$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/ab9e2827-4a1f-3670-8d18-6f80e037c3b4.roa File: ab9e2827-4a1f-3670-8d18-6f80e037c3b4.roa (raw, json) Hash identifier: b6u+QSAiv0S9zCcLt/QkIW7SUve1/ml6kaWnU/Janbc= Subject key identifier: 58:80:93:29:EA:B0:AB:6F:A2:26:7A:53:66:EB:00:14:11:3C:AA:D5 Certificate issuer: /CN=4d4e7d5c-55ee-4e50-a203-b95963b37947 Certificate serial: 010D0C9F4328584F7287306666BF97A5B578F830 Authority key identifier: 02:C6:E6:67:9B:AC:02:64:BA:1A:C6:5D:A9:B4:44:FD:64:46:49:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/ab9e2827-4a1f-3670-8d18-6f80e037c3b4.roa Signing time: Fri 09 Oct 2026 18:09:59 +0000 ROA not before: Fri 09 Oct 2026 18:09:59 +0000 ROA not after: Thu 07 Jan 2027 19:09:59 +0000 asID: 396982 IP address blocks: 162.252.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/4d4e7d5c-55ee-4e50-a203-b95963b37947.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/4d4e7d5c-55ee-4e50-a203-b95963b37947.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:87:30:66:66:bf:97:a5:b5:78:f8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4e7d5c-55ee-4e50-a203-b95963b37947 Validity Not Before: Oct 9 18:09:59 2026 GMT Not After : Jan 7 19:09:59 2027 GMT Subject: CN=e6ab2a64-5425-46ee-b3bb-71e53e47cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:00:d6:b3:64:9e:87:f2:97:cd:b5:46:19: 60:97:b1:94:cb:56:68:6a:3b:7f:cc:63:c0:02:ab: 2c:6d:f9:30:0b:d4:bb:c5:c1:be:53:da:55:b0:21: 6d:8e:ac:92:b2:2b:99:4e:07:2d:44:bf:73:51:d4: c8:ae:83:6c:31:eb:06:36:04:fa:05:dd:af:84:59: 4a:b5:1f:96:88:26:10:89:1b:43:73:8f:66:85:03: 1d:86:0f:8b:ea:e1:00:d8:b3:f4:d4:d8:34:65:44: 51:1c:4c:6f:d1:75:39:98:d5:2c:58:73:f5:52:ec: 0b:c5:d5:c4:f1:67:6a:24:77:7b:1d:ba:08:3c:66: b5:a3:a6:67:7f:47:de:9f:8b:80:da:68:19:97:6a: 61:1e:cb:14:da:17:62:b7:bd:37:87:06:e4:55:04: a6:68:51:4c:35:48:ed:1e:ac:38:16:3d:08:47:09: d8:5c:74:d5:9d:f3:4c:6d:be:31:66:75:9b:03:0f: 19:d3:60:2b:5f:54:a1:4e:46:1e:e4:35:14:8c:f3: d4:1f:4e:42:b0:3f:ca:60:80:01:c7:6d:8a:3c:f5: 1e:dd:93:d6:2a:05:47:2e:f1:73:97:0e:d0:85:da: 23:26:b9:b3:1b:6b:93:f4:29:31:ff:49:29:ea:dc: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:80:93:29:EA:B0:AB:6F:A2:26:7A:53:66:EB:00:14:11:3C:AA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/ab9e2827-4a1f-3670-8d18-6f80e037c3b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/4d4e7d5c-55ee-4e50-a203-b95963b37947.crl X509v3 Authority Key Identifier: keyid:02:C6:E6:67:9B:AC:02:64:BA:1A:C6:5D:A9:B4:44:FD:64:46:49:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947.cer sbgp-ipAddrBlock: critical IPv4: 162.252.