$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3c2fa7a8-b456-32f8-bd55-a517017d7997.roa File: 3c2fa7a8-b456-32f8-bd55-a517017d7997.roa (raw, json) Hash identifier: w5hB6G4lEyi6a1aCdOUDopY5G0qL6iUlnK1db+fTbEY= Subject key identifier: 75:53:0F:FC:BB:69:07:01:8A:D5:79:D1:44:DD:28:2E:66:32:99:2F Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7D313E6072A9F7080D7CEF80 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3c2fa7a8-b456-32f8-bd55-a517017d7997.roa Signing time: Tue 13 Oct 2026 13:50:43 +0000 ROA not before: Tue 13 Oct 2026 13:50:43 +0000 ROA not after: Mon 11 Jan 2027 14:50:43 +0000 asID: 198949 IP address blocks: 162.253.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:31:3e:60:72:a9:f7:08:0d:7c:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 13 13:50:43 2026 GMT Not After : Jan 11 14:50:43 2027 GMT Subject: CN=4f3b07e4-fbd5-4f7d-b733-98931c1931de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:cc:68:bb:3d:fc:a9:d5:31:89:e0:c0:ac: a7:bd:ba:1e:91:46:a5:43:ce:0d:55:35:09:07:fb: 04:27:fc:e5:23:d2:52:b6:20:6c:47:cd:db:44:6d: 81:b2:bf:bf:93:cb:a5:03:f5:62:d5:cb:4c:7d:0c: 0b:d7:86:bd:74:54:fe:db:22:59:74:62:a1:b4:00: 48:85:ff:12:61:81:f3:eb:8d:35:8a:e4:da:ba:b3: ae:ed:2b:43:c7:78:85:47:a9:a7:11:89:d7:94:41: ef:d1:d9:aa:82:3c:29:2e:74:6d:8a:5e:18:0c:43: 1e:c1:ea:96:80:af:34:08:54:0a:2b:70:1b:f8:a3: 7b:10:b8:9b:f4:e7:91:50:f1:30:6d:8f:4c:47:0d: eb:c0:38:bd:18:ef:22:18:d5:5e:41:79:c7:b4:a5: 1d:5c:42:da:b3:e1:50:95:4a:60:43:1e:c0:7f:52: 52:73:28:51:49:f3:c6:f3:fa:4a:e2:e9:8f:90:eb: 55:fd:7e:ac:f6:9d:7f:c0:80:70:90:fa:92:33:10: 2b:f2:62:f0:a7:2e:54:57:72:16:4e:67:a1:ac:07: 47:98:98:96:77:92:6d:5b:c4:23:35:c7:d8:e9:43: 2a:d8:45:77:c2:50:8d:67:86:ca:f1:cb:32:88:62: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:0F:FC:BB:69:07:01:8A:D5:79:D1:44:DD:28:2E:66:32:99:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3c2fa7a8-b456-32f8-bd55-a517017d7997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 162.253.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:25:eb:da:a8:31:75:18:88:52:8d:9f:b6:06:bc:23:61:cd: 6b:e7:0a:44:d4:14:eb:b8:08:69:95:36:28:e5:92:9f:8b:b9: cf:aa:5b:6b:0f:08:63:37:ac:0b:2d:f1:c5:79:5a:e1:02:b9: bd:01:46:85:de:d3:3f:e3:82:f8:94:c7:23:9f:c4:d5:5e:85: 2a:1d:c9:e9:d9:ec:85:e0:a3:08:4f:18:7c:ec:37:b4:a9:e9: e1:85:a4:a4:cf:5e:e4:d5:f6:86:d8:7f:6f:ab:f5:69:3c:0f: 66:2e:7b:d7:e9:6f:ea:d0:b2:22:84:b2:5f:0e:87:ad:38:1c: 4c:42:d7:45:3f:b2:c8:eb:aa:4e:8b:93:f6:88:a2:56:f5:1c: 23:47:31:48:48:28:27:1e:e0:b1:8e:61:fb:13:7d:3a:f8:37: 67:f8:8b:c6:ec:2b:81:4b:67:f2:36:8f:d6:c4:a3:5d:07:34: 94:f6:de:d3:04:13:02:c3:7b:59:7d:31:61:c9:e1:bb:b0:49: 02:b9:b8:ec:6a:6d:59:f0:54:68:5d:53:ef:27:19:7c:f9:00: 08:13:cc:29:ed:79:43:cb:7a:75:34:55:f1:25:57:39:4c:a7: 23:ff:0d:0c:60:5d:23:9d:09:ab:88:99:d6:4c:d5:2f:eb:4d: b5:40:38:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99MT5gcqn3CA1874AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMzEzNTA0M1oXDTI3MDExMTE0NTA0M1owLzEtMCsGA1UEAxMk NGYzYjA3ZTQtZmJkNS00ZjdkLWI3MzMtOTg5MzFjMTkzMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRHMaLs9/KnVMYngwKynvboekUalQ84NVTUJ B/sEJ/zlI9JStiBsR83bRG2Bsr+/k8ulA/Vi1ctMfQwL14a9dFT+2yJZdGKhtABI hf8SYYHz6401iuTaurOu7StDx3iFR6mnEYnXlEHv0dmqgjwpLnRtil4YDEMeweqW gK80CFQKK3Ab+KN7ELib9OeRUPEwbY9MRw3rwDi9GO8iGNVeQXnHtKUdXELas+FQ lUpgQx7Af1JScyhRSfPG8/pK4umPkOtV/X6s9p1/wIBwkPqSMxAr8mLwpy5UV3IW TmehrAdHmJiWd5JtW8QjNcfY6UMq2EV3wlCNZ4bK8csyiGL+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVTD/y7aQcBitV50UTdKC5mMpkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvM2MyZmE3YTgtYjQ1Ni0z MmY4LWJkNTUtYTUxNzAxN2Q3OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4l69qoMXUYiFKNn7YGvCNhzWvnCkTUFOu4CGmVNijlkp+Luc+qW2sP CGM3rAst8cV5WuECub0BRoXe0z/jgviUxyOfxNVehSodyenZ7IXgowhPGHzsN7Sp 6eGFpKTPXuTV9obYf2+r9Wk8D2Yue9fpb+rQsiKEsl8Oh604HExC10U/ssjrqk6L k/aIolb1HCNHMUhIKCce4LGOYfsTfTr4N2f4i8bsK4FLZ/I2j9bEo10HNJT23tME EwLDe1l9MWHJ4buwSQK5uOxqbVnwVGhdU+8nGXz5AAgTzCnteUPLenU0VfElVzlM pyP/DQxgXSOdCauImdZM1S/rTbVAOIc= -----END CERTIFICATE-----Generated at Tue Oct 20 20:44:26 2026 by rpki-client