$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/b1a7bff7-ce23-34c9-b73c-a9e87cfd9e2a.roa File: b1a7bff7-ce23-34c9-b73c-a9e87cfd9e2a.roa (raw, json) Hash identifier: rrykcjLLn8Zy7LMqYKTjwjZ2tibXo4TbM/tep0gbMrA= Subject key identifier: E8:AF:A9:85:15:48:8F:C7:6F:E1:EE:BE:1C:86:AE:D6:64:49:91:03 Certificate issuer: /CN=c12594ff-c744-4e17-a962-c9277ee9fa20 Certificate serial: 010D0C9F4328584F2527A4B73963A01B22186780 Authority key identifier: C3:66:5D:C2:59:9A:CB:42:C1:2C:70:11:EE:DA:6A:C7:B8:45:9C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/b1a7bff7-ce23-34c9-b73c-a9e87cfd9e2a.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 22241 IP address blocks: 162.220.76.0/22 maxlen: 24 2602:fe7a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/c12594ff-c744-4e17-a962-c9277ee9fa20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/c12594ff-c744-4e17-a962-c9277ee9fa20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a4:b7:39:63:a0:1b:22:18:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12594ff-c744-4e17-a962-c9277ee9fa20 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=77123143-254b-4fe1-97fe-68f56a001cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:60:5c:1f:f6:d2:26:7d:86:39:e7:32:cc: bc:eb:36:ab:8d:a7:31:92:a8:35:34:7a:67:f8:17: 6d:3b:49:b3:03:bd:c3:f6:c3:8e:ac:29:2d:f1:cf: ec:df:fe:8e:3c:95:97:ff:b4:dc:b2:8d:c4:24:d4: c1:8c:f9:ff:6f:28:cf:cc:51:4d:0a:64:6a:db:f1: b3:09:7f:61:2c:18:e6:e6:c2:f2:d3:a6:83:53:8b: b1:15:65:8b:59:63:54:e6:ad:b9:04:a6:4a:34:96: ca:f3:58:0c:75:04:59:aa:01:91:c3:ad:13:e7:23: f3:c7:ec:52:e7:66:96:e6:f5:fe:6f:65:e7:36:7e: 82:a0:9d:4a:51:c0:78:31:39:ef:2b:16:b1:cf:fe: e9:7d:29:8f:9d:ea:26:05:36:e5:72:16:b5:c3:39: 4b:55:d5:78:92:f9:ee:ce:a7:e2:63:04:54:8a:af: bc:69:fb:d1:05:24:05:e7:e3:81:1a:0c:dc:9d:47: 26:f5:1c:68:02:68:52:70:67:b6:10:e9:fb:5d:e9: 25:ad:12:f3:c5:00:b7:f9:81:f5:c5:ed:69:6b:1e: 90:73:68:6b:a4:ff:4f:ab:c6:7e:8b:63:d1:7e:be: 87:78:46:01:1a:f5:03:5c:6d:97:e6:25:fa:c4:12: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:A9:85:15:48:8F:C7:6F:E1:EE:BE:1C:86:AE:D6:64:49:91:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/b1a7bff7-ce23-34c9-b73c-a9e87cfd9e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20/c12594ff-c744-4e17-a962-c9277ee9fa20.crl X509v3 Authority Key Identifier: keyid:C3:66:5D:C2:59:9A:CB:42:C1:2C:70:11:EE:DA:6A:C7:B8:45:9C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c12594ff-c744-4e17-a962-c9277ee9fa20.cer sbgp-ipAddrBlock: critical IPv4: 162.220.76.0/22 IPv6: 