$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/85524bad-3854-3505-8970-1238f551953c.roa File: 85524bad-3854-3505-8970-1238f551953c.roa (raw, json) Hash identifier: /7xAcxRiwG+wg84fijVvAYhLkDUwrbfI1m5xkkp7poM= Subject key identifier: 90:BF:8C:0A:A3:08:0D:B1:1D:5E:C9:0F:FE:59:7F:F4:0A:4B:FA:2D Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584EA788C6CEA763434FFC049700 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/85524bad-3854-3505-8970-1238f551953c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11096 IP address blocks: 162.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:c6:ce:a7:63:43:4f:fc:04:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=889ee6cd-9ed3-4901-895a-c240917c319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:ed:36:df:e0:1a:ec:a4:55:6f:a2:c6:4c: 74:ff:39:61:5d:09:d3:04:0f:ec:79:c3:7e:99:be: fc:b9:e6:9f:61:9b:f3:60:ad:10:7a:5f:46:42:ae: ee:a1:aa:84:39:02:a4:bb:33:25:62:39:8a:3e:37: c1:ac:22:f2:f1:03:e3:22:79:65:f8:07:a1:61:b4: f6:2d:f2:71:71:df:46:64:15:2f:52:e9:ef:6a:46: 40:32:df:f1:78:76:d5:59:5f:e9:d5:78:d3:1d:5b: ee:21:5d:d5:0c:73:1f:be:40:98:88:2f:1a:99:89: ca:a9:56:2e:bd:0c:42:88:98:2b:2b:3b:d1:0c:fe: db:4e:74:2f:31:70:25:a0:16:82:d0:84:05:5f:df: cb:0c:de:d8:1c:f5:c4:75:70:b7:8d:d4:3e:62:40: 5f:f1:d1:86:3d:ec:94:a7:8d:40:ed:37:f5:8a:02: 8f:da:db:21:12:7f:bc:d4:26:2b:f0:03:8d:1d:60: 5a:6e:20:68:2e:6e:8c:c5:7c:5a:36:9a:17:a8:e4: 9b:12:e0:98:b5:a3:7b:e5:ed:1e:ae:9a:1d:9e:a1: 2a:3e:29:9b:51:1d:b1:fe:92:39:28:54:26:62:5a: 0f:17:d6:30:d7:0e:1c:9b:04:ea:75:72:71:98:5c: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:8C:0A:A3:08:0D:B1:1D:5E:C9:0F:FE:59:7F:F4:0A:4B:FA:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/85524bad-3854-3505-8970-1238f551953c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 162.223.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9f:2d:63:62:99:9f:44:90:b8:c6:8a:83:4d:63:33:45:19: 26:8b:bf:b7:4e:f9:20:8a:6a:0d:44:c2:d7:2f:a2:19:41:d5: 7e:09:72:93:05:34:f3:b1:ed:e4:ae:f3:94:d0:e3:ad:82:d8: 40:68:69:74:83:a4:6e:d4:29:58:9c:4b:7d:e2:6d:67:8c:6e: 40:32:f2:25:78:43:aa:f6:c6:aa:d6:0f:dd:37:c7:83:ee:07: 0b:d1:19:09:b8:56:cc:22:be:f4:50:9b:68:8d:72:62:b5:61: 27:3b:09:14:e9:3b:3a:41:e7:f4:3f:10:ce:16:94:e2:69:0d: 8c:13:36:de:54:92:a4:01:3e:db:6d:76:9f:cc:42:63:ce:e9: 36:6d:eb:50:1a:c4:47:77:62:d2:cd:0e:98:c1:0c:12:f4:e5: 64:46:3b:2c:2f:88:7f:ed:6b:14:d8:5c:ad:8f:61:dd:27:19: 35:ca:88:e1:49:84:96:fc:ba:88:0b:0f:d9:32:83:f8:3c:7c: d9:58:7c:83:ab:5a:4b:99:33:47:82:73:4c:12:97:42:49:06: 84:c1:a4:ab:28:5c:1d:bf:3a:a3:12:fe:4b:ab:d3:43:7c:1f: a8:39:ca:a5:2c:a0:39:cc:2a:0e:8b:67:cf:53:a3:88:8f:a0: cb:ca:fd:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMbOp2NDT/wElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODg5ZWU2Y2QtOWVkMy00OTAxLTg5NWEtYzI0MDkxN2MzMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzHtNt/gGuykVW+ixkx0/zlhXQnTBA/secN+ mb78ueafYZvzYK0Qel9GQq7uoaqEOQKkuzMlYjmKPjfBrCLy8QPjInll+AehYbT2 LfJxcd9GZBUvUunvakZAMt/xeHbVWV/p1XjTHVvuIV3VDHMfvkCYiC8amYnKqVYu vQxCiJgrKzvRDP7bTnQvMXAloBaC0IQFX9/LDN7YHPXEdXC3jdQ+YkBf8dGGPeyU p41A7Tf1igKP2tshEn+81CYr8AONHWBabiBoLm6MxXxaNpoXqOSbEuCYtaN75e0e rpodnqEqPimbUR2x/pI5KFQmYloPF9Yw1w4cmwTqdXJxmFxSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC/jAqjCA2xHV7JD/5Zf/QKS/otMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvODU1MjRiYWQtMzg1NC0z NTA1LTg5NzAtMTIzOGY1NTE5NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGfLWNimZ9EkLjGioNNYzNFGSaLv7dO+SCKag1EwtcvohlB1X4JcpMF NPOx7eSu85TQ462C2EBoaXSDpG7UKVicS33ibWeMbkAy8iV4Q6r2xqrWD903x4Pu BwvRGQm4VswivvRQm2iNcmK1YSc7CRTpOzpB5/Q/EM4WlOJpDYwTNt5UkqQBPttt dp/MQmPO6TZt61AaxEd3YtLNDpjBDBL05WRGOywviH/taxTYXK2PYd0nGTXKiOFJ hJb8uogLD9kyg/g8fNlYfIOrWkuZM0eCc0wSl0JJBoTBpKsoXB2/OqMS/kur00N8 H6g5yqUsoDnMKg6LZ89To4iPoMvK/a0= -----END CERTIFICATE-----Generated at Sat Sep 12 11:08:23 2026 by rpki-client