$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa File: 8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa (raw, json) Hash identifier: y/QbkQL/pz/5N61ILk+BK77OxeV8Xf0LMq8w/06qmrI= Subject key identifier: C0:6D:6B:B6:65:A9:39:96:3C:E6:21:0B:7B:C2:69:5C:C5:CE:4D:D6 Certificate issuer: /CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Certificate serial: 010D0C9F4328584F49735B8CBE1FAD81AAB221A0 Authority key identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15830 IP address blocks: 161.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5b:8c:be:1f:ad:81:aa:b2:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c86db15c-06f7-47ea-a445-e06cc0dbfbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:0f:b8:89:cf:dc:0d:0a:64:7b:c9:66:40: c7:51:4e:da:f1:58:62:99:29:d1:ab:b8:86:2c:4b: 11:9b:4d:e8:87:78:c3:ce:21:29:58:b1:4b:39:26: 18:36:0a:81:35:57:f8:23:ff:a2:97:4b:28:98:3f: f7:57:e3:d2:51:bc:28:ba:31:ac:96:3b:a6:4a:dc: 8e:8c:98:3d:68:f7:07:c6:0d:c4:28:6e:4d:df:a7: 24:45:8a:32:56:fe:56:a5:17:2f:6a:5b:9c:ea:2c: 01:ca:75:54:9d:70:d9:62:3f:0e:51:21:e7:77:1f: e3:45:0b:fe:d4:a2:15:5a:ac:4a:6b:be:10:b0:c0: a0:21:e6:84:4a:cd:7c:38:51:1e:e9:96:b0:ad:c4: c4:2c:35:1a:a6:1c:42:01:b2:e8:57:80:55:16:4d: ba:f1:f8:27:e2:f9:91:70:55:96:95:4a:42:98:69: f3:20:e1:fe:a8:ba:f6:09:5b:9d:30:e4:66:7d:6b: 02:da:a9:10:b6:63:26:41:23:e3:fd:b3:e5:43:a1: 6c:a1:c0:46:6c:8e:d8:ed:62:2d:63:32:33:64:8a: 09:5f:f4:14:4c:d2:41:2f:b8:94:20:6d:aa:d7:e2: e9:b6:32:9b:c0:fb:c2:df:1d:92:a2:2d:20:a5:1c: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:6B:B6:65:A9:39:96:3C:E6:21:0B:7B:C2:69:5C:C5:CE:4D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl X509v3 Authority Key Identifier: keyid:5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer sbgp-ipAddrBlock: critical IPv4: 161.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b5:a0:dd:e2:7d:83:ef:50:3d:46:0e:0f:e9:d8:58:54:a1: c4:0b:41:90:86:e6:91:c2:6d:11:fb:42:e9:36:81:57:0e:e6: a3:85:a0:27:ac:b8:7d:7b:05:f4:1d:05:7f:23:35:bb:10:af: 13:65:af:fb:a9:2a:8c:7d:a8:75:d6:b3:f0:d0:14:99:d1:7e: e0:b0:2e:94:00:bf:a1:02:dc:ce:c9:96:24:8f:d0:f4:c7:75: 1c:75:f2:6c:80:d7:8c:f5:b2:68:44:24:2b:b9:d4:8e:38:63: 60:84:74:1c:c2:ae:e1:92:bd:ee:3b:54:16:8e:80:99:26:8b: d4:bd:ed:0f:d4:f1:98:c3:85:4c:5f:e2:e7:70:6d:c9:0a:dd: e3:ae:8d:96:92:d9:19:58:b8:28:91:ba:5f:d6:20:2e:68:fa: e6:fe:73:27:69:22:42:f2:a5:c1:1b:01:7a:a2:c9:8f:26:d8: 03:b9:8d:5d:0a:ca:d1:b1:1a:78:d0:0b:db:5f:8a:65:cf:8f: a2:cb:3d:de:f9:ca:bd:04:ef:65:eb:34:77:d5:5c:21:fc:64: cd:bf:b8:2b:27:05:3f:8d:f9:cb:b8:f0:2e:ad:7a:b1:bd:91: 49:44:38:c4:c0:3f:9f:48:82:76:e6:16:b7:24:32:ab:90:77: 92:ff:b1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1uMvh+tgaqyIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODY4MjEtNGU0Ni00NjcyLWI1N2UtMmZkNTBkZmU2 MjhiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg2ZGIxNWMtMDZmNy00N2VhLWE0NDUtZTA2Y2MwZGJmYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8kPuInP3A0KZHvJZkDHUU7a8VhimSnRq7iG LEsRm03oh3jDziEpWLFLOSYYNgqBNVf4I/+il0somD/3V+PSUbwoujGsljumStyO jJg9aPcHxg3EKG5N36ckRYoyVv5WpRcvaluc6iwBynVUnXDZYj8OUSHndx/jRQv+ 1KIVWqxKa74QsMCgIeaESs18OFEe6ZawrcTELDUaphxCAbLoV4BVFk268fgn4vmR cFWWlUpCmGnzIOH+qLr2CVudMORmfWsC2qkQtmMmQSPj/bPlQ6FsocBGbI7Y7WIt YzIzZIoJX/QUTNJBL7iUIG2q1+LptjKbwPvC3x2Soi0gpRy67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBta7ZlqTmWPOYhC3vCaVzFzk3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRmZTYyOGIvOGJiYTRmNjktMzlhMy0z YTBkLTkxOWItZWNjNGRjOThmNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODY4MjEtNGU0Ni00NjcyLWI1 N2UtMmZkNTBkZmU2MjhiL2UzZjg2ODIxLTRlNDYtNDY3Mi1iNTdlLTJmZDUwZGZl NjI4Yi5jcmwwHwYDVR0jBBgwFoAUXdUTonSTxXSJWxKK2jrVJSPhl2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1 MGRmZTYyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCofr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC21oN3ifYPvUD1GDg/p2FhUocQLQZCG5pHCbRH7Quk2gVcO5qOFoCes uH17BfQdBX8jNbsQrxNlr/upKox9qHXWs/DQFJnRfuCwLpQAv6EC3M7JliSP0PTH dRx18myA14z1smhEJCu51I44Y2CEdBzCruGSve47VBaOgJkmi9S97Q/U8ZjDhUxf 4udwbckK3eOujZaS2RlYuCiRul/WIC5o+ub+cydpIkLypcEbAXqiyY8m2AO5jV0K ytGxGnjQC9tfimXPj6LLPd75yr0E72XrNHfVXCH8ZM2/uCsnBT+N+cu48C6terG9 kUlEOMTAP59IgnbmFrckMquQd5L/se4= -----END CERTIFICATE-----Generated at Fri Oct 9 20:02:46 2026 by rpki-client