$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/68452dc3-93be-3cb0-a7ac-f885c69ad49a.roa File: 68452dc3-93be-3cb0-a7ac-f885c69ad49a.roa (raw, json) Hash identifier: bOJbN0M1FdxxoT4a7yCyAVLiqxrdLsa3+X5UuSR4bI0= Subject key identifier: C7:E0:79:04:BB:CB:63:55:AC:22:39:7F:5D:A0:BD:F3:E9:46:C8:F4 Certificate issuer: /CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Certificate serial: 010D0C9F4328584F498B404A5227474455116F00 Authority key identifier: D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/68452dc3-93be-3cb0-a7ac-f885c69ad49a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 162.253.200.0/24 maxlen: 24 162.253.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:40:4a:52:27:47:44:55:11:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0ecced2-d318-4e11-994f-6d9eeb6a4ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:aa:25:66:ae:44:78:60:f9:c0:07:aa:40: 6d:f6:4e:94:ec:73:4a:50:55:69:ff:85:29:2f:ad: ba:dc:f1:2a:81:3d:a0:13:70:22:1d:05:1f:7b:66: e6:9a:4b:2c:39:35:5b:3d:ec:05:56:9c:67:99:4b: 80:b6:dd:e9:03:a6:95:5e:7a:15:0d:81:a3:f7:e6: 31:45:7e:9d:c0:be:00:55:ce:88:cd:64:cd:e0:5e: 8d:b0:f0:5e:6b:86:24:02:47:d6:f5:b8:7e:d9:d6: dc:bf:d5:6d:83:5f:3d:ee:a0:57:d0:0b:42:20:be: 39:8f:82:18:b4:4d:5d:d2:6e:6b:c0:52:56:7e:38: ce:73:49:97:35:30:da:0b:4c:9c:c9:3e:ce:f4:cd: a8:98:a5:62:91:7a:5b:99:45:9b:39:45:13:3a:d4: 36:8f:a0:50:f3:4c:81:9e:69:6b:8c:24:e4:b9:32: 47:f4:d8:32:59:f3:8a:04:ff:ac:9a:0a:75:c7:80: 63:72:60:94:32:d3:e1:4b:51:f4:77:4d:43:f3:c2: f7:ab:b8:4e:bc:8e:16:67:f2:8a:5b:d6:1d:d5:27: 2d:6a:e4:69:89:5e:12:01:59:94:73:57:9b:dc:5f: 5b:c0:a8:40:11:d3:0b:39:df:b2:f3:8e:be:87:a0: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:79:04:BB:CB:63:55:AC:22:39:7F:5D:A0:BD:F3:E9:46:C8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/68452dc3-93be-3cb0-a7ac-f885c69ad49a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl X509v3 Authority Key Identifier: keyid:D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.253.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8c:79:f8:fe:01:42:05:ac:0f:05:7e:ef:9c:8b:85:6d:5f: 21:79:f9:53:17:85:a5:50:79:ae:30:13:81:93:ef:90:80:5a: b6:25:30:f6:1d:bf:9f:b1:fc:6c:2b:3f:b8:82:43:9b:fc:88: 6a:d9:8c:45:15:2a:43:f3:3b:5a:70:b5:7a:6a:78:03:d5:1f: c6:12:a8:e4:27:2c:cf:94:2b:3d:0c:26:3d:49:0a:16:71:a6: 16:b9:6e:55:75:91:db:2a:e3:b9:3f:0a:64:fa:65:f8:7a:8e: 2a:bc:00:36:47:b4:62:91:7b:48:a2:27:a3:65:d7:95:c2:4e: de:d4:6b:d0:4f:ae:20:af:ea:c0:0d:c0:8d:b8:c3:45:b6:bc: 9b:b3:33:bc:28:3b:64:15:20:b9:95:b7:be:52:e2:95:61:eb: d1:33:cf:9b:b2:2f:e3:9c:fd:4e:7d:a2:83:49:1a:95:90:a5: a9:6c:db:b8:ed:e7:1b:2b:7b:8b:b0:14:8b:4e:f4:c4:66:ff: 9c:de:7e:23:8a:1e:bc:d4:f2:f4:8c:ae:a9:ab:fe:6a:23:ac: f4:c9:72:3b:29:c1:e0:c6:45:45:12:d7:ae:ae:27:b9:98:e3: d0:2c:86:60:3b:91:7e:cb:17:68:60:0f:46:54:0f:e0:62:83: a8:67:a2:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji0BKUidHRFURbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyODRkYTctMWZmOC00ZjllLWE5MGUtNzI1NGUwMWU3 ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBlY2NlZDItZDMxOC00ZTExLTk5NGYtNmQ5ZWViNmE0ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbSqJWauRHhg+cAHqkBt9k6U7HNKUFVp/4Up L6263PEqgT2gE3AiHQUfe2bmmkssOTVbPewFVpxnmUuAtt3pA6aVXnoVDYGj9+Yx RX6dwL4AVc6IzWTN4F6NsPBea4YkAkfW9bh+2dbcv9Vtg1897qBX0AtCIL45j4IY tE1d0m5rwFJWfjjOc0mXNTDaC0ycyT7O9M2omKVikXpbmUWbOUUTOtQ2j6BQ80yB nmlrjCTkuTJH9NgyWfOKBP+smgp1x4BjcmCUMtPhS1H0d01D88L3q7hOvI4WZ/KK W9Yd1SctauRpiV4SAVmUc1eb3F9bwKhAEdMLOd+y846+h6AlVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfgeQS7y2NVrCI5f12gvfPpRsj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4 NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0ZTAxZTdmMWIvNjg0NTJkYzMtOTNiZS0z Y2IwLWE3YWMtZjg4NWM2OWFkNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTcyODRkYTctMWZmOC00ZjllLWE5 MGUtNzI1NGUwMWU3ZjFiLzU3Mjg0ZGE3LTFmZjgtNGY5ZS1hOTBlLTcyNTRlMDFl N2YxYi5jcmwwHwYDVR0jBBgwFoAU0vDYn/mh3JEbPRDtxrKv66BQSLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0 ZTAxZTdmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBov3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWMefj+AUIFrA8Ffu+ci4VtXyF5+VMXhaVQea4wE4GT75CAWrYlMPYd v5+x/GwrP7iCQ5v8iGrZjEUVKkPzO1pwtXpqeAPVH8YSqOQnLM+UKz0MJj1JChZx pha5blV1kdsq47k/CmT6Zfh6jiq8ADZHtGKRe0iiJ6Nl15XCTt7Ua9BPriCv6sAN wI24w0W2vJuzM7woO2QVILmVt75S4pVh69Ezz5uyL+Oc/U59ooNJGpWQpals27jt 5xsre4uwFItO9MRm/5zefiOKHrzU8vSMrqmr/mojrPTJcjspweDGRUUS166uJ7mY 49AshmA7kX7LF2hgD0ZUD+Big6hnog4= -----END CERTIFICATE-----Generated at Sun Oct 11 11:45:56 2026 by rpki-client