$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/9a2c435b-0585-38f5-b9cb-38189c7506a8.roa File: 9a2c435b-0585-38f5-b9cb-38189c7506a8.roa (raw, json) Hash identifier: llSda62cjzmtIG2D+15IRQ3exUTNdSQ613dkJyXETuI= Subject key identifier: 71:10:74:27:37:D8:30:9C:89:29:7D:82:56:EB:1B:44:0E:5B:E8:B6 Certificate issuer: /CN=2e5139d2-c3bf-4b18-9616-d83f50a9f4e8 Certificate serial: 010D0C9F4328584F4AD7E18D5E5CFB5AA5E6E340 Authority key identifier: 87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/9a2c435b-0585-38f5-b9cb-38189c7506a8.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 399468 IP address blocks: 162.210.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e1:8d:5e:5c:fb:5a:a5:e6:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5139d2-c3bf-4b18-9616-d83f50a9f4e8 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=2b912ef3-892e-4100-aa20-af47cdb39ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:21:61:b9:74:ee:46:78:59:94:52:87:9e: 60:ed:ae:bf:a3:c4:8d:47:03:13:17:39:90:93:de: bb:66:49:8e:3e:2d:82:aa:9d:a9:b5:e7:56:41:be: 08:b4:6b:07:53:08:76:11:91:57:00:69:ab:ab:64: da:fa:c7:d3:05:71:11:1f:91:9e:24:8b:2a:7e:d0: 1a:5c:bc:c2:5f:b8:1d:80:da:f2:db:5f:8c:3f:d2: e2:d8:97:8f:88:fe:3e:da:fd:c4:63:90:7c:84:30: 61:36:49:2b:20:94:00:86:3e:72:cb:38:fa:29:ac: fa:d1:ce:8e:3e:9b:f4:d8:34:f3:31:ce:a8:00:79: ab:a9:19:8d:25:a2:f7:de:32:81:09:1d:ec:62:b2: 41:83:de:77:03:54:c0:7d:15:c6:48:d9:79:bb:3f: 27:ec:9b:9e:bb:e1:d2:6d:c3:cb:78:2d:3a:26:b0: b2:00:47:f2:39:ff:23:81:24:14:92:0a:c1:a8:00: 98:ff:d1:27:4b:9f:30:32:29:96:5e:38:e5:68:11: d9:cf:e3:1c:b7:6b:c5:b0:5e:78:01:d1:40:b2:42: f1:78:ac:c3:71:37:d2:48:cf:a3:91:81:23:4e:72: 5d:01:32:8a:dd:82:99:ab:f4:2d:b6:8a:d5:70:98: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:74:27:37:D8:30:9C:89:29:7D:82:56:EB:1B:44:0E:5B:E8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/9a2c435b-0585-38f5-b9cb-38189c7506a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.crl X509v3 Authority Key Identifier: keyid:87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer sbgp-ipAddrBlock: critical IPv4: 162.210.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f0:0e:c0:05:7f:67:92:28:a2:d8:3a:9c:15:a6:ca:8c:54: 25:42:4b:3b:6b:31:dd:11:af:f5:a4:99:51:0d:7f:41:64:87: 4f:23:42:c2:a1:86:c3:8b:f7:58:55:b3:78:cc:d6:53:37:3c: 51:61:a8:e0:b3:3e:b1:fe:ce:76:ef:a7:73:09:d9:ad:17:9a: f5:3c:09:a6:28:a4:14:2e:74:1a:f1:b5:97:0e:01:b6:8e:2f: 34:7b:8c:d6:c7:02:e8:02:72:66:17:6f:89:a7:8c:53:3b:bd: 31:f6:8a:b3:c8:84:5c:0a:23:01:90:78:80:23:c5:9a:8c:29: 10:48:3d:b4:49:03:3e:db:ca:be:67:20:45:21:b2:4d:89:0d: e4:39:df:08:e4:57:36:2a:5f:ed:ef:0f:47:2f:19:2f:61:9c: 99:a9:c4:f7:f3:e3:9f:48:39:5f:01:ed:f8:0f:cb:04:e1:05: 43:b4:fb:c0:15:d4:85:07:ec:1d:75:b6:8f:84:b0:fe:83:79: b3:9b:22:12:31:48:3a:c5:14:e3:92:fd:5d:aa:dd:e1:c8:d9: c2:e2:1e:92:e1:80:e4:b3:cc:42:9b:2f:89:29:f5:8c:27:9c: 88:49:ea:fe:36:0c:03:cf:ac:d6:81:59:a2:50:6e:30:09:2b: 85:48:18:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+GNXlz7WqXm40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1MTM5ZDItYzNiZi00YjE4LTk2MTYtZDgzZjUwYTlm NGU4MB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk MmI5MTJlZjMtODkyZS00MTAwLWFhMjAtYWY0N2NkYjM5YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinYhYbl07kZ4WZRSh55g7a6/o8SNRwMTFzmQ k967ZkmOPi2Cqp2ptedWQb4ItGsHUwh2EZFXAGmrq2Ta+sfTBXERH5GeJIsqftAa XLzCX7gdgNry21+MP9Li2JePiP4+2v3EY5B8hDBhNkkrIJQAhj5yyzj6Kaz60c6O Ppv02DTzMc6oAHmrqRmNJaL33jKBCR3sYrJBg953A1TAfRXGSNl5uz8n7Jueu+HS bcPLeC06JrCyAEfyOf8jgSQUkgrBqACY/9EnS58wMimWXjjlaBHZz+Mct2vFsF54 AdFAskLxeKzDcTfSSM+jkYEjTnJdATKK3YKZq/QttorVcJgEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEQdCc32DCciSl9glbrG0QOW+i2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTUx MzlkMi1jM2JmLTRiMTgtOTYxNi1kODNmNTBhOWY0ZTgvOWEyYzQzNWItMDU4NS0z OGY1LWI5Y2ItMzgxODljNzUwNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmU1MTM5ZDItYzNiZi00YjE4LTk2 MTYtZDgzZjUwYTlmNGU4LzJlNTEzOWQyLWMzYmYtNGIxOC05NjE2LWQ4M2Y1MGE5 ZjRlOC5jcmwwHwYDVR0jBBgwFoAUh6YcpACSpE1Hk8PZSADAKl3K0yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTUxMzlkMi1jM2JmLTRiMTgtOTYxNi1kODNm NTBhOWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDwDsAFf2eSKKLYOpwVpsqMVCVCSztrMd0Rr/WkmVENf0Fkh08jQsKh hsOL91hVs3jM1lM3PFFhqOCzPrH+znbvp3MJ2a0XmvU8CaYopBQudBrxtZcOAbaO LzR7jNbHAugCcmYXb4mnjFM7vTH2irPIhFwKIwGQeIAjxZqMKRBIPbRJAz7byr5n IEUhsk2JDeQ53wjkVzYqX+3vD0cvGS9hnJmpxPfz459IOV8B7fgPywThBUO0+8AV 1IUH7B11to+EsP6DebObIhIxSDrFFOOS/V2q3eHI2cLiHpLhgOSzzEKbL4kp9Ywn nIhJ6v42DAPPrNaBWaJQbjAJK4VIGFc= -----END CERTIFICATE-----Generated at Fri Oct 23 23:18:43 2026 by rpki-client