$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa File: 71521e32-82f1-341f-90fa-6ca4618abeb3.roa (raw, json) Hash identifier: BsqXZaa6Ev4Y7EVBG/PifQzQOmR0Bp7RzNRvbfD2DFU= Subject key identifier: 4C:82:F9:07:B1:05:16:32:8D:3A:9B:60:FA:72:B7:76:EF:4C:22:17 Certificate issuer: /CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Certificate serial: 010D0C9F4328584EA787124A7B5F2F57698A5180 Authority key identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401956 IP address blocks: 161.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:12:4a:7b:5f:2f:57:69:8a:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=897d21a6-7e1d-41a9-93eb-4e1e021af8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:3b:9e:a0:08:bd:13:02:d5:52:4e:a8:7d: d2:70:83:01:e1:f8:fa:14:97:ac:6d:e5:e3:9f:4d: eb:6b:e3:e1:6e:ae:78:9d:57:a2:8f:7b:cc:12:d7: 8e:55:2f:de:92:56:ca:78:a9:4c:62:a1:69:da:1b: a8:a6:fa:4d:d1:00:9e:9a:45:79:30:12:54:58:03: 73:69:be:b8:ae:23:de:84:a1:e5:09:5c:b4:c1:3d: f8:93:40:9d:48:9a:23:e9:92:7b:01:43:50:da:d0: b1:29:b4:66:67:a1:2b:39:be:d2:3c:dd:d0:49:cc: 93:9e:17:b6:6b:8b:de:7a:b9:14:21:be:57:81:c6: 5f:7c:58:64:15:a6:89:2b:23:80:19:d7:32:30:31: f6:27:5f:8c:69:50:95:42:f6:01:6d:27:ba:01:56: e0:4f:b8:13:3f:35:88:4d:71:cc:bb:2f:8b:4f:c1: 22:67:d9:af:9c:5d:19:8e:f2:e9:22:95:90:30:a7: d5:32:55:09:6b:6d:92:a4:d3:44:96:29:3d:8e:55: 3d:59:3f:4a:c1:b0:d4:ae:33:95:56:5a:f5:5b:db: e7:9b:b7:8b:1e:11:e4:28:ab:49:1b:4b:4c:6d:13: d1:d1:26:f0:8c:f0:30:e0:23:a6:a9:7b:f7:73:94: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:F9:07:B1:05:16:32:8D:3A:9B:60:FA:72:B7:76:EF:4C:22:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/71521e32-82f1-341f-90fa-6ca4618abeb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl X509v3 Authority Key Identifier: keyid:5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer sbgp-ipAddrBlock: critical IPv4: 161.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b6:cc:0b:b2:8c:c7:eb:ee:93:17:d5:41:4d:44:c0:69:55: 76:49:f3:60:f8:47:a5:5b:22:85:a8:64:70:31:42:43:65:dd: cb:d5:f4:a0:2d:38:07:6f:ea:10:82:54:8d:9a:fb:fe:a7:41: de:2a:31:7e:23:c0:f0:cf:c1:71:60:f6:97:4d:7e:db:b8:e0: 74:1c:ad:2b:f0:19:96:b8:a3:58:6a:48:5e:a4:be:16:85:c0: cd:b4:5f:bd:82:54:0a:ce:0c:cd:55:0c:49:1d:98:d5:20:12: 1c:24:40:b8:ea:09:e0:37:67:22:0c:b8:39:bc:23:6c:d1:74: 8a:e9:86:b0:21:fd:02:4d:0c:9d:eb:5a:0f:ce:f1:26:dc:20: bd:ab:cc:7f:94:f9:81:2f:f7:dd:22:79:e5:7a:ae:e1:ba:a3: 29:70:bf:5c:ae:db:38:d5:c1:89:62:6a:98:a8:03:b0:2a:dd: 14:69:09:ee:d3:3a:b5:f9:5e:a5:fb:5b:f1:cb:24:68:1e:f7: 6b:f0:ad:9f:b8:5b:a0:10:ff:b1:fd:aa:3d:f7:35:4a:0d:76: 83:05:77:f4:7f:90:e7:8f:fc:c2:cf:03:71:3d:6b:ac:86:d8: 05:e5:c3:76:ee:eb:bc:de:9f:52:15:86:ca:38:80:5a:d8:94: 56:53:83:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxJKe18vV2mKUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODY4MjEtNGU0Ni00NjcyLWI1N2UtMmZkNTBkZmU2 MjhiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODk3ZDIxYTYtN2UxZC00MWE5LTkzZWItNGUxZTAyMWFmOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz87nqAIvRMC1VJOqH3ScIMB4fj6FJesbeXj n03ra+Phbq54nVeij3vMEteOVS/eklbKeKlMYqFp2huopvpN0QCemkV5MBJUWANz ab64riPehKHlCVy0wT34k0CdSJoj6ZJ7AUNQ2tCxKbRmZ6ErOb7SPN3QScyTnhe2 a4veerkUIb5XgcZffFhkFaaJKyOAGdcyMDH2J1+MaVCVQvYBbSe6AVbgT7gTPzWI TXHMuy+LT8EiZ9mvnF0ZjvLpIpWQMKfVMlUJa22SpNNElik9jlU9WT9KwbDUrjOV Vlr1W9vnm7eLHhHkKKtJG0tMbRPR0SbwjPAw4COmqXv3c5T/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyC+QexBRYyjTqbYPpyt3bvTCIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRmZTYyOGIvNzE1MjFlMzItODJmMS0z NDFmLTkwZmEtNmNhNDYxOGFiZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODY4MjEtNGU0Ni00NjcyLWI1 N2UtMmZkNTBkZmU2MjhiL2UzZjg2ODIxLTRlNDYtNDY3Mi1iNTdlLTJmZDUwZGZl NjI4Yi5jcmwwHwYDVR0jBBgwFoAUXdUTonSTxXSJWxKK2jrVJSPhl2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1 MGRmZTYyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCofr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm2zAuyjMfr7pMX1UFNRMBpVXZJ82D4R6VbIoWoZHAxQkNl3cvV9KAt OAdv6hCCVI2a+/6nQd4qMX4jwPDPwXFg9pdNftu44HQcrSvwGZa4o1hqSF6kvhaF wM20X72CVArODM1VDEkdmNUgEhwkQLjqCeA3ZyIMuDm8I2zRdIrphrAh/QJNDJ3r Wg/O8SbcIL2rzH+U+YEv990ieeV6ruG6oylwv1yu2zjVwYliapioA7Aq3RRpCe7T OrX5XqX7W/HLJGge92vwrZ+4W6AQ/7H9qj33NUoNdoMFd/R/kOeP/MLPA3E9a6yG 2AXlw3bu67zen1IVhso4gFrYlFZTg24= -----END CERTIFICATE-----Generated at Fri Aug 21 02:49:15 2026 by rpki-client