$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/2346e1c2-2249-3663-bdd3-0db9e2a73561.roa File: 2346e1c2-2249-3663-bdd3-0db9e2a73561.roa (raw, json) Hash identifier: LZuzw2xjcqcT954fL1Wwx4nUTZfe5X9lILtbql75g78= Subject key identifier: 67:E3:9C:67:91:E6:9B:07:92:0E:3E:3B:81:EF:C4:94:5C:3A:B0:82 Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7D318139FDA45D6D9B03D7D0 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/2346e1c2-2249-3663-bdd3-0db9e2a73561.roa Signing time: Tue 13 Oct 2026 13:51:14 +0000 ROA not before: Tue 13 Oct 2026 13:51:14 +0000 ROA not after: Mon 11 Jan 2027 14:51:14 +0000 asID: 26337 IP address blocks: 162.253.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:31:81:39:fd:a4:5d:6d:9b:03:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 13 13:51:14 2026 GMT Not After : Jan 11 14:51:14 2027 GMT Subject: CN=3bd820bf-d100-4998-a15a-83b395453526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:fc:ea:43:f0:d0:c1:9f:c2:1f:ba:5b:00: 80:54:e5:f9:64:ef:b3:26:19:c7:aa:25:00:d8:d6: 3c:f9:0f:58:77:95:38:80:d0:55:b2:2f:40:56:cf: d3:b7:30:92:ae:31:02:e6:92:1d:4b:67:9f:6c:aa: c5:97:2d:a3:d9:78:43:0a:c1:15:bf:a5:7e:c9:fe: b2:f2:cd:f9:ef:e0:d4:fa:65:ae:9a:34:c1:d1:03: 95:ba:7a:27:75:37:c4:a7:4f:e4:76:f5:31:2c:da: 4d:e2:33:ba:7d:d4:97:26:18:03:11:e5:13:b8:da: 17:82:0f:07:6d:59:fe:05:63:bf:e4:0c:e1:c4:fd: c2:15:fb:07:0f:4b:1d:ea:fd:ec:5f:80:6b:1a:9a: b3:12:35:ef:0d:ad:ca:d2:42:85:1d:37:16:53:2c: 1f:53:1b:d3:f4:8d:db:dd:23:14:fa:cf:d9:21:fb: f7:a7:15:93:53:da:fd:60:8e:b6:30:81:e6:5c:5d: 77:2c:71:f4:de:07:e8:62:95:08:8b:f8:fc:56:d5: 4f:ef:1d:d7:a1:ed:b0:8d:cc:d5:d7:43:05:c3:20: f6:ec:ea:ff:73:65:83:c1:2f:3f:e2:3d:d1:56:a6: 76:4f:8c:63:76:8c:c3:1b:bf:d0:9c:2d:5f:bc:dd: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E3:9C:67:91:E6:9B:07:92:0E:3E:3B:81:EF:C4:94:5C:3A:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/2346e1c2-2249-3663-bdd3-0db9e2a73561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 162.253.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a6:e8:3b:f2:ac:7a:2d:87:63:65:25:60:44:d3:84:ba:08: 8e:cc:20:f0:5f:57:d0:11:a3:1f:d9:78:aa:13:f6:ca:40:e5: d0:62:08:a6:92:4d:39:a1:b5:b8:a3:24:f9:c4:06:92:aa:45: 9b:d7:d0:76:12:dc:52:a2:30:42:38:01:f9:8c:e7:9a:92:89: 07:4d:46:18:db:de:f9:63:40:4d:4d:79:e3:2c:17:c4:84:39: 1c:0b:16:35:55:a4:86:51:9d:5e:fb:04:5a:c1:09:e0:55:43: d0:67:bf:de:9c:b6:8b:f5:10:ad:0b:02:f9:2a:4a:57:a4:f5: e4:a0:b2:b7:06:1d:d6:e5:49:27:28:d4:6a:e6:c6:da:98:5e: af:a8:3b:cf:3e:43:4c:9f:ef:8e:34:39:c1:d9:37:52:c5:8b: bc:27:a4:f7:c4:91:7a:53:5a:0f:8b:21:7b:b9:54:4d:00:97: f4:53:c7:56:00:75:95:f2:c6:65:bc:9d:27:93:95:a6:75:2a: 60:db:5d:59:e0:c3:17:a0:18:78:cc:5f:f0:f4:f3:76:53:fb: 39:a3:67:9f:8f:25:22:60:7b:0b:a2:a0:9a:85:cf:73:bf:a3: a4:67:27:b6:16:89:ed:1e:9c:f3:a4:0b:ae:77:f1:ba:47:17: da:a5:f9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99MYE5/aRdbZsD19AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMzEzNTExNFoXDTI3MDExMTE0NTExNFowLzEtMCsGA1UEAxMk M2JkODIwYmYtZDEwMC00OTk4LWExNWEtODNiMzk1NDUzNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4H86kPw0MGfwh+6WwCAVOX5ZO+zJhnHqiUA 2NY8+Q9Yd5U4gNBVsi9AVs/TtzCSrjEC5pIdS2efbKrFly2j2XhDCsEVv6V+yf6y 8s357+DU+mWumjTB0QOVunondTfEp0/kdvUxLNpN4jO6fdSXJhgDEeUTuNoXgg8H bVn+BWO/5AzhxP3CFfsHD0sd6v3sX4BrGpqzEjXvDa3K0kKFHTcWUywfUxvT9I3b 3SMU+s/ZIfv3pxWTU9r9YI62MIHmXF13LHH03gfoYpUIi/j8VtVP7x3Xoe2wjczV 10MFwyD27Or/c2WDwS8/4j3RVqZ2T4xjdozDG7/QnC1fvN0i8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfjnGeR5psHkg4+O4HvxJRcOrCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvMjM0NmUxYzItMjI0OS0z NjYzLWJkZDMtMGRiOWUyYTczNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSm6DvyrHoth2NlJWBE04S6CI7MIPBfV9ARox/ZeKoT9spA5dBiCKaS TTmhtbijJPnEBpKqRZvX0HYS3FKiMEI4AfmM55qSiQdNRhjb3vljQE1NeeMsF8SE ORwLFjVVpIZRnV77BFrBCeBVQ9Bnv96ctov1EK0LAvkqSlek9eSgsrcGHdblSSco 1GrmxtqYXq+oO88+Q0yf7440OcHZN1LFi7wnpPfEkXpTWg+LIXu5VE0Al/RTx1YA dZXyxmW8nSeTlaZ1KmDbXVngwxegGHjMX/D083ZT+zmjZ5+PJSJgewuioJqFz3O/ o6RnJ7YWie0enPOkC6538bpHF9ql+W0= -----END CERTIFICATE-----Generated at Tue Oct 20 18:57:07 2026 by rpki-client