$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa File: bd227794-03b0-3e1a-98e0-833817b1a3dc.roa (raw, json) Hash identifier: 8bAnvQ/lLNhBI5uF4BqiaivOxZoERz/wz4d9tCD0MGs= Subject key identifier: CE:5A:26:1A:36:5F:E3:43:1D:1D:B5:E8:91:11:21:FF:51:2F:49:EB Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584F4973A68CE6D71F608965C040 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53768 IP address blocks: 162.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a6:8c:e6:d7:1f:60:89:65:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=624a5e41-d90d-4289-abbb-c7686b03eae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:2a:cb:ac:78:95:29:12:0c:c5:ee:f1:11: b7:fd:96:87:14:60:86:4f:be:1b:26:9c:42:a0:4e: 63:70:46:7f:40:fe:7d:f5:71:41:bd:e4:5e:d2:ce: dd:f5:64:e9:f2:1c:50:d8:35:24:0d:79:2f:1f:e4: 2d:80:11:31:19:62:0e:b2:a9:77:14:47:ee:a9:c8: de:76:06:30:71:a5:79:a8:24:a1:10:c6:79:55:5c: 41:2c:3f:cf:30:d5:a9:ae:ad:7c:37:a6:6e:d0:fb: 52:eb:a0:bd:f2:6a:58:6a:45:ea:0b:c3:72:62:cb: 10:93:14:f3:c3:ff:0a:1f:39:90:f0:8d:35:10:be: c4:b5:83:bd:54:5c:d2:5e:5b:40:2b:f0:9b:3e:83: 44:5e:8d:32:ae:33:1e:c6:ff:e8:b4:c9:55:aa:98: c9:e9:04:18:07:46:97:9e:e6:b8:0d:64:e9:65:08: cb:0d:29:97:12:9f:64:b5:87:2b:a1:e7:49:8d:55: eb:62:2e:66:1c:6f:71:12:8b:42:75:a0:fa:79:04: 21:5f:9f:2c:bb:57:b8:12:7b:42:33:2b:74:fc:de: ed:53:84:7c:24:19:88:ad:0a:f7:9f:9a:57:3c:9a: 2e:d2:4a:ca:94:f1:a8:ac:c9:b1:01:68:e8:d3:c2: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5A:26:1A:36:5F:E3:43:1D:1D:B5:E8:91:11:21:FF:51:2F:49:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:04:79:3d:4f:a9:2e:67:fe:0f:26:69:50:1c:97:cc:fc:89: 31:cd:f6:f3:90:33:e8:c9:60:14:d2:27:41:03:fd:21:89:c9: 0c:bb:97:e0:ad:7a:73:b4:e8:1a:29:73:38:d4:68:a3:0e:55: 9f:e7:57:3a:c8:ed:db:af:0d:5a:40:88:9c:05:2e:0d:9b:0a: 55:a6:6a:07:b0:ae:89:bf:53:6a:9c:f6:8b:c5:d1:62:88:53: 2c:e4:09:a4:23:7d:1c:66:70:9e:b1:13:ec:fc:83:af:ec:f4: 4e:58:51:e2:f2:49:52:43:a1:5d:af:79:c0:00:61:b6:4a:c4: e3:66:7b:6b:d6:2f:1d:80:8c:63:76:61:4f:31:a8:56:17:5d: c0:bb:d9:c8:2e:d6:60:6e:bd:16:9d:55:07:ef:66:81:40:15: 29:c8:7a:a4:ad:05:c1:e7:a9:b3:7d:0b:7f:dc:6d:77:76:a4: 7b:3f:eb:5e:a7:99:24:c3:47:58:ff:4d:21:ff:50:cb:9e:26: b1:ee:cd:3c:c1:5a:f8:f4:ca:80:19:ac:d4:5e:11:32:d0:dd: ef:8d:55:12:c5:b9:2a:02:a6:bf:28:89:fe:01:17:61:3e:3e: e6:da:bf:10:44:91:6e:75:12:33:ac:0f:62:01:9f:07:c6:4c: 18:ab:66:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6aM5tcfYIllwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjI0YTVlNDEtZDkwZC00Mjg5LWFiYmItYzc2ODZiMDNlYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtMqy6x4lSkSDMXu8RG3/ZaHFGCGT74bJpxC oE5jcEZ/QP599XFBveRe0s7d9WTp8hxQ2DUkDXkvH+QtgBExGWIOsql3FEfuqcje dgYwcaV5qCShEMZ5VVxBLD/PMNWprq18N6Zu0PtS66C98mpYakXqC8NyYssQkxTz w/8KHzmQ8I01EL7EtYO9VFzSXltAK/CbPoNEXo0yrjMexv/otMlVqpjJ6QQYB0aX nua4DWTpZQjLDSmXEp9ktYcroedJjVXrYi5mHG9xEotCdaD6eQQhX58su1e4EntC Myt0/N7tU4R8JBmIrQr3n5pXPJou0krKlPGorMmxAWjo08J1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5aJho2X+NDHR216JERIf9RL0nrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvYmQyMjc3OTQtMDNiMC0z ZTFhLTk4ZTAtODMzODE3YjFhM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEooYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsEeT1PqS5n/g8maVAcl8z8iTHN9vOQM+jJYBTSJ0ED/SGJyQy7l+Ct enO06BopczjUaKMOVZ/nVzrI7duvDVpAiJwFLg2bClWmagewrom/U2qc9ovF0WKI UyzkCaQjfRxmcJ6xE+z8g6/s9E5YUeLySVJDoV2vecAAYbZKxONme2vWLx2AjGN2 YU8xqFYXXcC72cgu1mBuvRadVQfvZoFAFSnIeqStBcHnqbN9C3/cbXd2pHs/616n mSTDR1j/TSH/UMueJrHuzTzBWvj0yoAZrNReETLQ3e+NVRLFuSoCpr8oif4BF2E+ PubavxBEkW51EjOsD2IBnwfGTBirZiI= -----END CERTIFICATE-----Generated at Sat Sep 26 16:06:24 2026 by rpki-client