$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json) Hash identifier: z0WPezT30qxLqhQEgKRhloQPI2V3YNHT02WLFcpEefQ= Subject key identifier: 8A:CD:0B:4C:66:AB:76:EA:0B:34:55:A0:F2:D2:BF:41:20:25:56:8B Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584F7A4D9AF7937BF9E37B66FC3E Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 22504 IP address blocks: 162.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9a:f7:93:7b:f9:e3:7b:66:fc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=29c92c17-48c6-4e16-bcf2-75ecffe2187d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:11:5b:52:72:95:c4:33:03:95:b4:7d:85: 7f:ac:b4:25:6d:1d:83:c8:b7:a2:a7:6b:1b:99:90: 54:09:0f:00:3b:28:0e:7b:8a:59:a5:d6:4a:30:66: 89:3a:73:ae:0c:c2:7d:5b:aa:fb:49:3b:39:4f:37: fc:f1:0e:5c:66:9e:35:a8:b8:a9:1a:8f:21:b8:48: 48:57:b1:c0:1f:e7:6b:07:83:a5:fb:46:fe:6d:3b: b3:c7:81:1b:dd:ab:05:a3:32:a1:2f:12:81:3a:ee: 6a:21:c0:2d:f3:7d:d0:69:e7:b9:85:e2:b6:54:05: 78:06:5f:bf:95:75:d8:6b:85:51:55:0a:69:eb:2e: 5b:c8:c8:ed:87:b4:78:b7:bc:dc:83:be:ef:0f:81: 37:c9:2b:7d:ba:33:63:13:c8:b0:9e:70:47:04:b7: af:e3:a0:46:78:1e:01:d8:a5:73:b6:4a:07:1c:1e: cf:20:13:65:05:ba:58:c5:86:28:e0:83:2e:2f:a8: 2c:89:90:f6:ea:39:2c:a6:bd:3e:a8:1a:71:78:92: df:fa:35:62:04:eb:d1:9a:19:0f:68:14:a9:dc:9c: ba:26:63:d9:df:bc:7d:23:df:99:d4:c2:01:a2:2e: 43:2f:1f:79:93:66:12:03:25:60:9f:d6:93:c8:7b: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:0B:4C:66:AB:76:EA:0B:34:55:A0:F2:D2:BF:41:20:25:56:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:da:64:1b:dd:34:ae:b9:28:4a:aa:b8:1e:0b:36:12:c6:3e: 93:b5:f3:08:fe:cb:9d:60:01:45:8c:f8:aa:9f:de:30:66:af: f4:3c:44:7b:27:46:b5:e5:34:ba:10:7d:34:a6:43:d8:a9:17: 22:32:8f:81:b8:59:1b:9e:be:63:b1:55:a5:ac:f6:2e:67:c2: 61:61:4b:bd:8a:e7:e3:07:85:74:13:ea:60:7a:fe:1f:48:9d: 1c:f9:17:ae:8c:d9:34:25:b0:6b:cd:48:3d:46:3c:a8:1b:0a: c1:77:83:91:21:96:45:d7:4e:d1:3d:5e:78:49:13:af:7c:ab: e8:ca:53:a5:ac:1b:1f:f1:cf:9a:f0:26:8f:73:5f:3a:dd:52: 1d:4e:ed:0e:b8:24:2a:6b:00:38:01:f6:dc:d8:b2:cd:ff:cd: 25:4f:d1:40:49:73:2b:30:17:0e:d7:61:03:14:da:68:8e:fd: 84:8c:c0:81:07:90:f8:bd:23:9b:32:68:6a:1a:38:fb:cf:5f: 09:f4:ad:89:b7:a8:82:3c:79:13:85:5b:00:19:d3:4e:28:db: fc:05:b3:9d:c9:9d:b1:37:76:8c:8e:80:29:7a:85:82:f2:b0: de:20:b9:87:f4:e8:75:89:be:25:7b:08:aa:bd:de:a8:be:39: 2d:c7:5b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZr3k3v543tm/D4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjljOTJjMTctNDhjNi00ZTE2LWJjZjItNzVlY2ZmZTIxODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RcRW1JylcQzA5W0fYV/rLQlbR2DyLeip2sb mZBUCQ8AOygOe4pZpdZKMGaJOnOuDMJ9W6r7STs5Tzf88Q5cZp41qLipGo8huEhI V7HAH+drB4Ol+0b+bTuzx4Eb3asFozKhLxKBOu5qIcAt833Qaee5heK2VAV4Bl+/ lXXYa4VRVQpp6y5byMjth7R4t7zcg77vD4E3ySt9ujNjE8iwnnBHBLev46BGeB4B 2KVztkoHHB7PIBNlBbpYxYYo4IMuL6gsiZD26jkspr0+qBpxeJLf+jViBOvRmhkP aBSp3Jy6JmPZ37x9I9+Z1MIBoi5DLx95k2YSAyVgn9aTyHtmywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrNC0xmq3bqCzRVoPLSv0EgJVaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInaZBvdNK65KEqquB4LNhLGPpO18wj+y51gAUWM+Kqf3jBmr/Q8RHsn RrXlNLoQfTSmQ9ipFyIyj4G4WRuevmOxVaWs9i5nwmFhS72K5+MHhXQT6mB6/h9I nRz5F66M2TQlsGvNSD1GPKgbCsF3g5EhlkXXTtE9XnhJE698q+jKU6WsGx/xz5rw Jo9zXzrdUh1O7Q64JCprADgB9tzYss3/zSVP0UBJcyswFw7XYQMU2miO/YSMwIEH kPi9I5syaGoaOPvPXwn0rYm3qII8eROFWwAZ004o2/wFs53JnbE3doyOgCl6hYLy sN4guYf06HWJviV7CKq93qi+OS3HW6Q= -----END CERTIFICATE-----Generated at Sat Oct 31 11:48:43 2026 by rpki-client