$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa File: d8b653b0-e373-3888-9c40-b63643669956.roa (raw, json) Hash identifier: hQXETQFkETzAt6glAd02CJM7qACHG3WidFvdTxQ83CQ= Subject key identifier: 0C:95:0E:72:29:E7:BE:B5:B1:EF:E8:F8:A7:5D:B1:C1:E8:6F:E4:8B Certificate issuer: /CN=be5ce567-3052-403a-b81b-6f1137bb499e Certificate serial: 010D0C9F4328584F497483A4930BE72498FD39E0 Authority key identifier: DD:45:01:16:2F:8F:A4:29:D9:45:62:52:6C:DE:62:EA:88:43:D7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36061 IP address blocks: 170.62.164.0/22 maxlen: 24 2602:f9c2::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:83:a4:93:0b:e7:24:98:fd:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be5ce567-3052-403a-b81b-6f1137bb499e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=16ca0262-5ffd-44fa-8cbe-2b3126ee3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:12:84:12:48:0e:ca:ab:5f:90:05:73:0c: 3b:d5:97:36:4d:cb:3a:6c:e8:cd:f0:7a:95:e5:ec: 39:10:2d:af:7f:22:11:90:a3:80:83:23:74:68:c6: 27:42:62:4b:0b:27:0a:0e:80:e9:c2:c1:31:d7:88: c1:dd:25:58:00:1a:06:5c:5b:44:d4:4d:7a:c0:62: a3:bd:71:06:2e:80:02:76:98:be:a4:a8:1b:f8:b2: 42:25:f3:a0:d3:4b:4f:f1:ee:cb:3a:bd:7c:f0:3e: ac:aa:a3:2e:61:6c:ac:a5:95:7d:6a:e8:1d:0b:b2: 23:5f:7e:46:eb:a7:20:e3:f6:c4:45:ba:57:05:81: 51:5f:3a:cb:3d:bf:e5:50:0e:df:f8:64:12:af:26: a1:e8:56:8e:25:4a:f0:64:30:c1:fb:24:4b:50:bd: c1:bd:02:4b:98:9b:b2:ba:64:16:e3:8b:b8:e2:68: 8f:bc:e1:6a:26:e5:6d:79:2e:81:c8:d3:12:c9:0c: 1e:27:18:a6:5e:3b:20:06:d2:b1:8c:d5:40:30:97: ac:49:e9:6e:56:49:1f:c3:b3:48:e1:50:4f:ab:eb: 03:c5:c3:85:9a:dc:f3:89:96:71:c9:a2:b4:76:69: 33:b1:a4:ba:70:51:38:bc:6d:3b:dc:c5:f4:37:93: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:95:0E:72:29:E7:BE:B5:B1:EF:E8:F8:A7:5D:B1:C1:E8:6F:E4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.crl X509v3 Authority Key Identifier: keyid:DD:45:01:16:2F:8F:A4:29:D9:45:62:52:6C:DE:62:EA:88:43:D7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer sbgp-ipAddrBlock: critical IPv4: 170.62.164.0/22 IPv6: 2602:f9c2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:83:ef:7b:29:68:ac:8c:63:25:1c:0a:00:6e:41:ea:36:23: f7:1f:c3:83:15:7b:99:7c:81:00:8b:f9:71:ac:5d:cf:b5:35: 3f:dc:97:83:ae:f4:9e:8c:56:40:79:2e:13:27:de:4d:42:e1: f6:5d:f8:56:ac:e7:a4:be:0e:ff:2f:88:7a:03:0a:ab:e7:ed: 29:f1:69:a7:11:48:11:ff:4e:6b:24:db:6e:f8:8d:1f:0b:56: 8f:28:e2:fe:0a:08:76:62:d7:65:4d:6a:1d:0b:79:11:a0:6c: 2b:f6:2a:3d:10:5a:81:9f:7f:9b:f7:34:67:79:e9:06:9a:1d: 43:d3:4c:44:b0:08:44:76:19:7b:85:c0:03:2c:77:e4:52:54: 81:66:88:a3:68:36:9d:7b:59:e7:72:fc:59:52:ef:5a:d8:13: e9:a0:db:e5:b5:ac:d6:63:b4:bd:df:99:dc:68:3a:1a:e9:56: a6:45:ae:ca:07:7b:a1:8d:d3:c6:e5:23:bf:32:c3:b5:12:c7: 63:ab:8d:7a:11:32:5c:6b:39:75:ff:4f:6d:d6:9a:ad:b1:b9: dc:3d:82:34:2d:27:79:46:fe:20:ce:79:e8:5a:e9:99:d5:21: ea:c2:44:e4:72:3b:02:e1:78:6a:c4:d6:85:86:f7:68:2e:d5: 14:99:4b:bf -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdIOkkwvnJJj9OeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU1Y2U1NjctMzA1Mi00MDNhLWI4MWItNmYxMTM3YmI0 OTllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTZjYTAyNjItNWZmZC00NGZhLThjYmUtMmIzMTI2ZWUzZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCcShBJIDsqrX5AFcww71Zc2Tcs6bOjN8HqV 5ew5EC2vfyIRkKOAgyN0aMYnQmJLCycKDoDpwsEx14jB3SVYABoGXFtE1E16wGKj vXEGLoACdpi+pKgb+LJCJfOg00tP8e7LOr188D6sqqMuYWyspZV9augdC7IjX35G 66cg4/bERbpXBYFRXzrLPb/lUA7f+GQSryah6FaOJUrwZDDB+yRLUL3BvQJLmJuy umQW44u44miPvOFqJuVteS6ByNMSyQweJximXjsgBtKxjNVAMJesSeluVkkfw7NI 4VBPq+sDxcOFmtzziZZxyaK0dmkzsaS6cFE4vG073MX0N5NuZQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAyVDnIp5761se/o+KddscHob+SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZTVj ZTU2Ny0zMDUyLTQwM2EtYjgxYi02ZjExMzdiYjQ5OWUvZDhiNjUzYjAtZTM3My0z ODg4LTljNDAtYjYzNjQzNjY5OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmU1Y2U1NjctMzA1Mi00MDNhLWI4 MWItNmYxMTM3YmI0OTllL2JlNWNlNTY3LTMwNTItNDAzYS1iODFiLTZmMTEzN2Ji NDk5ZS5jcmwwHwYDVR0jBBgwFoAU3UUBFi+PpCnZRWJSbN5i6ohD1xwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZTVjZTU2Ny0zMDUyLTQwM2EtYjgxYi02ZjEx MzdiYjQ5OWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCqj6kMA4E AgACMAgDBgQmAvnCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAg+97KWisjGMlHAoAbkHqNiP3H8ODFXuZ fIEAi/lxrF3PtTU/3JeDrvSejFZAeS4TJ95NQuH2XfhWrOekvg7/L4h6Awqr5+0p 8WmnEUgR/05rJNtu+I0fC1aPKOL+Cgh2YtdlTWodC3kRoGwr9io9EFqBn3+b9zRn eekGmh1D00xEsAhEdhl7hcADLHfkUlSBZoijaDade1nncvxZUu9a2BPpoNvltazW Y7S935ncaDoa6VamRa7KB3uhjdPG5SO/MsO1Esdjq416ETJcazl1/09t1pqtsbnc PYI0LSd5Rv4gznnoWumZ1SHqwkTkcjsC4XhqxNaFhvdoLtUUmUu/ -----END CERTIFICATE-----Generated at Thu Oct 1 13:31:09 2026 by rpki-client