$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/568322f6-5572-3785-be56-c7d67e539073.roa File: 568322f6-5572-3785-be56-c7d67e539073.roa (raw, json) Hash identifier: 5mSoE38iOfOHpoeWE7A8Pvenkng0mrTyjz0OFenv0Rw= Subject key identifier: 44:A5:C8:C9:FC:C7:A8:7B:EE:89:30:DF:0F:27:4A:30:D5:5F:78:7F Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584EF01CF7BD993CC2C3C4AC3B20 Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/568322f6-5572-3785-be56-c7d67e539073.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 6079 IP address blocks: 162.253.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f7:bd:99:3c:c2:c3:c4:ac:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=d788797b-19a6-4693-9ead-8e2444bb3f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:cc:77:4b:6f:9b:0e:f7:ef:da:dd:0f:9e: b9:f9:a4:e6:9e:f2:de:4b:7a:b3:5a:48:8b:67:cc: 75:d5:2a:93:c6:34:f0:95:cb:9d:37:25:1f:b4:55: 99:a6:b9:82:95:f0:dd:ba:75:d9:98:61:f8:78:37: 98:53:f0:56:2f:5d:1a:47:c4:4a:83:b6:1e:06:d5: 40:1d:8d:b7:db:01:e0:94:f5:3e:77:5c:48:e8:12: 31:f5:a6:06:6e:16:89:0e:c7:43:b6:e7:4b:15:93: 05:1f:36:50:05:1a:5f:6e:76:07:cf:c0:20:92:7b: 00:b0:a6:29:0e:51:cc:79:fc:73:f9:a7:0f:94:79: 42:2d:d0:4e:a4:a9:70:d9:ab:30:21:d9:3c:a9:92: ad:49:01:a5:bc:20:87:a5:d6:2f:bf:ca:c6:3c:d5: 7e:fb:a1:b4:45:d1:9c:bc:9b:6f:45:a1:35:11:9b: 3b:fb:9e:25:af:dd:41:2c:f6:6c:7d:5e:57:5b:37: 0c:62:56:63:1e:8d:94:7b:00:00:c7:af:0d:7d:d5: 3d:48:e0:39:1f:70:78:56:dc:8c:aa:cd:96:cd:e1: 0a:7f:99:03:a4:25:af:c9:66:e9:4f:c2:cc:41:88: 7c:ae:10:ad:48:72:8e:9f:fd:fb:af:1c:a9:a4:de: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A5:C8:C9:FC:C7:A8:7B:EE:89:30:DF:0F:27:4A:30:D5:5F:78:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/568322f6-5572-3785-be56-c7d67e539073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: 162.253.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ce:5a:78:2b:8f:e3:d3:ee:7f:a3:2f:97:6a:4a:8a:d8:5f: c2:60:60:9c:88:40:20:e5:b9:2c:eb:f7:19:56:d5:33:39:f7: af:9f:e6:21:9c:c9:9b:70:98:7c:31:e2:d6:1c:2f:6f:cf:ca: 85:50:29:1c:56:db:9d:77:13:b7:ce:4f:ee:12:e6:1b:20:02: cb:87:90:52:da:ba:94:6f:a4:e1:fc:17:f0:24:d8:03:aa:68: 0e:e4:88:a5:54:b8:48:69:a1:70:0f:c0:3d:b8:4b:19:81:75: 4d:6c:ad:32:78:22:a1:7e:c6:0c:96:62:00:50:76:83:fa:85: 4c:92:3d:b2:e9:54:cc:1f:88:4f:5e:1e:b8:dc:53:1d:f0:c4: c7:82:a7:a5:9e:8a:06:1c:d1:e5:da:01:d7:26:89:9c:7d:e1: 33:36:98:08:d5:22:ee:14:99:06:59:6c:67:e9:a1:92:0c:81: d9:cc:c0:d5:6b:c9:b0:f5:2d:d6:f4:34:ce:f6:20:7f:0b:43: 81:f8:32:d3:11:0e:92:d9:d5:b5:72:27:d7:dc:6a:9b:b6:83: 2f:0a:9c:0a:5c:a2:f2:cf:6c:59:a5:3f:3d:48:e7:8b:2e:bb: 0a:2d:14:56:be:ff:78:70:e6:6e:84:84:ed:0f:d3:5b:5f:44: 30:e1:33:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPe9mTzCw8SsOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDc4ODc5N2ItMTlhNi00NjkzLTllYWQtOGUyNDQ0YmIzZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxADMd0tvmw7379rdD565+aTmnvLeS3qzWkiL Z8x11SqTxjTwlcudNyUftFWZprmClfDdunXZmGH4eDeYU/BWL10aR8RKg7YeBtVA HY232wHglPU+d1xI6BIx9aYGbhaJDsdDtudLFZMFHzZQBRpfbnYHz8AgknsAsKYp DlHMefxz+acPlHlCLdBOpKlw2aswIdk8qZKtSQGlvCCHpdYvv8rGPNV++6G0RdGc vJtvRaE1EZs7+54lr91BLPZsfV5XWzcMYlZjHo2UewAAx68NfdU9SOA5H3B4VtyM qs2WzeEKf5kDpCWvyWbpT8LMQYh8rhCtSHKOn/37rxyppN5SlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESlyMn8x6h77okw3w8nSjDVX3h/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvNTY4MzIyZjYtNTU3Mi0z Nzg1LWJlNTYtYzdkNjdlNTM5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbOWngrj+PT7n+jL5dqSorYX8JgYJyIQCDluSzr9xlW1TM596+f5iGc yZtwmHwx4tYcL2/PyoVQKRxW2513E7fOT+4S5hsgAsuHkFLaupRvpOH8F/Ak2AOq aA7kiKVUuEhpoXAPwD24SxmBdU1srTJ4IqF+xgyWYgBQdoP6hUySPbLpVMwfiE9e HrjcUx3wxMeCp6WeigYc0eXaAdcmiZx94TM2mAjVIu4UmQZZbGfpoZIMgdnMwNVr ybD1Ldb0NM72IH8LQ4H4MtMRDpLZ1bVyJ9fcapu2gy8KnApcovLPbFmlPz1I54su uwotFFa+/3hw5m6EhO0P01tfRDDhM2E= -----END CERTIFICATE-----Generated at Tue Sep 1 04:42:57 2026 by rpki-client