$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/1928fe7a-d5c0-385d-ab31-37aa9e4ffc9f.roa File: 1928fe7a-d5c0-385d-ab31-37aa9e4ffc9f.roa (raw, json) Hash identifier: dTPmTXGs8lCOIhmH7jN2TeI2P6ykPhFh8+kKE8FCygU= Subject key identifier: 87:0D:A5:D0:F0:E5:38:7E:67:69:9E:2A:7C:C4:56:1F:FD:61:F1:F5 Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584F70881985C61C60BA5E42CB00 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/1928fe7a-d5c0-385d-ab31-37aa9e4ffc9f.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 209604 IP address blocks: 162.251.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:19:85:c6:1c:60:ba:5e:42:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=62b6d332-f337-4155-848f-d8a0792ffd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:6f:a1:c4:d0:c9:f2:b5:aa:f0:55:aa:a1: d9:1b:51:f4:2f:30:f3:2c:49:10:75:15:4d:69:85: 38:91:f8:93:47:18:d9:3e:48:59:10:e0:30:c8:07: ac:c6:ac:cd:5f:19:5a:10:49:92:cb:91:ed:38:2b: c4:3d:d2:4f:a5:6d:e1:47:5a:f1:50:7a:b2:b2:4a: 83:2a:0c:ad:f7:3e:38:03:a1:bc:75:5e:e2:85:b0: a6:1f:1a:2a:1e:52:08:92:d5:88:90:ac:21:2c:ca: 27:40:3d:46:90:99:e8:49:32:f6:8b:44:2d:6a:9a: ca:70:ef:56:b3:ef:65:d4:d1:cc:35:d7:3c:25:85: d9:2e:89:0e:a5:65:62:be:54:f4:66:6b:c6:03:41: af:94:11:5a:34:6d:fc:43:ca:f8:6e:ee:b2:2f:da: c6:42:77:6e:86:de:55:c5:b4:17:39:99:71:51:eb: 34:3c:1d:9c:2e:84:4d:1a:d1:b1:3d:e9:89:10:ec: 78:e4:24:3a:82:ea:89:4f:65:18:b6:e1:c4:47:dd: 59:4c:42:f5:eb:7b:93:2c:ce:16:c7:48:e6:28:36: f6:97:3a:b3:92:01:20:b9:b9:7a:4f:67:7c:9f:4f: 14:7f:98:c3:32:93:21:bc:62:54:af:87:b1:f1:23: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:A5:D0:F0:E5:38:7E:67:69:9E:2A:7C:C4:56:1F:FD:61:F1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/1928fe7a-d5c0-385d-ab31-37aa9e4ffc9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.251.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7a:6f:ce:09:7b:88:03:9f:bf:be:f5:3c:e1:93:c8:bd:60: 05:d5:28:93:83:6f:c0:10:e4:48:7c:ca:e2:79:f7:4a:8e:9f: 49:46:be:5d:ca:80:67:ce:4c:b8:95:ec:28:bc:de:91:5d:27: 87:c3:84:ee:d3:f3:a0:f5:b4:92:68:07:f0:69:2a:22:d6:fe: b4:fc:c7:e7:0e:04:f2:2b:74:f9:19:be:20:13:61:77:16:a3: 23:f4:02:00:83:ff:8e:44:bc:dc:44:0f:0d:33:9a:c4:cc:67: e2:d5:b6:5d:98:91:8d:ad:29:22:c8:70:68:69:e1:71:3a:3f: bb:44:7f:82:5e:95:88:e8:1a:01:76:77:0f:d4:e2:65:8e:8e: 84:65:9f:f3:78:94:61:a8:00:8f:ab:75:3e:70:04:0b:fa:1b: ec:af:1c:16:38:d0:ec:27:ab:17:bf:e7:1b:74:40:ea:ff:f3: d6:1f:aa:64:28:07:99:8c:fe:ad:d6:1e:59:6b:31:dc:8e:ca: 0b:c2:de:38:6d:eb:92:33:d0:56:fd:0b:e6:a0:82:9e:a1:14: a9:c1:93:75:db:16:90:e5:cb:d7:a5:02:e4:b7:0c:1b:15:a8: e7:f1:c0:d1:90:4d:5b:48:8e:85:f0:35:c6:d7:e5:71:d8:d1: 35:70:4b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiBmFxhxgul5CywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NjJiNmQzMzItZjMzNy00MTU1LTg0OGYtZDhhMDc5MmZmZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTdvocTQyfK1qvBVqqHZG1H0LzDzLEkQdRVN aYU4kfiTRxjZPkhZEOAwyAesxqzNXxlaEEmSy5HtOCvEPdJPpW3hR1rxUHqyskqD Kgyt9z44A6G8dV7ihbCmHxoqHlIIktWIkKwhLMonQD1GkJnoSTL2i0QtaprKcO9W s+9l1NHMNdc8JYXZLokOpWVivlT0ZmvGA0GvlBFaNG38Q8r4bu6yL9rGQnduht5V xbQXOZlxUes0PB2cLoRNGtGxPemJEOx45CQ6guqJT2UYtuHER91ZTEL163uTLM4W x0jmKDb2lzqzkgEgubl6T2d8n08Uf5jDMpMhvGJUr4ex8SNzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcNpdDw5Th+Z2meKnzEVh/9YfH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMTkyOGZlN2EtZDVjMC0z ODVkLWFiMzEtMzdhYTllNGZmYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN6b84Je4gDn7++9Tzhk8i9YAXVKJODb8AQ5Eh8yuJ590qOn0lGvl3K gGfOTLiV7Ci83pFdJ4fDhO7T86D1tJJoB/BpKiLW/rT8x+cOBPIrdPkZviATYXcW oyP0AgCD/45EvNxEDw0zmsTMZ+LVtl2YkY2tKSLIcGhp4XE6P7tEf4JelYjoGgF2 dw/U4mWOjoRln/N4lGGoAI+rdT5wBAv6G+yvHBY40Ownqxe/5xt0QOr/89YfqmQo B5mM/q3WHllrMdyOygvC3jht65Iz0Fb9C+aggp6hFKnBk3XbFpDly9elAuS3DBsV qOfxwNGQTVtIjoXwNcbX5XHY0TVwS98= -----END CERTIFICATE-----Generated at Fri Oct 23 19:10:20 2026 by rpki-client