$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa File: cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa (raw, json) Hash identifier: ceJcPa9kaZf8wm5brw/RRWOppJJS3JuF8/HgjKVZ+ic= Subject key identifier: 33:8E:C3:ED:42:36:42:5A:A7:39:C0:AE:96:79:52:17:BD:9A:ED:13 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584F5A32C37A9E6A58A399E10880 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 26229 IP address blocks: 162.138.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c3:7a:9e:6a:58:a3:99:e1:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=ba2f2968-d80f-4a5b-a5a6-e46581b08633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:5d:e6:f7:36:53:f8:37:2b:f4:04:3a:12: 60:05:bc:a7:ae:da:83:cc:31:78:ae:b9:62:68:2b: c2:46:f8:69:63:9b:fe:97:42:55:36:6f:56:40:19: 85:ea:56:7a:26:64:1a:83:c7:b1:b9:a4:ed:fb:7e: 44:68:6d:cf:5d:09:8c:89:df:b2:b5:61:4a:c8:81: e9:83:79:9b:0c:cf:bf:e8:ff:c6:e3:74:47:9c:75: 80:6f:61:38:e9:05:fa:07:0a:49:a4:0e:79:5c:70: 49:dd:0c:a6:48:ae:d0:9c:3e:4c:28:e3:38:78:bb: ec:cb:80:f2:20:7f:06:15:d6:de:f3:51:02:aa:60: 79:4d:86:67:b6:7e:17:7e:a2:32:20:5b:5f:b3:63: 77:34:9b:1f:70:de:c2:d1:2d:92:a9:74:92:11:df: 49:a7:da:31:e1:82:ad:09:d3:8d:58:aa:51:80:c6: 9a:4d:0e:44:99:9a:8b:d3:a9:1b:7c:76:87:40:5a: f4:18:dc:f1:55:77:d9:90:8a:1b:7f:43:ad:69:6b: 46:31:f2:4c:14:7a:0c:92:1e:65:04:db:a5:e2:cb: e2:95:da:9a:44:57:87:31:1e:c0:d3:72:e8:a9:f3: 48:4c:ac:26:0c:ff:9a:07:ff:d2:b5:28:d2:9f:2b: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8E:C3:ED:42:36:42:5A:A7:39:C0:AE:96:79:52:17:BD:9A:ED:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:e8:f4:e3:12:a0:3d:23:69:c5:6b:a9:ee:01:43:a7:c8: b8:5b:90:a9:8c:b6:fd:f8:8e:e7:71:28:b8:62:55:71:18:87: 67:83:16:18:35:1a:f2:d3:6e:fe:6f:a4:16:31:b6:1d:f5:99: f8:f4:d8:2d:a3:f7:d1:2e:a0:79:27:33:d7:fc:3b:ee:31:56: d6:3b:1f:5f:54:65:e9:86:92:c3:76:20:08:6c:ea:00:46:43: 15:1e:d9:07:e1:b3:3a:3b:1b:63:63:cd:16:e1:ef:5e:72:a7: f2:7c:49:5a:5f:bb:72:35:d9:0d:a5:02:9c:a1:6d:31:5e:18: 3d:af:a2:d5:d3:4f:df:5c:d7:d1:27:3d:0c:29:33:da:a4:4a: e4:bd:8c:da:77:97:2b:4b:81:66:a8:8d:06:28:ec:13:48:a5: c4:21:0e:99:48:2a:35:55:f9:8d:8d:30:f7:40:38:d0:24:81: 04:05:d3:8e:43:bb:07:f3:b4:e2:47:53:f7:2b:65:40:3f:dd: 97:39:86:26:4c:93:61:59:29:3d:0b:74:12:bf:d5:34:fd:2c: 2f:e6:d3:4a:ed:e3:86:aa:cf:b6:4a:c9:07:cc:7f:44:7a:e8: 28:51:7c:fc:c8:f8:21:dd:71:eb:74:c5:1c:35:55:d5:f3:82: d5:23:e8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsN6nmpYo5nhCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmEyZjI5NjgtZDgwZi00YTViLWE1YTYtZTQ2NTgxYjA4NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVpd5vc2U/g3K/QEOhJgBbynrtqDzDF4rrli aCvCRvhpY5v+l0JVNm9WQBmF6lZ6JmQag8exuaTt+35EaG3PXQmMid+ytWFKyIHp g3mbDM+/6P/G43RHnHWAb2E46QX6BwpJpA55XHBJ3QymSK7QnD5MKOM4eLvsy4Dy IH8GFdbe81ECqmB5TYZntn4XfqIyIFtfs2N3NJsfcN7C0S2SqXSSEd9Jp9ox4YKt CdONWKpRgMaaTQ5EmZqL06kbfHaHQFr0GNzxVXfZkIobf0OtaWtGMfJMFHoMkh5l BNul4svildqaRFeHMR7A03LoqfNITKwmDP+aB//StSjSnysNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOOw+1CNkJapznArpZ5Uhe9mu0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvY2IzM2M1ZmYtNGUzYi0z ZWQzLWI0NmMtYTM3MTg5NmE2YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1D6PTjEqA9I2nFa6nuAUOnyLhbkKmMtv34judxKLhiVXEYh2eDFhg1 GvLTbv5vpBYxth31mfj02C2j99EuoHknM9f8O+4xVtY7H19UZemGksN2IAhs6gBG QxUe2Qfhszo7G2NjzRbh715yp/J8SVpfu3I12Q2lApyhbTFeGD2votXTT99c19En PQwpM9qkSuS9jNp3lytLgWaojQYo7BNIpcQhDplIKjVV+Y2NMPdAONAkgQQF045D uwfztOJHU/crZUA/3Zc5hiZMk2FZKT0LdBK/1TT9LC/m00rt44aqz7ZKyQfMf0R6 6ChRfPzI+CHdcet0xRw1VdXzgtUj6OE= -----END CERTIFICATE-----Generated at Tue Oct 6 09:28:17 2026 by rpki-client