$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa File: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (raw, json) Hash identifier: IExEmUzW31eGpG9AtA118wBPJGYCmUNeRiPmSQbb4ZQ= Subject key identifier: 2C:E6:53:8B:25:CE:19:0B:DF:8A:F9:E2:F5:B1:45:B0:5D:1F:8F:B5 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584FA85DF980DFD13F287B50FC28 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 2650 IP address blocks: 165.119.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f9:80:df:d1:3f:28:7b:50:fc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=4b6eedba-100d-4003-8431-2c25cf62feaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:30:4a:4a:a7:21:3d:c7:83:90:f3:4b:61: 2d:c4:f8:80:39:32:98:da:cc:26:c9:f5:d6:a5:7d: 95:1b:75:43:3f:c7:b6:fb:2d:42:55:b3:c3:7e:d3: 58:09:96:3f:6d:e6:34:3f:b4:3b:69:5f:4e:46:ac: d6:ad:58:f0:96:36:4b:f8:f6:7d:93:70:f2:90:aa: bd:a0:d0:38:39:b0:4e:9b:c6:0c:ae:1b:7b:7d:27: 7c:fb:c4:d7:7c:ff:99:b3:bd:a4:f4:30:51:69:38: 1a:2a:62:87:95:2c:3e:d9:95:04:31:c2:f4:6f:cc: a6:8e:41:4b:12:8b:a5:34:ba:99:ec:d3:86:fc:cc: f2:13:7f:78:da:bd:ae:41:42:69:65:70:54:c1:84: 18:ad:c8:6a:94:f5:48:4f:97:f0:46:98:e6:f5:a0: 0c:a7:1b:d2:67:a5:b6:31:3d:c5:ce:3b:ce:5c:ef: 0b:74:3a:49:86:7b:44:9b:b2:ad:d4:c7:be:66:30: 14:6b:92:6a:b6:c7:9e:a6:05:c3:fd:ed:d2:8c:b6: d6:c3:19:3d:55:8a:61:bf:af:3a:81:be:03:45:4c: 67:c8:6b:ed:8a:5f:a0:74:9e:a0:ff:7f:b8:7f:1b: cb:a1:f6:fd:f5:ad:f9:b7:8b:ac:b6:d3:55:47:76: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:53:8B:25:CE:19:0B:DF:8A:F9:E2:F5:B1:45:B0:5D:1F:8F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 165.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:29:6e:41:4b:72:dc:f6:d1:6c:ab:d8:ae:5c:2c:f7:3a: 92:85:6f:a7:49:1d:a2:65:12:aa:ca:c4:c1:8c:25:26:a6:4e: 15:27:4d:a2:d7:a7:c2:d8:f8:8d:ad:da:ea:6e:b8:30:14:d0: 2e:10:35:d9:25:e3:f8:49:04:71:fc:f9:34:05:1e:7f:14:0a: 2b:8a:67:80:1f:73:8e:c4:ae:3c:88:13:8c:aa:95:64:a2:10: b2:68:e1:04:3f:84:6a:d3:5d:1c:ec:72:9c:2c:0d:76:cd:7d: 4a:2f:58:8c:43:9c:69:78:7c:ae:39:81:3a:31:b7:3b:69:b6: 8c:9c:e9:fc:0d:b1:a8:5f:6e:3a:ba:d8:02:7f:a3:de:71:6e: 6d:5b:c8:34:bf:d4:e6:8f:2b:4e:0e:88:53:2a:e2:65:dc:dc: 14:fc:ec:e5:39:c3:e9:49:e7:f1:7c:16:96:ef:b9:f7:ff:c7: 74:bd:48:fd:b8:b1:f0:23:c1:df:14:44:62:56:a5:6b:5a:b0: 02:93:db:81:be:59:db:68:e8:71:dc:dd:a5:ad:29:1d:b6:01: 62:37:60:cc:80:39:ba:1f:61:d4:fd:b3:ac:4c:b3:e5:a1:9c: 14:42:f3:44:30:74:78:dd:a1:81:96:47:83:5c:ec:68:52:b6: c4:f5:5b:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+oXfmA39E/KHtQ/CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NGI2ZWVkYmEtMTAwZC00MDAzLTg0MzEtMmMyNWNmNjJmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewwSkqnIT3Hg5DzS2EtxPiAOTKY2swmyfXW pX2VG3VDP8e2+y1CVbPDftNYCZY/beY0P7Q7aV9ORqzWrVjwljZL+PZ9k3DykKq9 oNA4ObBOm8YMrht7fSd8+8TXfP+Zs72k9DBRaTgaKmKHlSw+2ZUEMcL0b8ymjkFL EoulNLqZ7NOG/MzyE3942r2uQUJpZXBUwYQYrchqlPVIT5fwRpjm9aAMpxvSZ6W2 MT3FzjvOXO8LdDpJhntEm7Kt1Me+ZjAUa5JqtseepgXD/e3SjLbWwxk9VYphv686 gb4DRUxnyGvtil+gdJ6g/3+4fxvLofb99a35t4usttNVR3YuWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCzmU4slzhkL34r54vWxRbBdH4+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMGQ4Mjc0ZGEtMDcwMy0z ZDBhLWFiODctY2QxOTBmMGExMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApXcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPMIpbkFLctz20Wyr2K5cLPc6koVvp0kdomUSqsrEwYwlJqZOFSdNoten wtj4ja3a6m64MBTQLhA12SXj+EkEcfz5NAUefxQKK4pngB9zjsSuPIgTjKqVZKIQ smjhBD+EatNdHOxynCwNds19Si9YjEOcaXh8rjmBOjG3O2m2jJzp/A2xqF9uOrrY An+j3nFubVvINL/U5o8rTg6IUyriZdzcFPzs5TnD6Unn8XwWlu+59//HdL1I/bix 8CPB3xREYlala1qwApPbgb5Z22jocdzdpa0pHbYBYjdgzIA5uh9h1P2zrEyz5aGc FELzRDB0eN2hgZZHg1zsaFK2xPVbIg== -----END CERTIFICATE-----Generated at Mon Nov 2 07:29:22 2026 by rpki-client