$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa File: 71521e32-82f1-341f-90fa-6ca4618abeb3.roa (raw, json) Hash identifier: P5ABKm5DFcCtWosJQV1TwBhB86Lj8YRXvrTEBOCv/tc= Subject key identifier: 48:CC:59:0B:26:A1:B7:02:64:37:D4:4A:F3:EF:BD:EE:71:00:67:3A Certificate issuer: /CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Certificate serial: 010D0C9F4328584F49730A8769EFD34EF7DF5450 Authority key identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401956 IP address blocks: 161.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0a:87:69:ef:d3:4e:f7:df:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3438bd54-d731-4a99-a53a-c9ec1b1cb293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:74:3a:7d:a0:69:d2:8c:92:34:c0:b2:5f: f8:46:ea:15:56:2d:07:b4:e4:44:cb:d1:bf:61:28: 80:dc:03:ac:e4:85:b6:1b:6d:d0:bb:34:de:6e:5c: 1d:64:60:b9:1b:b8:7d:d7:a2:71:f2:a4:be:76:70: 6e:77:31:5f:d4:8c:60:23:f1:67:cc:c3:bd:15:c3: 5c:e0:a1:cb:a7:56:14:a5:f6:e9:25:10:4e:e4:79: 20:cb:fb:f6:d2:93:6f:56:48:06:4a:12:d6:d7:06: 8b:8b:83:6b:b6:4d:55:c9:0c:ef:3c:7b:9b:09:47: 03:a2:f1:30:d0:a9:c4:06:03:22:8b:e8:65:6a:9f: f6:0f:4a:f4:68:55:f0:b8:e9:36:54:96:90:38:0e: 20:40:b9:60:35:fb:17:26:80:ff:05:d9:16:aa:5e: 09:38:7a:73:f0:dd:9c:6a:f3:c2:14:22:2d:b3:80: 74:8c:96:7f:5f:09:cf:8c:ae:a8:b5:88:80:23:ad: 7a:53:93:d1:c8:c4:78:c6:5d:b9:fc:e9:7b:d1:19: ae:b2:01:7f:e2:64:38:c8:16:a1:c1:ec:de:62:1a: e6:8d:0b:66:49:87:0f:ea:98:ea:45:15:e7:7e:b6: 02:76:30:0f:8f:da:bb:e8:96:ef:33:77:8a:38:6e: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CC:59:0B:26:A1:B7:02:64:37:D4:4A:F3:EF:BD:EE:71:00:67:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl X509v3 Authority Key Identifier: keyid:5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer sbgp-ipAddrBlock: critical IPv4: 161.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e2:bb:f2:fe:3e:19:03:e7:93:c8:51:71:6b:3b:66:99:3e: 6c:42:a2:d5:0f:b2:a8:49:07:fc:3b:35:8f:9d:eb:c5:65:8a: 4f:5b:cc:3b:d8:72:9f:ce:ae:51:18:17:63:7e:6b:2d:da:f0: be:2b:ac:ce:0a:d5:4c:08:c5:cb:17:eb:d6:af:3d:ca:f3:64: 4f:c6:c3:bc:96:cc:e5:21:9b:b2:a3:8d:fb:d3:b2:25:84:ed: 8c:3c:65:66:0c:e4:35:f7:f8:9b:b1:a2:34:d3:9e:85:a0:a4: e3:ae:6e:04:f8:99:ec:2e:4d:b7:d1:0f:ca:c0:2d:71:78:0a: 7f:5f:55:7f:ad:53:6f:5e:5a:b3:af:e5:cb:0c:df:d2:b4:33: a2:eb:be:94:7f:62:ce:24:3e:25:03:5c:06:aa:6c:ca:6e:eb: d2:d7:bf:af:f0:99:e0:34:fc:d2:a1:49:f3:ac:12:f8:d0:04: 8e:d4:a8:8c:90:68:b0:86:a9:da:ab:ff:95:6f:ce:f2:b1:e8: 21:d7:c5:ba:a7:01:11:a4:c5:40:c5:52:81:db:57:51:2b:c6: d8:10:30:01:15:6c:94:c0:f1:cf:62:9a:48:db:91:ef:c8:a2: 7b:57:2a:ad:26:13:b0:27:dc:97:06:04:1a:c7:aa:cf:d3:16: b5:c0:a6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwqHae/TTvffVFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODY4MjEtNGU0Ni00NjcyLWI1N2UtMmZkNTBkZmU2 MjhiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzQzOGJkNTQtZDczMS00YTk5LWE1M2EtYzllYzFiMWNiMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLd0On2gadKMkjTAsl/4RuoVVi0HtOREy9G/ YSiA3AOs5IW2G23QuzTeblwdZGC5G7h916Jx8qS+dnBudzFf1IxgI/FnzMO9FcNc 4KHLp1YUpfbpJRBO5Hkgy/v20pNvVkgGShLW1waLi4Nrtk1VyQzvPHubCUcDovEw 0KnEBgMii+hlap/2D0r0aFXwuOk2VJaQOA4gQLlgNfsXJoD/BdkWql4JOHpz8N2c avPCFCIts4B0jJZ/XwnPjK6otYiAI616U5PRyMR4xl25/Ol70RmusgF/4mQ4yBah wezeYhrmjQtmSYcP6pjqRRXnfrYCdjAPj9q76JbvM3eKOG5PeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjMWQsmobcCZDfUSvPvve5xAGc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRmZTYyOGIvNzE1MjFlMzItODJmMS0z NDFmLTkwZmEtNmNhNDYxOGFiZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODY4MjEtNGU0Ni00NjcyLWI1 N2UtMmZkNTBkZmU2MjhiL2UzZjg2ODIxLTRlNDYtNDY3Mi1iNTdlLTJmZDUwZGZl NjI4Yi5jcmwwHwYDVR0jBBgwFoAUXdUTonSTxXSJWxKK2jrVJSPhl2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1 MGRmZTYyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCofr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGviu/L+PhkD55PIUXFrO2aZPmxCotUPsqhJB/w7NY+d68Vlik9bzDvY cp/OrlEYF2N+ay3a8L4rrM4K1UwIxcsX69avPcrzZE/Gw7yWzOUhm7KjjfvTsiWE 7Yw8ZWYM5DX3+JuxojTTnoWgpOOubgT4mewuTbfRD8rALXF4Cn9fVX+tU29eWrOv 5csM39K0M6LrvpR/Ys4kPiUDXAaqbMpu69LXv6/wmeA0/NKhSfOsEvjQBI7UqIyQ aLCGqdqr/5VvzvKx6CHXxbqnARGkxUDFUoHbV1ErxtgQMAEVbJTA8c9imkjbke/I ontXKq0mE7An3JcGBBrHqs/TFrXApiU= -----END CERTIFICATE-----Generated at Sat Oct 10 06:34:59 2026 by rpki-client