$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa File: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (raw, json) Hash identifier: kCWrIN6biQiatgaJhRgtwXs3ZxJ+ukICDp8JHPVUBEE= Subject key identifier: EE:5A:68:C5:3D:ED:27:FA:2D:EB:F3:90:D5:A8:0F:92:4A:F3:C6:C1 Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584EFCACCBD5E91ADB883F683E00 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 2734 IP address blocks: 162.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cb:d5:e9:1a:db:88:3f:68:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=d4783495-80b1-4dfc-9978-03014dc59994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:69:4c:5f:8a:e3:32:29:81:d4:f0:49:66: c1:25:71:19:80:1d:8f:ad:23:46:9b:d1:6f:15:d1: 43:99:d6:6d:02:d7:0b:b5:c3:6a:4e:09:31:2c:14: e1:fd:3c:0e:88:1f:54:6a:68:29:00:d0:c7:d1:d0: fc:bc:04:76:73:9b:ff:53:12:19:5c:95:7a:b3:06: 50:1b:91:cc:4c:f7:fd:81:d8:5e:80:74:6e:67:05: 6a:52:14:d6:29:51:d1:b2:b4:6f:01:de:e4:6a:80: c4:83:48:ba:e6:ba:34:5c:1e:e5:5f:d2:56:34:d0: 0b:22:a7:1f:56:e5:e4:7c:9e:07:1e:5f:d1:0b:bd: ca:9d:3b:ba:84:90:9a:bd:b0:66:0a:e1:fc:24:34: 1f:f0:4a:3a:c6:22:91:bb:5b:56:78:96:62:f3:68: 42:0c:f0:96:eb:0a:e6:9f:18:86:64:8e:d7:85:d5: fc:a1:bc:58:9c:5e:cd:a1:c3:bd:c5:18:85:d0:c3: 23:6c:8a:c2:5b:d4:d0:f1:fe:d1:1b:8b:b0:d1:89: 49:2d:6f:46:1c:d5:46:40:4f:cc:9e:80:15:22:b1: 0f:e6:81:f2:32:2e:96:aa:63:c9:73:5c:68:01:65: 22:c4:13:bd:f2:2e:ae:f4:ef:81:a6:b3:19:27:51: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:68:C5:3D:ED:27:FA:2D:EB:F3:90:D5:A8:0F:92:4A:F3:C6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:78:57:91:d2:bd:34:72:bf:c8:65:26:bd:cb:de:98:9a:13: 79:40:5c:5e:7f:06:07:a7:4b:6a:fa:19:32:d7:50:f3:9d:55: 76:76:0a:70:b7:d4:fe:7b:24:3c:dd:a6:77:90:7f:b6:95:44: 63:23:94:5b:60:cb:90:71:2a:1a:79:b6:e9:7d:c7:e9:4d:92: 80:a1:c2:1c:88:36:f0:de:84:e5:c1:59:56:73:42:5a:e6:2e: 56:22:a6:12:09:1a:a6:12:66:fb:47:a0:01:e9:b9:4a:67:19: 64:b0:df:9b:92:16:27:e3:d8:98:dd:58:eb:db:4c:76:cf:96: ec:72:00:9c:3d:2a:55:a8:80:40:8e:7d:7f:92:2e:40:e0:9d: f4:74:0a:a9:42:7e:84:96:7d:78:61:ba:6c:94:3b:b9:59:b8: ae:6c:87:76:ca:74:13:7c:2f:8a:b5:fe:42:60:6f:b9:c1:7f: 18:04:b6:6e:96:3c:2c:dc:af:18:07:1b:05:ed:f5:18:e2:e1: c3:c9:13:0d:88:f8:4a:a5:00:98:61:6d:d7:f5:e6:9d:b9:4b: 91:bc:12:b3:3e:41:93:1c:2c:01:a2:63:7c:e1:d4:ad:9c:dd: e1:cd:d2:67:ef:92:60:74:ad:61:fe:d2:13:d2:61:24:0f:03: 56:f4:f3:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMvV6RrbiD9oPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDQ3ODM0OTUtODBiMS00ZGZjLTk5NzgtMDMwMTRkYzU5OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDRpTF+K4zIpgdTwSWbBJXEZgB2PrSNGm9Fv FdFDmdZtAtcLtcNqTgkxLBTh/TwOiB9UamgpANDH0dD8vAR2c5v/UxIZXJV6swZQ G5HMTPf9gdhegHRuZwVqUhTWKVHRsrRvAd7kaoDEg0i65ro0XB7lX9JWNNALIqcf VuXkfJ4HHl/RC73KnTu6hJCavbBmCuH8JDQf8Eo6xiKRu1tWeJZi82hCDPCW6wrm nxiGZI7XhdX8obxYnF7NocO9xRiF0MMjbIrCW9TQ8f7RG4uw0YlJLW9GHNVGQE/M noAVIrEP5oHyMi6WqmPJc1xoAWUixBO98i6u9O+BprMZJ1FmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5aaMU97Sf6LevzkNWoD5JK88bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvOTRiNTk4Y2EtNjUwYi0z YjkyLTg5YTMtZTA4NDhjMGNkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN4V5HSvTRyv8hlJr3L3piaE3lAXF5/BgenS2r6GTLXUPOdVXZ2CnC3 1P57JDzdpneQf7aVRGMjlFtgy5BxKhp5tul9x+lNkoChwhyINvDehOXBWVZzQlrm LlYiphIJGqYSZvtHoAHpuUpnGWSw35uSFifj2JjdWOvbTHbPluxyAJw9KlWogECO fX+SLkDgnfR0CqlCfoSWfXhhumyUO7lZuK5sh3bKdBN8L4q1/kJgb7nBfxgEtm6W PCzcrxgHGwXt9Rji4cPJEw2I+EqlAJhhbdf15p25S5G8ErM+QZMcLAGiY3zh1K2c 3eHN0mfvkmB0rWH+0hPSYSQPA1b08/Y= -----END CERTIFICATE-----Generated at Sat Sep 19 00:11:40 2026 by rpki-client