2602:fe7a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:52:08:f3:a0:cb:d1:06:ff:9d:48:a8:b3:be:ec:7e:ff:98: d1:ce:60:0d:d9:30:6b:82:76:b6:b1:5f:b9:89:ed:b7:8e:d9: f1:3c:dc:72:34:77:b0:bd:bf:1a:01:c2:d5:8b:a6:bf:24:3e: 1c:f6:24:39:be:64:09:a6:ed:4a:a8:87:66:52:83:e2:13:34: 70:e3:26:ad:52:bc:ca:38:50:c4:af:c7:cd:a2:e2:bb:00:fb: 09:67:84:9c:07:b0:1d:f7:8c:4b:f7:2a:46:db:84:5d:e6:49: 7e:9e:71:4c:66:a4:12:6b:02:34:17:27:eb:bc:83:b2:8b:ac: d2:e1:68:3d:cd:46:cc:ef:e0:98:64:a0:fc:05:a0:7b:de:26: 6d:58:6d:c0:40:db:12:85:70:86:c9:96:a1:4f:29:ce:2c:b7: 28:b2:b0:96:ab:fb:43:3c:ae:60:5c:6f:ba:5b:ce:01:6a:a1: 14:44:a0:af:8c:4a:46:82:9a:a5:01:8f:f5:59:39:22:0e:54: 8a:7e:60:40:02:90:93:a3:d7:4c:b0:18:2f:ce:df:2e:0d:d5: 4d:a7:15:ab:54:04:f8:91:e4:38:65:91:fe:f3:33:b7:18:eb: f0:db:18:fb:81:9e:00:b7:dc:26:eb:2a:ca:64:7e:ef:87:ab: b5:7b:be:21 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8lJ6S3OWOgGyIYZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzEyNTk0ZmYtYzc0NC00ZTE3LWE5NjItYzkyNzdlZTlm YTIwMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk NzcxMjMxNDMtMjU0Yi00ZmUxLTk3ZmUtNjhmNTZhMDAxY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1hgXB/20iZ9hjnnMsy86zarjacxkqg1NHpn +BdtO0mzA73D9sOOrCkt8c/s3/6OPJWX/7Tcso3EJNTBjPn/byjPzFFNCmRq2/Gz CX9hLBjm5sLy06aDU4uxFWWLWWNU5q25BKZKNJbK81gMdQRZqgGRw60T5yPzx+xS 52aW5vX+b2XnNn6CoJ1KUcB4MTnvKxaxz/7pfSmPneomBTblcha1wzlLVdV4kvnu zqfiYwRUiq+8afvRBSQF5+OBGgzcnUcm9RxoAmhScGe2EOn7XeklrRLzxQC3+YH1 xe1pax6Qc2hrpP9Pq8Z+i2PRfr6HeEYBGvUDXG2X5iX6xBIF3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOivqYUVSI/Hb+HuvhyGrtZkSZEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMTI1 OTRmZi1jNzQ0LTRlMTctYTk2Mi1jOTI3N2VlOWZhMjAvYjFhN2JmZjctY2UyMy0z NGM5LWI3M2MtYTllODdjZmQ5ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYzEyNTk0ZmYtYzc0NC00ZTE3LWE5 NjItYzkyNzdlZTlmYTIwL2MxMjU5NGZmLWM3NDQtNGUxNy1hOTYyLWM5Mjc3ZWU5 ZmEyMC5jcmwwHwYDVR0jBBgwFoAUw2Zdwlmay0LBLHAR7tpqx7hFnIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMTI1OTRmZi1jNzQ0LTRlMTctYTk2Mi1jOTI3 N2VlOWZhMjAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCotxMMA4E AgACMAgDBgQmAv56ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbUgjzoMvRBv+dSKizvux+/5jRzmAN2TBr gna2sV+5ie23jtnxPNxyNHewvb8aAcLVi6a/JD4c9iQ5vmQJpu1KqIdmUoPiEzRw 4yatUrzKOFDEr8fNouK7APsJZ4ScB7Ad94xL9ypG24Rd5kl+nnFMZqQSawI0Fyfr vIOyi6zS4Wg9zUbM7+CYZKD8BaB73iZtWG3AQNsShXCGyZahTynOLLcosrCWq/tD PK5gXG+6W84BaqEURKCvjEpGgpqlAY/1WTkiDlSKfmBAApCTo9dMsBgvzt8uDdVN pxWrVAT4keQ4ZZH+8zO3GOvw2xj7gZ4At9wm6yrKZH7vh6u1e74h -----END CERTIFICATE-----Generated at Wed Sep 23 09:22:51 2026 by rpki-client