$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa File: 04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa (raw, json) Hash identifier: E9+vvPPJ70y3ClBopt2maJNSFRm1cuXYCrY5B8OU7e4= Subject key identifier: F5:BA:1C:47:89:2B:D9:7D:F4:A3:AA:28:B1:C7:82:ED:A0:F2:60:6C Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584F71ED7E7D4AF58E6792489980 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 395301 IP address blocks: 162.120.64.0/23 maxlen: 23 162.120.64.0/24 maxlen: 24 162.120.65.0/24 maxlen: 24 162.120.66.0/24 maxlen: 24 162.120.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7e:7d:4a:f5:8e:67:92:48:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=8d0813db-44de-4a98-8cb4-1afd77a90675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:24:02:d4:a2:aa:b4:08:cc:eb:60:1a:2f: 13:14:fe:2c:53:e7:01:cb:de:eb:85:f5:8d:26:bc: c0:7a:13:f5:e0:08:5c:eb:39:43:e8:b7:c1:e1:46: cf:2e:2e:93:e5:d0:3a:19:7d:05:23:c2:97:ee:b8: bc:5c:a7:87:6a:36:30:3d:b4:81:e4:ff:8a:ad:8a: 53:3f:24:e2:57:53:97:30:3c:e4:ec:04:6d:d8:27: 07:17:16:19:46:ab:61:e5:e2:5b:ec:cd:7b:27:60: 7f:93:bb:38:54:d0:33:18:7e:50:41:ce:95:d7:0b: 28:b7:6a:a2:86:77:e7:76:5b:ac:03:78:01:60:bf: d1:29:8d:66:11:ff:a2:25:97:96:71:3e:28:6b:30: d8:6c:2f:12:9f:62:7c:cf:94:f5:2b:13:96:2f:c2: c3:ed:e4:46:e6:fa:22:c9:6a:38:e7:dd:09:9f:3d: dc:60:1a:c3:78:1c:e3:ff:49:29:c7:a4:1e:62:4c: df:1d:45:07:08:84:22:4d:f5:1c:f9:60:b5:aa:eb: 89:81:75:92:cf:87:ab:1b:fe:d1:86:ca:ae:12:d9: 42:5e:a0:ce:6d:22:9c:f7:77:02:0c:e5:5e:e0:df: 80:01:54:22:f0:28:d4:81:cf:a8:3e:48:48:3d:78: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BA:1C:47:89:2B:D9:7D:F4:A3:AA:28:B1:C7:82:ED:A0:F2:60:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 162.120.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a9:0b:ba:06:36:ff:03:51:69:89:c4:0c:1e:d3:6e:66:c0: 0e:04:34:34:4c:1d:c1:da:c5:7c:94:bb:fa:a2:7c:bc:c2:3f: 18:51:d1:c1:53:e8:e7:23:dd:08:87:80:b7:62:4d:cd:8f:0b: 25:b9:1e:a9:3f:ed:6b:24:97:24:3c:87:71:28:a4:a7:9d:9a: 6a:19:e7:05:86:20:71:37:07:13:70:8c:9e:62:e3:d5:91:19: fc:36:1f:2d:16:a9:eb:e3:f6:a6:2a:89:ad:d6:a5:c3:05:2e: 31:0c:10:06:fa:82:3f:a5:aa:a8:95:b3:a4:f1:1b:69:9e:d4: c9:08:25:40:c1:5c:e7:e6:8d:c5:e1:d2:3a:b8:6e:04:ab:69: 8d:fb:06:a7:82:09:b5:fc:b0:5b:5a:da:56:54:b4:51:30:a3: f2:c2:90:8c:d2:64:49:6f:91:d7:a9:01:d5:27:ce:4a:39:cb: 78:74:37:cb:f7:c6:79:42:e6:43:b7:5f:92:b0:8e:19:eb:e7: 18:ed:4e:33:37:0b:f0:12:fd:cf:8f:65:a2:12:ec:e9:b1:56: ac:b2:64:1a:8f:d9:29:a4:96:28:22:5c:eb:f1:c1:12:52:4c: c2:b2:37:9f:07:33:5d:b5:e1:5d:88:f4:93:3a:bf:c8:1a:d2: 94:f9:8d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7X59SvWOZ5JImYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OGQwODEzZGItNDRkZS00YTk4LThjYjQtMWFmZDc3YTkwNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcYkAtSiqrQIzOtgGi8TFP4sU+cBy97rhfWN JrzAehP14Ahc6zlD6LfB4UbPLi6T5dA6GX0FI8KX7ri8XKeHajYwPbSB5P+KrYpT PyTiV1OXMDzk7ARt2CcHFxYZRqth5eJb7M17J2B/k7s4VNAzGH5QQc6V1wsot2qi hnfndlusA3gBYL/RKY1mEf+iJZeWcT4oazDYbC8Sn2J8z5T1KxOWL8LD7eRG5voi yWo4590Jnz3cYBrDeBzj/0kpx6QeYkzfHUUHCIQiTfUc+WC1quuJgXWSz4erG/7R hsquEtlCXqDObSKc93cCDOVe4N+AAVQi8CjUgc+oPkhIPXi/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW6HEeJK9l99KOqKLHHgu2g8mBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvMDRmZjUzNDctZWNiMC0z ZTJiLTk2YWMtYTZhMTI1NGVmNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECpC7oGNv8DUWmJxAwe025mwA4ENDRMHcHaxXyUu/qifLzCPxhR0cFT 6Ocj3QiHgLdiTc2PCyW5Hqk/7WsklyQ8h3EopKedmmoZ5wWGIHE3BxNwjJ5i49WR Gfw2Hy0Wqevj9qYqia3WpcMFLjEMEAb6gj+lqqiVs6TxG2me1MkIJUDBXOfmjcXh 0jq4bgSraY37BqeCCbX8sFta2lZUtFEwo/LCkIzSZElvkdepAdUnzko5y3h0N8v3 xnlC5kO3X5Kwjhnr5xjtTjM3C/AS/c+PZaIS7OmxVqyyZBqP2SmkligiXOvxwRJS TMKyN58HM1214V2I9JM6v8ga0pT5jSE= -----END CERTIFICATE-----Generated at Mon Oct 12 19:02:13 2026 by rpki-client