$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b7f3a347-064b-369d-85ec-a0680735afc0.roa File: b7f3a347-064b-369d-85ec-a0680735afc0.roa (raw, json) Hash identifier: XSQOX2Fa+aNQgTsj40UTndT/oxEk02aB7tFhDpO2N3s= Subject key identifier: 33:94:BE:0C:42:5B:5C:85:B3:25:89:13:C1:FB:70:28:B6:38:C5:A4 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584F94D33772B91A61C9C288B680 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b7f3a347-064b-369d-85ec-a0680735afc0.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 12208 IP address blocks: 162.254.44.0/24 maxlen: 24 162.254.45.0/24 maxlen: 24 162.254.46.0/24 maxlen: 24 162.254.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:37:72:b9:1a:61:c9:c2:88:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=8a34ccc7-c4a1-4e96-b997-95a8dd483312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:cf:c6:09:52:b2:f5:88:12:0f:71:76:90: a6:5e:ad:ff:12:74:d4:35:75:be:c7:20:bd:5d:18: 1c:60:10:dd:92:ba:d5:69:68:1c:3d:14:28:e5:82: 99:21:ae:e5:7f:a3:89:10:6e:28:f7:45:56:d0:df: f6:c0:0c:6c:c4:d1:39:9a:2b:f7:bc:32:2e:af:ee: 86:c3:a4:c9:ef:9f:b4:5c:16:7f:ca:20:83:94:76: e1:41:ba:86:73:b6:17:fe:fe:c9:2b:35:9e:58:7e: 8f:92:d7:a6:b1:1f:a5:43:33:f5:59:a2:a3:c8:4b: 00:6a:51:8a:21:d4:0e:5c:57:a7:f5:bf:9d:84:24: e5:9c:7e:81:16:93:65:f5:d5:09:47:14:3f:fa:da: 2a:9f:86:6c:2f:d8:d7:f9:e7:8b:01:67:e4:bb:9f: 0d:4d:e7:6e:2f:82:59:3b:a9:e4:79:23:79:02:1b: 36:77:48:9c:53:6a:3e:f2:ad:f4:ba:20:7c:f9:db: 26:85:4f:ee:df:6b:69:5c:ab:5c:0f:c1:28:40:5f: 48:b1:9a:90:ed:f9:68:53:52:60:ac:46:3d:7c:8b: db:07:62:6d:72:ea:c4:66:f8:dd:58:dc:4c:9b:46: 67:b4:2e:87:87:e4:18:5e:58:7e:3d:4e:ef:3a:83: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:BE:0C:42:5B:5C:85:B3:25:89:13:C1:FB:70:28:B6:38:C5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b7f3a347-064b-369d-85ec-a0680735afc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 162.254.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ec:5a:31:3a:11:49:87:3d:32:00:71:09:aa:82:c1:14:17: b8:62:ff:6e:a4:0e:61:9d:36:ab:81:a3:82:e1:9b:00:5d:3a: f8:c7:9c:4b:af:60:a1:43:2c:a0:92:4d:a5:df:57:22:c5:99: 85:03:c8:7e:ae:9c:7f:76:e1:59:9d:78:34:68:32:20:a7:00: 63:ce:43:23:d6:bb:17:14:56:a7:eb:a3:af:20:6d:ac:32:81: c6:d1:38:ac:eb:6d:27:33:95:a7:57:bd:46:80:ff:a9:16:4c: cc:0f:7a:af:9a:a8:3d:cb:b3:de:5b:aa:1c:a4:75:3b:6d:91: c4:15:98:ad:e1:76:87:cd:c6:90:a6:10:dc:34:33:00:89:21: 3a:53:ac:87:95:da:51:58:9a:c3:f5:4c:42:7e:33:5f:4e:f0: 9c:f2:d7:6e:1d:32:c0:2c:d2:7d:1a:2e:fc:75:19:12:d3:d2: 24:7a:2a:ad:56:a0:1d:a9:9f:09:14:6c:7c:81:92:91:71:e1: 1f:62:e0:f6:a4:5d:a8:b0:83:4d:03:df:75:27:74:cc:07:68: 63:44:61:c7:8a:49:d9:19:ca:d9:f4:d8:b0:55:e4:a3:c5:e7: 15:d9:27:b4:b8:9b:a8:f1:ea:9b:bc:a2:d3:f9:13:8f:ae:f9: 01:a5:ea:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0zdyuRphycKItoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OGEzNGNjYzctYzRhMS00ZTk2LWI5OTctOTVhOGRkNDgzMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFrPxglSsvWIEg9xdpCmXq3/EnTUNXW+xyC9 XRgcYBDdkrrVaWgcPRQo5YKZIa7lf6OJEG4o90VW0N/2wAxsxNE5miv3vDIur+6G w6TJ75+0XBZ/yiCDlHbhQbqGc7YX/v7JKzWeWH6PktemsR+lQzP1WaKjyEsAalGK IdQOXFen9b+dhCTlnH6BFpNl9dUJRxQ/+toqn4ZsL9jX+eeLAWfku58NTeduL4JZ O6nkeSN5Ahs2d0icU2o+8q30uiB8+dsmhU/u32tpXKtcD8EoQF9IsZqQ7floU1Jg rEY9fIvbB2JtcurEZvjdWNxMm0ZntC6Hh+QYXlh+PU7vOoNy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOUvgxCW1yFsyWJE8H7cCi2OMWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvYjdmM2EzNDctMDY0Yi0z NjlkLTg1ZWMtYTA2ODA3MzVhZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLsWjE6EUmHPTIAcQmqgsEUF7hi/26kDmGdNquBo4LhmwBdOvjHnEuv YKFDLKCSTaXfVyLFmYUDyH6unH924VmdeDRoMiCnAGPOQyPWuxcUVqfro68gbawy gcbROKzrbSczladXvUaA/6kWTMwPeq+aqD3Ls95bqhykdTttkcQVmK3hdofNxpCm ENw0MwCJITpTrIeV2lFYmsP1TEJ+M19O8Jzy124dMsAs0n0aLvx1GRLT0iR6Kq1W oB2pnwkUbHyBkpFx4R9i4PakXaiwg00D33UndMwHaGNEYceKSdkZytn02LBV5KPF 5xXZJ7S4m6jx6pu8otP5E4+u+QGl6mQ= -----END CERTIFICATE-----Generated at Wed Oct 28 17:14:30 2026 by rpki-client