$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/dd676fbe-5774-3dae-ab30-f335730b8bde.roa File: dd676fbe-5774-3dae-ab30-f335730b8bde.roa (raw, json) Hash identifier: 4cAz2EvaVMs5HxTVLN8+T9qgcLFztO2Gx7/Uy/iMKfM= Subject key identifier: EE:D7:D2:6D:24:80:8F:E0:C9:32:43:67:79:CD:06:69:35:5C:B3:46 Certificate issuer: /CN=ec84cc45-e44f-4542-a7f7-9a7ce3906c64 Certificate serial: 010D0C9F4328584F5665FD8E6D949A8CC682F680 Authority key identifier: 36:BA:A1:A1:D5:EB:B8:A4:D0:DC:43:FD:63:B6:A7:A9:50:51:87:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/dd676fbe-5774-3dae-ab30-f335730b8bde.roa Signing time: Tue 29 Sep 2026 16:20:28 +0000 ROA not before: Tue 29 Sep 2026 16:20:28 +0000 ROA not after: Mon 28 Dec 2026 17:20:28 +0000 asID: 33673 IP address blocks: 162.223.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:65:fd:8e:6d:94:9a:8c:c6:82:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec84cc45-e44f-4542-a7f7-9a7ce3906c64 Validity Not Before: Sep 29 16:20:28 2026 GMT Not After : Dec 28 17:20:28 2026 GMT Subject: CN=8de0cca4-cf01-49e3-a2b9-ef9d68989267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:96:cb:68:66:45:63:43:75:2b:fd:30:76: bb:c3:12:de:1c:c9:bb:e5:23:94:f4:f9:d6:6f:2c: c4:2c:98:ce:c7:45:b1:b7:84:a5:fd:23:26:df:ef: 34:e6:95:73:d9:15:e7:64:56:57:77:bb:e4:d5:79: 81:b4:2f:93:fb:68:1f:96:82:eb:d0:20:f9:9c:a1: 29:c0:a5:92:cf:20:21:42:c3:5c:18:97:22:f6:d3: 42:df:22:52:6a:0c:9e:95:6f:48:5c:f8:31:45:7c: 65:4a:55:91:a8:d6:97:ca:c3:59:25:62:d5:9f:da: c3:bd:83:69:54:b1:14:5a:56:52:19:c0:9a:39:eb: 8b:5f:c7:ee:7e:37:9c:db:84:27:ba:9b:10:db:5c: c3:08:4e:cd:89:cd:ab:fa:e3:57:2b:33:8e:4c:97: af:ac:fd:35:86:84:f3:f9:9a:88:71:ff:45:ad:3c: 4c:59:61:63:bc:77:85:db:85:79:8f:b8:20:8d:20: 86:9d:45:53:bd:e0:2e:b4:6d:5a:81:c1:06:ed:55: 8c:72:36:91:37:9c:0e:96:44:92:be:fc:6e:75:41: 39:38:69:96:a1:b8:7b:e5:6a:41:eb:19:14:77:08: 55:21:7b:89:b1:68:57:7e:e9:1c:b2:58:73:3d:23: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D7:D2:6D:24:80:8F:E0:C9:32:43:67:79:CD:06:69:35:5C:B3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/dd676fbe-5774-3dae-ab30-f335730b8bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.crl X509v3 Authority Key Identifier: keyid:36:BA:A1:A1:D5:EB:B8:A4:D0:DC:43:FD:63:B6:A7:A9:50:51:87:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.cer sbgp-ipAddrBlock: critical IPv4: 162.223.