$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/18de94a0-8b35-3064-8c4a-a79654a2dcf7.roa File: 18de94a0-8b35-3064-8c4a-a79654a2dcf7.roa (raw, json) Hash identifier: fPTSVl2d1Sg1bkKgMaehSg7JIkluQ4oCkotsQiyUL8s= Subject key identifier: E4:25:FB:63:DD:C0:4B:05:5B:B3:9C:5F:2D:30:AE:E9:97:97:98:BA Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F7352D0806A704463627A8070 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/18de94a0-8b35-3064-8c4a-a79654a2dcf7.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 16276 IP address blocks: 158.62.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d0:80:6a:70:44:63:62:7a:80:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=566832ba-e11f-46a7-9aef-31bdf3bbc49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:a0:84:19:53:7f:5d:82:e6:e7:00:c1:1e: fe:48:be:5c:05:26:54:40:9f:81:f0:7a:1d:a0:d1: 96:ec:93:05:6a:20:15:51:ca:77:e9:fc:38:f3:4f: 23:93:4b:9d:57:b3:39:2b:fd:91:a4:88:59:5d:a0: 8c:2c:f5:32:99:de:a0:63:c0:22:8d:7f:20:99:10: d7:e5:12:ac:51:a5:55:e1:32:f7:6c:d8:d4:7a:bb: 0f:4e:f6:a7:27:58:e9:1b:2b:1c:cb:ad:fd:ff:f6: 9d:89:3f:e2:61:31:3f:5c:e7:3e:74:31:ab:7a:3e: 18:ae:a3:cc:3c:87:0f:d5:06:a7:c1:b3:c0:58:1b: dd:d7:79:42:35:6c:b2:5b:8f:80:ca:39:22:29:fb: 64:6c:d3:61:66:f5:e9:b3:34:f3:2f:6f:60:d3:1d: 54:15:26:70:e7:cd:bf:2b:a9:c4:1b:5f:83:d9:2f: 74:b4:3f:c9:aa:6a:67:49:6a:b2:15:ab:a2:c7:30: c3:53:b9:a0:a5:0b:d8:02:9b:67:e8:5a:38:81:3a: 35:8f:a4:46:54:09:8d:11:ed:f8:50:42:b5:fe:92: 36:0c:97:66:28:d0:0d:1c:5f:db:f9:29:d5:05:78: 60:e1:b2:d2:a3:e7:4f:be:64:34:ef:49:ca:cd:2c: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:FB:63:DD:C0:4B:05:5B:B3:9C:5F:2D:30:AE:E9:97:97:98:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/18de94a0-8b35-3064-8c4a-a79654a2dcf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2a:65:82:7f:9f:eb:2c:17:db:b1:bc:6c:b7:56:d5:7c:65: bc:90:0e:85:6c:f9:43:d2:ee:86:98:f2:70:f0:f4:9a:07:5e: df:81:3d:ff:96:12:a7:7c:16:d3:e5:29:ff:05:1f:ba:9d:2c: 5a:44:87:d0:d2:8b:1a:03:4e:55:15:54:d4:89:60:af:55:5d: 5a:99:5e:f8:0c:40:3b:a7:80:24:38:3e:06:8b:fc:84:dc:fb: 1d:61:0e:2c:fb:a4:22:e2:a8:4f:44:0c:8c:86:2f:15:86:e2: d7:1c:55:a5:93:b2:35:6d:3a:97:83:21:f8:f0:5c:62:cb:ae: 69:34:46:96:2c:38:b8:fa:1c:8d:8c:09:4a:7a:a7:32:a9:8b: 70:e5:fd:5a:5b:0f:a2:d7:d7:b4:72:d9:16:fa:0a:0d:70:62: 22:b7:29:f2:50:56:d2:b7:93:5d:6c:c0:c3:15:33:62:38:e2: 8b:50:05:55:48:e9:62:75:76:09:10:36:78:05:be:d3:68:b0: 44:0b:bf:4d:de:7b:9d:f5:53:1d:d6:31:59:bd:6d:47:2b:a8: 8f:3b:28:fe:89:84:97:01:7e:36:a3:5b:9e:9d:b7:03:a1:9b: 17:cd:40:6c:d0:db:82:ef:79:82:bf:64:f9:4b:8b:b4:b7:57: 2a:3c:3b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtCAanBEY2J6gHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NTY2ODMyYmEtZTExZi00NmE3LTlhZWYtMzFiZGYzYmJjNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIyghBlTf12C5ucAwR7+SL5cBSZUQJ+B8Hod oNGW7JMFaiAVUcp36fw4808jk0udV7M5K/2RpIhZXaCMLPUymd6gY8AijX8gmRDX 5RKsUaVV4TL3bNjUersPTvanJ1jpGyscy639//adiT/iYTE/XOc+dDGrej4YrqPM PIcP1QanwbPAWBvd13lCNWyyW4+AyjkiKftkbNNhZvXpszTzL29g0x1UFSZw582/ K6nEG1+D2S90tD/JqmpnSWqyFauixzDDU7mgpQvYAptn6Fo4gTo1j6RGVAmNEe34 UEK1/pI2DJdmKNANHF/b+SnVBXhg4bLSo+dPvmQ070nKzSzb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQl+2PdwEsFW7OcXy0wrumXl5i6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMThkZTk0YTAtOGIzNS0z MDY0LThjNGEtYTc5NjU0YTJkY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwqZYJ/n+ssF9uxvGy3VtV8ZbyQDoVs+UPS7oaY8nDw9JoHXt+BPf+W Eqd8FtPlKf8FH7qdLFpEh9DSixoDTlUVVNSJYK9VXVqZXvgMQDungCQ4PgaL/ITc +x1hDiz7pCLiqE9EDIyGLxWG4tccVaWTsjVtOpeDIfjwXGLLrmk0RpYsOLj6HI2M CUp6pzKpi3Dl/VpbD6LX17Ry2Rb6Cg1wYiK3KfJQVtK3k11swMMVM2I44otQBVVI 6WJ1dgkQNngFvtNosEQLv03ee531Ux3WMVm9bUcrqI87KP6JhJcBfjajW56dtwOh mxfNQGzQ24LveYK/ZPlLi7S3Vyo8O4U= -----END CERTIFICATE-----Generated at Mon Oct 19 20:52:36 2026 by rpki-client