$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/5121af0a-89e1-3c0c-8b73-b29df1a84c91.roa File: 5121af0a-89e1-3c0c-8b73-b29df1a84c91.roa (raw, json) Hash identifier: xstCCcTi4WYepr4ZxFVSLiVNGx/B58Tcd302/jgWS6k= Subject key identifier: 3E:8D:01:8A:F2:BB:C4:1F:2D:35:69:21:9C:F6:BD:5B:E4:76:40:7D Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F86DDB18278F37FE7A6780470 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/5121af0a-89e1-3c0c-8b73-b29df1a84c91.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 198949 IP address blocks: 162.222.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:b1:82:78:f3:7f:e7:a6:78:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=6ad4850f-4dda-4103-b484-e0dd5f5fa09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:a4:06:32:51:b5:7a:2a:ef:ca:95:1f:30: 44:f9:ac:1f:75:ab:8c:3e:ce:d0:dd:2b:ef:68:a8: 53:f4:0f:27:c7:10:42:0a:b7:d3:89:98:52:0b:c3: 30:6b:7e:4e:f8:43:ac:5a:b0:8f:bc:b5:af:58:d0: 15:46:8a:b3:4b:55:56:66:a9:4f:47:b7:a8:db:11: de:7b:2b:2a:36:62:82:c8:62:32:6f:a7:65:f1:95: 05:bc:14:f5:1c:9f:ad:cf:3d:a8:b4:c4:4f:ff:31: 33:1f:ed:09:97:ab:39:2d:1d:fb:09:bc:88:97:2d: 3d:1d:ce:df:d1:f6:ba:40:e1:c9:c7:93:16:d5:b0: ca:13:9d:01:23:5e:69:06:27:c2:82:0e:1b:17:47: 00:87:d9:74:13:02:28:fd:5f:4b:73:09:4b:32:04: 62:a7:12:59:12:ab:26:14:de:a9:f9:42:18:8f:0a: e0:06:7d:38:59:69:d7:1e:e4:f8:ac:57:d6:30:77: 12:12:27:b1:a7:0f:44:da:b1:73:e4:94:8a:1c:f7: 26:1c:97:15:f9:d3:ba:5b:77:9c:87:60:d7:f4:cb: 74:80:91:2f:60:cd:01:1b:b2:0d:0f:92:6d:b5:23: 5e:3a:5d:ac:f4:e6:74:ae:fe:e4:14:e2:c2:d1:c6: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:01:8A:F2:BB:C4:1F:2D:35:69:21:9C:F6:BD:5B:E4:76:40:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/5121af0a-89e1-3c0c-8b73-b29df1a84c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.222.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e6:9c:9f:0f:43:d6:8b:e8:64:25:42:db:5c:c7:0f:69:52: db:a4:51:3d:c9:f1:05:b9:9d:04:2c:31:a8:8a:c5:f2:bd:b7: 60:0d:62:ed:88:5d:18:6f:a8:e3:61:bf:2c:ec:f7:85:33:33: c2:60:21:a2:0b:6f:36:72:50:f0:33:93:1e:fe:ed:24:01:f0: 7c:11:a0:43:c1:35:cd:81:f9:cb:9c:8e:b8:e6:59:08:f9:57: 10:db:9b:ce:3e:0e:a0:d3:cb:c1:11:01:3a:bc:61:4f:84:2d: f9:0e:3b:53:e3:a5:81:bc:f3:6c:20:87:58:50:45:97:e2:cf: 7e:95:05:f0:ca:09:2b:99:93:ea:19:e0:f4:d7:61:83:93:c9: 4b:07:d0:86:98:32:13:aa:b2:1e:69:5f:a9:ca:cb:34:f8:7a: 74:a2:d8:aa:30:24:ba:ec:97:3f:88:16:87:57:bf:06:96:db: 14:61:83:9a:b1:31:47:cc:96:98:99:8a:b3:12:9d:32:da:0e: 1d:54:3a:ad:51:1f:c5:57:48:2c:c1:61:a3:a1:10:d2:f9:e7: 58:cd:58:f6:c6:4c:c9:6d:89:4b:88:f0:25:42:b3:96:04:2e: 37:bc:db:a7:ba:51:18:02:ca:25:63:ea:94:3a:42:9c:fd:bd: 78:eb:e4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3bGCePN/56Z4BHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk NmFkNDg1MGYtNGRkYS00MTAzLWI0ODQtZTBkZDVmNWZhMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOukBjJRtXoq78qVHzBE+awfdauMPs7Q3Svv aKhT9A8nxxBCCrfTiZhSC8Mwa35O+EOsWrCPvLWvWNAVRoqzS1VWZqlPR7eo2xHe eysqNmKCyGIyb6dl8ZUFvBT1HJ+tzz2otMRP/zEzH+0Jl6s5LR37CbyIly09Hc7f 0fa6QOHJx5MW1bDKE50BI15pBifCgg4bF0cAh9l0EwIo/V9LcwlLMgRipxJZEqsm FN6p+UIYjwrgBn04WWnXHuT4rFfWMHcSEiexpw9E2rFz5JSKHPcmHJcV+dO6W3ec h2DX9Mt0gJEvYM0BG7IND5JttSNeOl2s9OZ0rv7kFOLC0cYv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6NAYryu8QfLTVpIZz2vVvkdkB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvNTEyMWFmMGEtODllMS0z YzBjLThiNzMtYjI5ZGYxYTg0YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInmnJ8PQ9aL6GQlQttcxw9pUtukUT3J8QW5nQQsMaiKxfK9t2ANYu2I XRhvqONhvyzs94UzM8JgIaILbzZyUPAzkx7+7SQB8HwRoEPBNc2B+cucjrjmWQj5 VxDbm84+DqDTy8ERATq8YU+ELfkOO1PjpYG882wgh1hQRZfiz36VBfDKCSuZk+oZ 4PTXYYOTyUsH0IaYMhOqsh5pX6nKyzT4enSi2KowJLrslz+IFodXvwaW2xRhg5qx MUfMlpiZirMSnTLaDh1UOq1RH8VXSCzBYaOhENL551jNWPbGTMltiUuI8CVCs5YE Lje826e6URgCyiVj6pQ6Qpz9vXjr5EQ= -----END CERTIFICATE-----Generated at Tue Oct 27 16:42:49 2026 by rpki-client