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2b:40:b4:ae:6c:ce:b4:69:02:72:25:ec:5c:a1:4e:99:0a: 30:72:7b:67:f3:2e:ad:fa:bc:3f:52:16:bf:9f:09:f8:d4:8b: 51:b7:bf:25:45:6f:e9:08:2c:5a:6b:29:c8:b1:51:a7:c0:80: 7c:af:ca:37:03:11:d5:a7:ec:db:56:d1:74:fe:ba:47:c4:3b: 95:8d:3e:a4:e1:39:4e:43:d4:2a:89:9c:46:42:26:2d:09:70: f5:0a:5e:49:f3:71:b6:fe:56:7d:ae:22:84:58:65:68:c1:46: eb:cd:af:2d:d4:52:6c:2e:8b:61:bb:8b:90:5c:23:54:20:fe: d6:99:1d:f3:b7:7b:9d:ef:d4:ff:72:fa:87:6d:63:ec:e5:f3: ec:ac:f2:1f:52:10:50:7a:df:78:37:fe:03:53:4c:15:29:3b: cf:8f:00:07:6d:80:af:91:dc:2b:8f:8f:c4:22:e1:6a:d5:86: cb:40:e7:9c:5d:cb:fd:66:75:f7:d9:9e:16:75:8f:d5:da:a7: 84:43:94:39:7b:57:0a:21:c9:0f:17:b9:6f:08:0b:37:6a:b7: fd:7d:49:9d:31:9c:15:a8:30:cf:2c:4a:f4:a1:d0:77:8d:90: 93:f4:93:b7:8f:32:ac:87:43:7c:ed:55:84:a6:ab:69:20:ae: 8b:37:8d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WZf2ObZSajMaC9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM4NGNjNDUtZTQ0Zi00NTQyLWE3ZjctOWE3Y2UzOTA2 YzY0MB4XDTI2MDkyOTE2MjAyOFoXDTI2MTIyODE3MjAyOFowLzEtMCsGA1UEAxMk OGRlMGNjYTQtY2YwMS00OWUzLWEyYjktZWY5ZDY4OTg5MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYyWy2hmRWNDdSv9MHa7wxLeHMm75SOU9PnW byzELJjOx0Wxt4Sl/SMm3+805pVz2RXnZFZXd7vk1XmBtC+T+2gfloLr0CD5nKEp wKWSzyAhQsNcGJci9tNC3yJSagyelW9IXPgxRXxlSlWRqNaXysNZJWLVn9rDvYNp VLEUWlZSGcCaOeuLX8fufjec24QnupsQ21zDCE7Nic2r+uNXKzOOTJevrP01hoTz +ZqIcf9FrTxMWWFjvHeF24V5j7ggjSCGnUVTveAutG1agcEG7VWMcjaRN5wOlkSS vvxudUE5OGmWobh75WpB6xkUdwhVIXuJsWhXfukcslhzPSPfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7X0m0kgI/gyTJDZ3nNBmk1XLNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lYzg0 Y2M0NS1lNDRmLTQ1NDItYTdmNy05YTdjZTM5MDZjNjQvZGQ2NzZmYmUtNTc3NC0z ZGFlLWFiMzAtZjMzNTczMGI4YmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZWM4NGNjNDUtZTQ0Zi00NTQyLWE3 ZjctOWE3Y2UzOTA2YzY0L2VjODRjYzQ1LWU0NGYtNDU0Mi1hN2Y3LTlhN2NlMzkw NmM2NC5jcmwwHwYDVR0jBBgwFoAUNrqhodXruKTQ3EP9Y7anqVBRh/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lYzg0Y2M0NS1lNDRmLTQ1NDItYTdmNy05YTdj ZTM5MDZjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUrQLSubM60aQJyJexcoU6ZCjBye2fzLq36vD9SFr+fCfjUi1G3vyVF b+kILFprKcixUafAgHyvyjcDEdWn7NtW0XT+ukfEO5WNPqThOU5D1CqJnEZCJi0J cPUKXknzcbb+Vn2uIoRYZWjBRuvNry3UUmwui2G7i5BcI1Qg/taZHfO3e53v1P9y +odtY+zl8+ys8h9SEFB633g3/gNTTBUpO8+PAAdtgK+R3CuPj8Qi4WrVhstA55xd y/1mdffZnhZ1j9Xap4RDlDl7VwohyQ8XuW8ICzdqt/19SZ0xnBWoMM8sSvSh0HeN kJP0k7ePMqyHQ3ztVYSmq2kgros3jbQ= -----END CERTIFICATE-----Generated at Wed Nov 4 04:15:00 2026 by rpki-client