$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/10ce6647-60e1-309a-8eff-5acc52a646c3.roa File: 10ce6647-60e1-309a-8eff-5acc52a646c3.roa (raw, json) Hash identifier: zCDu92LuNpWQxGkpNnYOgHV6Ha0x6krnSTw8m+UoM2U= Subject key identifier: A6:02:D5:4E:3A:86:D5:F0:44:AF:87:FA:A1:22:9C:E6:DC:DD:3F:DD Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584FA163183555AFF9908B285100 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/10ce6647-60e1-309a-8eff-5acc52a646c3.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 198566 IP address blocks: 162.251.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:18:35:55:af:f9:90:8b:28:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=0c39fda0-c68d-4f1e-b0b2-2e0615b057d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:7d:f1:33:81:fe:24:f0:63:c8:e2:1f:d8: 2f:93:ad:89:b3:46:43:10:d6:91:32:a6:6b:6f:77: bd:69:da:2e:0e:6d:c0:06:ee:60:31:1e:8c:27:9c: 07:49:c8:2d:f9:81:f4:74:12:62:17:f5:46:79:c4: 57:ca:93:0b:75:7c:e5:76:ce:63:bb:c2:64:bb:a1: 7b:e3:10:af:a4:1e:a5:2d:2d:cf:5d:e3:9c:e7:5f: 1d:54:28:e5:4e:f0:1e:2c:53:de:85:22:45:c0:5e: 9e:70:02:a5:cc:d0:14:0d:7d:b5:b7:21:f7:a1:97: 87:aa:b2:b1:8a:d4:ee:f2:e7:74:eb:fa:59:cc:08: 0a:b5:f5:cd:1a:c2:fd:02:f0:0e:3a:e8:ab:6d:80: 02:31:dc:7e:db:1a:e3:a0:79:89:94:5f:3b:b4:2c: 16:71:a4:a2:57:c7:cf:1f:25:05:36:b8:02:67:ff: d0:67:9e:6b:1e:6c:6c:af:36:da:56:ab:dd:c7:52: 65:12:a8:71:9e:36:c7:28:21:9e:61:c9:a7:57:9a: c7:34:6c:6f:5b:ea:b4:2e:0f:6d:d2:3d:6c:e7:a6: 3d:44:24:b2:04:fb:62:29:f4:ad:af:ca:33:e1:3f: 98:98:9b:22:eb:0b:31:bc:de:ed:5b:47:10:58:61: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:D5:4E:3A:86:D5:F0:44:AF:87:FA:A1:22:9C:E6:DC:DD:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/10ce6647-60e1-309a-8eff-5acc52a646c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.251.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:62:e0:48:1c:8f:0b:a6:78:94:49:63:6d:bf:92:c4:6b:b4: aa:c2:68:76:a6:2f:c5:94:d0:0b:ee:aa:eb:ae:1f:60:52:96: cf:91:ab:c8:fb:f4:9a:46:c7:37:1e:67:58:02:fd:2b:c8:1a: 32:59:5f:a7:04:f8:86:cc:51:75:42:d5:34:e6:dd:49:98:3d: a2:f9:d6:a5:9e:b5:06:e2:0a:3b:e2:7d:da:03:0e:26:4b:2f: 41:91:c5:12:f3:95:60:17:e0:c3:59:13:ae:db:b6:db:d0:5a: 4f:7b:0f:ed:56:90:3e:8d:a1:ce:bc:83:f7:b7:9a:c3:15:40: de:08:10:68:87:1c:1c:9b:9a:31:3a:f7:7f:45:d1:54:0c:75: b5:cd:38:5c:c5:f5:22:63:b8:a6:41:9e:1c:11:30:71:21:a1: f7:d5:e8:5a:56:39:ba:7e:8d:19:42:86:71:79:d6:c8:75:a6: 54:66:63:d3:5c:d2:69:1c:7c:b5:00:bd:7e:fc:1e:1b:2a:b0: 0a:88:56:fa:8f:ad:09:48:6a:7a:e0:0a:32:e0:b3:b9:34:25: ae:fa:c8:8b:37:16:57:3d:1a:f6:0c:85:a7:62:de:7e:51:6c: 4d:70:b1:42:ba:47:a2:7c:e4:83:20:0b:14:f5:c5:e0:2e:87: 42:48:cd:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYxg1Va/5kIsoUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk MGMzOWZkYTAtYzY4ZC00ZjFlLWIwYjItMmUwNjE1YjA1N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirR98TOB/iTwY8jiH9gvk62Js0ZDENaRMqZr b3e9adouDm3ABu5gMR6MJ5wHScgt+YH0dBJiF/VGecRXypMLdXzlds5ju8Jku6F7 4xCvpB6lLS3PXeOc518dVCjlTvAeLFPehSJFwF6ecAKlzNAUDX21tyH3oZeHqrKx itTu8ud06/pZzAgKtfXNGsL9AvAOOuirbYACMdx+2xrjoHmJlF87tCwWcaSiV8fP HyUFNrgCZ//QZ55rHmxsrzbaVqvdx1JlEqhxnjbHKCGeYcmnV5rHNGxvW+q0Lg9t 0j1s56Y9RCSyBPtiKfStr8oz4T+YmJsi6wsxvN7tW0cQWGGP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYC1U46htXwRK+H+qEinObc3T/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMTBjZTY2NDctNjBlMS0z MDlhLThlZmYtNWFjYzUyYTY0NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABi4EgcjwumeJRJY22/ksRrtKrCaHamL8WU0AvuquuuH2BSls+Rq8j7 9JpGxzceZ1gC/SvIGjJZX6cE+IbMUXVC1TTm3UmYPaL51qWetQbiCjvifdoDDiZL L0GRxRLzlWAX4MNZE67bttvQWk97D+1WkD6Noc68g/e3msMVQN4IEGiHHBybmjE6 939F0VQMdbXNOFzF9SJjuKZBnhwRMHEhoffV6FpWObp+jRlChnF51sh1plRmY9Nc 0mkcfLUAvX78HhsqsAqIVvqPrQlIanrgCjLgs7k0Ja76yIs3Flc9GvYMhadi3n5R bE1wsUK6R6J85IMgCxT1xeAuh0JIzVs= -----END CERTIFICATE-----Generated at Wed Oct 28 12:51:44 2026 by rpki-client