$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa File: 70abb78e-0ea4-389d-addf-e58129c2bff6.roa (raw, json) Hash identifier: wz+xMY6xTD4B8A1CjWAfpkvgcZCie0Gaio5HDoaIWBA= Subject key identifier: F2:FA:E8:A8:40:AF:05:F7:92:C4:3D:09:D2:F9:D8:2C:9E:09:C9:22 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584F7A4D9E0D7059DA29D84536C0 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 22504 IP address blocks: 162.118.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9e:0d:70:59:da:29:d8:45:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b44c460b-c6f2-41ed-9db0-e67d14786989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:67:2d:47:3c:d6:87:a3:8f:e3:25:8a:e5: 89:87:9c:03:13:1d:af:26:3a:d6:8e:37:1c:96:11: 02:11:ea:69:89:6e:a1:19:71:ef:00:9d:01:b3:e5: 1b:10:bc:26:99:ec:30:e2:a7:4e:ac:32:de:a4:78: cc:85:15:06:ee:33:f2:f6:72:12:14:3f:19:a3:77: ab:61:61:13:8c:a9:ad:ed:64:5b:4c:99:15:88:ad: bc:d3:23:35:52:e3:12:57:a1:f2:44:01:2e:e2:a8: 64:c1:ca:79:f5:63:db:50:5d:3a:eb:e2:9d:8f:ca: c4:a6:12:7e:df:4e:d0:99:1d:9f:cf:dd:80:1e:a6: 2d:5e:97:f9:e7:84:ed:d2:29:11:e9:b7:1f:f7:71: 24:d4:da:20:db:4b:c5:f6:a5:9a:3a:8d:d2:0f:a1: 11:91:88:4d:f4:14:c7:4d:da:91:83:0e:df:40:33: fd:92:87:ca:ed:99:7b:cf:12:57:5d:0c:b9:64:47: cb:1f:66:70:9f:65:68:0a:30:4a:6a:b6:d7:81:c6: 68:16:0e:98:b8:f8:7c:b0:66:2f:cb:bc:69:cb:b3: 2b:00:23:f3:3b:ee:97:76:05:ad:69:cd:5f:51:4a: 04:75:11:fe:f3:11:c5:66:06:c3:7c:81:0f:07:9d: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FA:E8:A8:40:AF:05:F7:92:C4:3D:09:D2:F9:D8:2C:9E:09:C9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3f:79:1a:7b:67:df:c9:b2:35:af:77:40:c7:44:01:47:83: 68:ac:f5:df:6e:39:4f:21:ef:f0:4e:42:7b:5e:9d:fb:9e:d8: 26:48:93:1a:81:4d:e9:29:4c:2d:10:02:32:72:04:e9:e7:1c: 06:06:01:9f:88:eb:6d:c7:a6:43:a9:bd:fd:d6:ac:9c:25:51: b1:57:dd:1b:c2:80:b5:f3:55:3a:34:c5:cd:b9:a4:73:98:9c: d4:6c:4c:33:7a:b2:ac:cf:f2:1d:d6:b1:e7:e3:bb:b2:bc:2a: de:53:e2:8e:cc:f7:ba:6d:9b:fb:d5:9b:0e:d1:76:0f:ea:30: ad:da:dc:04:55:da:4c:3c:6f:39:93:d8:8b:31:44:ae:f8:30: 36:56:bf:aa:b8:f2:d7:7a:aa:c0:49:22:80:c5:86:0e:b6:bd: 1a:88:98:d4:83:32:53:c3:21:b2:0b:c8:aa:ec:38:a5:64:f7: 4a:3a:7f:a8:4e:12:47:e1:40:81:39:5c:26:66:00:11:03:7f: 86:75:8d:0c:3e:5d:aa:71:78:77:03:2b:56:50:16:4f:d3:b9: 4c:b2:a0:0b:19:31:42:72:0f:10:7f:51:04:a5:05:05:ee:6a: 96:5e:6c:a4:58:7f:8a:fe:76:14:d3:99:ae:76:b0:b9:d9:4a: 02:d6:2a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ4NcFnaKdhFNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjQ0YzQ2MGItYzZmMi00MWVkLTlkYjAtZTY3ZDE0Nzg2OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI9nLUc81oejj+MliuWJh5wDEx2vJjrWjjcc lhECEeppiW6hGXHvAJ0Bs+UbELwmmeww4qdOrDLepHjMhRUG7jPy9nISFD8Zo3er YWETjKmt7WRbTJkViK280yM1UuMSV6HyRAEu4qhkwcp59WPbUF066+Kdj8rEphJ+ 307QmR2fz92AHqYtXpf554Tt0ikR6bcf93Ek1Nog20vF9qWaOo3SD6ERkYhN9BTH TdqRgw7fQDP9kofK7Zl7zxJXXQy5ZEfLH2Zwn2VoCjBKarbXgcZoFg6YuPh8sGYv y7xpy7MrACPzO+6XdgWtac1fUUoEdRH+8xHFZgbDfIEPB52cRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL66KhArwX3ksQ9CdL52CyeCckiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvNzBhYmI3OGUtMGVhNC0z ODlkLWFkZGYtZTU4MTI5YzJiZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU/eRp7Z9/JsjWvd0DHRAFHg2is9d9uOU8h7/BOQntenfue2CZIkxqB TekpTC0QAjJyBOnnHAYGAZ+I623HpkOpvf3WrJwlUbFX3RvCgLXzVTo0xc25pHOY nNRsTDN6sqzP8h3Wsefju7K8Kt5T4o7M97ptm/vVmw7Rdg/qMK3a3ARV2kw8bzmT 2IsxRK74MDZWv6q48td6qsBJIoDFhg62vRqImNSDMlPDIbILyKrsOKVk90o6f6hO EkfhQIE5XCZmABEDf4Z1jQw+XapxeHcDK1ZQFk/TuUyyoAsZMUJyDxB/UQSlBQXu apZebKRYf4r+dhTTma52sLnZSgLWKic= -----END CERTIFICATE-----Generated at Sun Nov 1 09:00:03 2026 by rpki-client