$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa File: 4c716190-ffd4-3aa3-ad30-091c1340b61f.roa (raw, json) Hash identifier: U1RE1rEmN26eegRLIZR6jn2iooy6Fd9HEwK8FXXFj+8= Subject key identifier: B1:39:AC:4A:F1:CA:15:EC:2D:2E:6C:8E:12:B4:E3:01:AC:8F:A8:C3 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584F82ADC7E23CB3B3382707DA40 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 40230 IP address blocks: 162.0.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c7:e2:3c:b3:b3:38:27:07:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=647c76b8-14d0-4c20-b161-9c0ff19e0944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:e5:e4:38:75:e8:c6:a1:a4:99:10:da:9c: d6:e2:a6:e0:27:15:4f:39:65:41:cb:8d:e4:4e:67: 0d:1f:d4:d7:d5:43:9c:f5:c6:d2:ac:01:47:48:3a: 9e:e4:b2:a2:35:fc:fe:6f:23:39:0e:54:46:60:b0: 29:9f:54:8c:3f:f8:8e:70:9a:5d:f8:45:a8:e0:ef: 9d:16:f3:f7:f0:a2:de:d9:f6:29:16:ec:69:71:82: ea:04:5e:da:8a:29:f7:c6:49:64:d9:ad:0a:9c:b0: eb:26:6e:97:ed:bf:f6:7b:2b:15:b2:6a:f3:d0:e8: 8e:37:4f:8f:ec:ec:c6:d3:24:c8:ae:b3:5e:53:ac: bb:a8:73:80:96:3d:92:d9:e4:0e:6d:53:f6:9f:73: 1f:1e:d7:c9:8f:cd:08:99:6b:3e:9c:d2:e0:e3:01: 89:9c:cb:f6:81:4b:9f:2c:e4:49:1d:80:93:b3:a9: ae:c4:ef:17:63:df:5c:3a:e8:49:f7:80:43:da:bb: 18:d2:16:13:06:a1:77:2e:57:25:f6:82:e4:6c:88: 29:5c:f3:5d:8d:ef:2c:c2:35:c7:74:20:1a:c3:d0: a1:3e:5e:82:04:36:be:4d:95:3d:37:a9:9f:9d:88: 85:cc:92:57:ff:bb:a7:18:f4:18:c1:95:1e:42:1d: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:AC:4A:F1:CA:15:EC:2D:2E:6C:8E:12:B4:E3:01:AC:8F:A8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv4: 162.0.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:95:12:a2:12:42:2f:b0:7c:e3:9d:95:b5:e5:15:27:f7:ad: 5b:36:36:e8:5a:da:9b:89:25:11:d2:db:88:25:35:4b:ef:08: b2:29:ce:82:98:84:ad:9a:28:1c:9b:eb:41:45:49:9d:47:58: b9:5d:d3:73:09:7f:8e:51:d9:54:b6:06:82:66:c9:ac:40:80: 62:ec:27:08:f5:5c:51:52:63:f9:70:d1:ed:54:ab:2d:4b:27: 94:64:80:66:5a:51:5c:33:a4:9a:2c:87:71:f5:af:95:d1:53: 79:c9:34:d7:5a:51:bb:74:fe:d9:02:ea:10:49:c8:61:41:50: 38:12:45:fd:b0:f3:fb:be:af:35:35:1f:db:2d:a7:2d:89:b0: 02:0f:d0:45:0b:f7:71:8a:26:49:fb:54:1e:c2:6a:7a:88:be: eb:9f:25:6c:99:96:21:94:24:a6:c9:e0:8c:70:a3:7a:b5:b3: 1c:75:6d:a1:41:80:c0:3d:4a:f5:39:45:0a:7a:4b:88:ad:42: 0d:0e:3c:1c:08:b8:ef:5e:dc:92:2b:df:c3:57:63:a4:56:00: 4d:66:c6:95:a3:46:44:c8:74:8f:40:d5:98:70:bf:e4:d8:9b: 58:26:56:0f:c0:d1:34:09:dd:fa:7c:42:db:ca:6d:7e:99:eb: b7:92:a0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcfiPLOzOCcH2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NjQ3Yzc2YjgtMTRkMC00YzIwLWIxNjEtOWMwZmYxOWUwOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlHl5Dh16MahpJkQ2pzW4qbgJxVPOWVBy43k TmcNH9TX1UOc9cbSrAFHSDqe5LKiNfz+byM5DlRGYLApn1SMP/iOcJpd+EWo4O+d FvP38KLe2fYpFuxpcYLqBF7aiin3xklk2a0KnLDrJm6X7b/2eysVsmrz0OiON0+P 7OzG0yTIrrNeU6y7qHOAlj2S2eQObVP2n3MfHtfJj80ImWs+nNLg4wGJnMv2gUuf LORJHYCTs6muxO8XY99cOuhJ94BD2rsY0hYTBqF3Llcl9oLkbIgpXPNdje8swjXH dCAaw9ChPl6CBDa+TZU9N6mfnYiFzJJX/7unGPQYwZUeQh3KswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE5rErxyhXsLS5sjhK04wGsj6jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNGM3MTYxOTAtZmZkNC0z YWEzLWFkMzAtMDkxYzEzNDBiNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEogCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByVEqISQi+wfOOdlbXlFSf3rVs2Nuha2puJJRHS24glNUvvCLIpzoKY hK2aKByb60FFSZ1HWLld03MJf45R2VS2BoJmyaxAgGLsJwj1XFFSY/lw0e1Uqy1L J5RkgGZaUVwzpJosh3H1r5XRU3nJNNdaUbt0/tkC6hBJyGFBUDgSRf2w8/u+rzU1 H9stpy2JsAIP0EUL93GKJkn7VB7CanqIvuufJWyZliGUJKbJ4Ixwo3q1sxx1baFB gMA9SvU5RQp6S4itQg0OPBwIuO9e3JIr38NXY6RWAE1mxpWjRkTIdI9A1Zhwv+TY m1gmVg/A0TQJ3fp8QtvKbX6Z67eSoLM= -----END CERTIFICATE-----Generated at Tue Oct 27 01:52:18 2026 by rpki-client