$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/a4909067-4577-315a-a200-bb862ada605e.roa File: a4909067-4577-315a-a200-bb862ada605e.roa (raw, json) Hash identifier: OakypHxOaqJ4MuXiN8dYkM6EPADMvk/Thzdk+M/z/S4= Subject key identifier: F9:89:6D:04:D7:16:AF:28:C7:A4:1B:96:66:10:9C:C7:79:23:AB:7C Certificate issuer: /CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4 Certificate serial: 010D0C9F4328584F83F679E240BFB4EBFB05BD40 Authority key identifier: 9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/a4909067-4577-315a-a200-bb862ada605e.roa Signing time: Fri 16 Oct 2026 00:02:58 +0000 ROA not before: Fri 16 Oct 2026 00:02:58 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397868 IP address blocks: 162.244.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:f6:79:e2:40:bf:b4:eb:fb:05:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4 Validity Not Before: Oct 16 00:02:58 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1bfdc844-bb6d-4b92-ae3d-82b76fcbe531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:58:54:ce:d3:fc:96:09:1b:c1:76:a1:a1: 97:38:a3:e6:1d:12:c6:1e:a4:12:cb:20:62:42:1c: 62:af:14:58:bd:35:71:de:ed:a9:fc:b1:38:d7:f4: 5e:9d:a9:21:b8:39:fc:37:90:ef:df:16:da:e6:7c: 43:cc:3f:c6:e0:bd:0b:b7:15:4c:69:68:90:62:c8: 38:49:31:d1:dd:dd:70:43:e8:98:e7:1c:05:dd:00: cb:b1:77:25:69:6c:6b:d7:41:bd:57:7f:8a:f4:61: e5:f2:f7:26:5e:b8:67:2b:bd:74:44:9b:59:b3:1b: ea:6c:ae:2d:48:66:5d:63:19:a9:26:7c:2e:35:0f: 92:56:42:04:65:21:06:17:ef:82:9a:10:da:08:49: ab:7c:db:5c:6f:31:a1:47:b9:f6:2e:e6:c7:bf:ea: bf:c7:57:0a:fb:1e:dd:0c:26:a1:f3:bf:ac:c6:9d: 46:93:e7:72:ca:ca:41:34:22:c8:05:5a:37:15:6b: e0:63:42:69:46:b1:47:70:38:c9:c4:cf:ae:30:e7: 59:f1:a9:59:45:a2:73:e7:19:87:09:0b:6e:bc:7e: ee:03:c4:1c:18:17:b4:40:14:01:e4:19:68:8b:f1: 72:c7:8e:13:94:91:3e:2a:1e:04:ac:3c:e5:4d:30: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:6D:04:D7:16:AF:28:C7:A4:1B:96:66:10:9C:C7:79:23:AB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/a4909067-4577-315a-a200-bb862ada605e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl X509v3 Authority Key Identifier: keyid:9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer sbgp-ipAddrBlock: critical IPv4: 162.244.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1f:18:63:9e:6d:b8:b5:45:bd:09:de:ac:1b:ea:07:b8:c9: db:0b:c5:74:03:57:d8:2e:f7:f9:5c:50:2e:16:e2:81:49:aa: 74:a7:32:25:e5:e3:7c:ee:88:f2:f8:5e:de:66:22:0a:ec:53: 71:b7:6c:ce:8a:26:ca:31:c9:62:e3:3b:b1:d0:12:a4:bd:a2: 36:7b:88:11:f0:47:9c:f2:d9:05:4b:de:c8:e9:13:17:e0:4b: dd:20:72:3a:20:60:37:7d:7e:60:bc:e7:1a:83:8e:c8:db:c2: 4d:18:f3:7d:bb:2f:4a:f5:17:07:e7:33:4b:37:22:29:fe:e3: 6e:ef:0d:e9:96:de:06:40:32:a1:07:ad:33:c1:e4:0f:e3:8d: 67:c8:34:6f:ba:d0:80:c7:2d:9b:94:b8:54:4e:7a:a1:bd:f5: ac:49:fd:57:11:85:0b:61:91:19:f6:60:ec:77:31:39:7f:22: 0e:62:87:dc:23:69:8b:e1:a4:23:43:b2:f7:a7:99:d0:d0:cb: 51:ff:63:0a:9d:f8:02:f8:5e:04:bf:26:71:01:da:b3:28:1a: 32:41:d2:27:ac:9c:1b:be:7c:74:67:7e:cd:16:28:db:5a:17: 40:44:24:61:a9:78:37:d3:81:2e:38:fd:72:14:ef:a4:7b:d0: b7:d0:eb:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+D9nniQL+06/sFvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGMxMzk5MDQtNjhiYi00N2UxLTk0ZjgtNTUxYmJmYWFl ZWI0MB4XDTI2MTAxNjAwMDI1OFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWJmZGM4NDQtYmI2ZC00YjkyLWFlM2QtODJiNzZmY2JlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdRYVM7T/JYJG8F2oaGXOKPmHRLGHqQSyyBi QhxirxRYvTVx3u2p/LE41/RenakhuDn8N5Dv3xba5nxDzD/G4L0LtxVMaWiQYsg4 STHR3d1wQ+iY5xwF3QDLsXclaWxr10G9V3+K9GHl8vcmXrhnK710RJtZsxvqbK4t SGZdYxmpJnwuNQ+SVkIEZSEGF++CmhDaCEmrfNtcbzGhR7n2LubHv+q/x1cK+x7d DCah87+sxp1Gk+dyyspBNCLIBVo3FWvgY0JpRrFHcDjJxM+uMOdZ8alZRaJz5xmH CQtuvH7uA8QcGBe0QBQB5Bloi/Fyx44TlJE+Kh4ErDzlTTCIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmJbQTXFq8ox6QblmYQnMd5I6t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kYzEz OTkwNC02OGJiLTQ3ZTEtOTRmOC01NTFiYmZhYWVlYjQvYTQ5MDkwNjctNDU3Ny0z MTVhLWEyMDAtYmI4NjJhZGE2MDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGMxMzk5MDQtNjhiYi00N2UxLTk0 ZjgtNTUxYmJmYWFlZWI0L2RjMTM5OTA0LTY4YmItNDdlMS05NGY4LTU1MWJiZmFh ZWViNC5jcmwwHwYDVR0jBBgwFoAUnXpOhMM0HCNs1Eck2YPQ2cpuk54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kYzEzOTkwNC02OGJiLTQ3ZTEtOTRmOC01NTFi YmZhYWVlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsfGGOebbi1Rb0J3qwb6ge4ydsLxXQDV9gu9/lcUC4W4oFJqnSnMiXl 43zuiPL4Xt5mIgrsU3G3bM6KJsoxyWLjO7HQEqS9ojZ7iBHwR5zy2QVL3sjpExfg S90gcjogYDd9fmC85xqDjsjbwk0Y8327L0r1FwfnM0s3Iin+427vDemW3gZAMqEH rTPB5A/jjWfING+60IDHLZuUuFROeqG99axJ/VcRhQthkRn2YOx3MTl/Ig5ih9wj aYvhpCNDsvenmdDQy1H/Ywqd+AL4XgS/JnEB2rMoGjJB0iesnBu+fHRnfs0WKNta F0BEJGGpeDfTgS44/XIU76R70LfQ6+c= -----END CERTIFICATE-----Generated at Sun Oct 25 03:10:33 2026 by rpki-client