87SwvkXFbPgGGoa1kvWEI+CG5 9m5iuBOuzfbyPooN817XwIQkb27mpiN4oqE2RiaXIMoOHHZBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7wO25kl7ZI29VUAZ6ZiXQTAsdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMzIyZDZkOTYtZTdmYS0z NDNiLWIzYmEtZjIxZTY5MDM3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeOgwTD0TdHteZFk6U32diYVWsttJrBzKB3fjnamBu5KnPqExJbGffR MdwyGPNci8MdTFYA/MHunbDqJsdVxiE+bNZ0ed0GiMsA/LhO1iFXyoOn4TmPXbJA U04Omx0iwEF5OprJhsTO0AXxPA6XrHF7f2lkaKMsqfpj7oxRJxqdBnNc5Dr76aeX VTKWO3/6N62agLlLPqGXxaMS73f90d2DcwI8FrqFrpClzp069zzUSMuhudgGRYrG /5KOEzJ+x43k/ozky5WTsiplraBnN6G+NNGKdo83lyPtQn7AH0nEeX0atb55v1N2 LJjX5xFu65bUxLrD/FCuTTJllTN9c5c= -----END CERTIFICATE-----Generated at Tue Oct 6 06:05:40 2026 by rpki-client