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e7:c9:fa:ca:c2:c5:0f:9d:f2:5f:63:a1:8a:50:f0:d7:d6: 9b:e5:86:81:7d:e4:52:fa:4e:11:70:82:22:fb:69:72:6d:53: 4e:bd:32:18:c7:57:3f:22:b7:99:92:fd:9c:74:94:85:42:b3: 7d:22:b7:6d:2f:5e:b2:21:d4:36:5c:86:22:45:cd:93:2c:80: 41:9d:8a:3e:0e:05:b5:39:aa:20:bd:4b:b5:da:dc:b3:03:40: 9a:6d:91:bc:ce:db:ae:e7:70:a1:17:ff:36:fa:30:03:b5:c3: 35:18:29:8f:26:9a:b4:73:26:be:6f:39:6e:a5:8a:9a:77:fa: 45:af:b4:a0:c0:14:33:6f:79:cb:60:ec:72:03:3b:09:ae:21: 7e:02:fd:9b:f8:6f:b5:39:77:4a:fc:bc:40:c3:14:51:6f:47: 5f:8c:ed:ac:4a:bf:53:d4:42:78:0c:06:75:6b:93:48:0d:05: ca:a5:a9:d7:7f:57:77:d1:86:be:b0:bd:2f:f5:4b:19:1e:81: 12:d0:c1:bf:0d:df:5e:15:93:6c:fe:f1:77:1c:5c:5d:a8:0f: de:6d:a6:4f:c2:77:82:00:23:a7:5b:e1:b6:fc:24:fc:a5:51: 71:2a:57:f7:4f:1b:3d:88:0a:3f:bb:25:1d:98:54:2b:48:6e: a3:5f:1a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yhzBmZr+XpbV4+DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0ZTdkNWMtNTVlZS00ZTUwLWEyMDMtYjk1OTYzYjM3 OTQ3MB4XDTI2MTAwOTE4MDk1OVoXDTI3MDEwNzE5MDk1OVowLzEtMCsGA1UEAxMk ZTZhYjJhNjQtNTQyNS00NmVlLWIzYmItNzFlNTNlNDdjYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKYA1rNknofyl821Rhlgl7GUy1Zoajt/zGPA AqssbfkwC9S7xcG+U9pVsCFtjqySsiuZTgctRL9zUdTIroNsMesGNgT6Bd2vhFlK tR+WiCYQiRtDc49mhQMdhg+L6uEA2LP01Ng0ZURRHExv0XU5mNUsWHP1UuwLxdXE 8WdqJHd7HboIPGa1o6Znf0fen4uA2mgZl2phHssU2hdit703hwbkVQSmaFFMNUjt Hqw4Fj0IRwnYXHTVnfNMbb4xZnWbAw8Z02ArX1ShTkYe5DUUjPPUH05CsD/KYIAB x22KPPUe3ZPWKgVHLvFzlw7QhdojJrmzG2uT9Ckx/0kp6twxEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiAkynqsKtvoiZ6U2brABQRPKrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80ZDRl N2Q1Yy01NWVlLTRlNTAtYTIwMy1iOTU5NjNiMzc5NDcvYWI5ZTI4MjctNGExZi0z NjcwLThkMTgtNmY4MGUwMzdjM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNGQ0ZTdkNWMtNTVlZS00ZTUwLWEy MDMtYjk1OTYzYjM3OTQ3LzRkNGU3ZDVjLTU1ZWUtNGU1MC1hMjAzLWI5NTk2M2Iz Nzk0Ny5jcmwwHwYDVR0jBBgwFoAUAsbmZ5usAmS6GsZdqbRE/WRGSXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80ZDRlN2Q1Yy01NWVlLTRlNTAtYTIwMy1iOTU5 NjNiMzc5NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovzDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTnyfrKwsUPnfJfY6GKUPDX1pvlhoF95FL6ThFwgiL7aXJtU069MhjH Vz8it5mS/Zx0lIVCs30it20vXrIh1DZchiJFzZMsgEGdij4OBbU5qiC9S7Xa3LMD QJptkbzO267ncKEX/zb6MAO1wzUYKY8mmrRzJr5vOW6lipp3+kWvtKDAFDNvectg 7HIDOwmuIX4C/Zv4b7U5d0r8vEDDFFFvR1+M7axKv1PUQngMBnVrk0gNBcqlqdd/ V3fRhr6wvS/1SxkegRLQwb8N314Vk2z+8XccXF2oD95tpk/Cd4IAI6db4bb8JPyl UXEqV/dPGz2ICj+7JR2YVCtIbqNfGjw= -----END CERTIFICATE-----Generated at Thu Nov 5 02:42:40 2026 by rpki-client