$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa File: 16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa (raw, json) Hash identifier: /bIyalelbLMqhYRdPLLDel292zaelwlq9ZJhQvREzY4= Subject key identifier: 18:91:0A:DC:78:8A:3C:0D:51:CE:07:51:6E:79:28:BE:66:B7:F2:4B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975CB4FB315B9CF94B0DD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:cb:4f:b3:15:b9:cf:94:b0:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ae37d40-a7f8-4281-8d79-3826e9391bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:c6:89:1e:89:a1:0f:44:7d:d0:f5:82:69: c9:77:3c:22:ee:40:73:4b:29:43:fe:93:d8:f3:ae: 34:fd:34:5c:92:00:50:b1:58:61:10:5a:67:22:28: 51:3f:f9:f4:2a:55:8c:4f:49:cf:bd:e9:95:64:38: a4:c7:59:e3:cd:11:b0:91:c7:44:df:99:28:c6:bf: 86:94:44:2e:75:0b:72:18:d1:4f:3d:b0:51:e4:6e: 87:b9:b8:40:27:a5:2d:2c:f4:4d:91:52:f0:6a:c0: e3:33:88:84:2d:5a:70:6d:b7:cd:ea:52:65:7c:e2: e2:30:c5:c5:1c:17:dc:ce:a2:6d:04:43:d5:2f:41: df:58:75:f7:c1:47:fd:3a:15:9c:28:c4:8a:07:3d: a8:04:dd:1d:32:7d:0c:a1:3f:9f:5c:6d:b8:b7:f2: 4f:3d:c7:c0:b9:5f:de:3d:ab:6f:78:55:89:39:40: ea:12:15:d3:43:46:d0:ab:af:e1:a3:37:8e:c0:b8: 93:3f:a1:27:1b:18:d4:5e:31:9c:28:45:78:72:d5: da:0f:29:95:5a:45:6b:7e:6d:3d:59:83:66:da:79: 55:0a:b6:12:21:2a:dc:48:21:31:58:2e:d8:5c:3d: 9b:b7:34:d5:a4:2e:d7:3e:74:26:a1:dd:e2:68:07: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:0A:DC:78:8A:3C:0D:51:CE:07:51:6E:79:28:BE:66:B7:F2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:44:ec:1f:4d:1f:41:a1:bc:1a:05:16:67:fb:21:df:b3:c1: 31:c1:53:80:9a:57:3d:24:a5:64:cb:43:fb:65:f1:3c:71:f4: c2:ce:1f:48:84:dc:58:4c:09:72:df:b2:4b:13:9c:22:fc:d3: 63:b4:6b:c8:24:60:65:c5:90:59:ba:c1:0d:7b:8c:7b:a8:1f: 76:3a:11:76:17:f5:d7:c6:2f:d5:e2:59:0c:3f:8c:6f:fa:f0: 9a:6a:a6:3b:fb:ee:21:20:96:8b:da:a0:1f:a9:6a:79:11:57: ee:11:ea:72:06:61:4b:b2:62:1a:3f:33:ee:40:3f:40:63:07: 26:cf:24:27:29:6c:a2:17:1f:ff:f0:16:a9:2e:0d:f2:10:6f: b8:6b:4b:ec:ab:d3:89:f6:90:c2:ab:65:22:ad:2d:1b:04:cc: 5c:96:40:a5:0b:88:6a:f2:c7:86:98:6f:b7:db:93:3b:26:94: 5c:ed:d2:a1:01:11:ee:ac:06:e9:02:ba:21:09:69:92:c7:52: 9d:21:05:02:4e:6a:be:49:c1:aa:16:37:1b:0d:6d:f3:e6:85: cf:e7:5d:3c:44:4d:6a:df:9a:d9:07:02:fb:63:e8:fc:a3:b3: d0:89:7d:2f:64:12:60:e5:96:62:ce:cf:01:ec:46:e2:e8:81: 5b:bf:45:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdctPsxW5z5Sw3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFlMzdkNDAtYTdmOC00MjgxLThkNzktMzgyNmU5MzkxYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS3GiR6JoQ9EfdD1gmnJdzwi7kBzSylD/pPY 8640/TRckgBQsVhhEFpnIihRP/n0KlWMT0nPvemVZDikx1njzRGwkcdE35koxr+G lEQudQtyGNFPPbBR5G6HubhAJ6UtLPRNkVLwasDjM4iELVpwbbfN6lJlfOLiMMXF HBfczqJtBEPVL0HfWHX3wUf9OhWcKMSKBz2oBN0dMn0MoT+fXG24t/JPPcfAuV/e PatveFWJOUDqEhXTQ0bQq6/hozeOwLiTP6EnGxjUXjGcKEV4ctXaDymVWkVrfm09 WYNm2nlVCrYSISrcSCExWC7YXD2btzTVpC7XPnQmod3iaAdeDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiRCtx4ijwNUc4HUW55KL5mt/JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTZkYzE1ZDItMmI1ZC0z OWNjLWJiYzQtM2E1ZTFiMDcxNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRE7B9NH0GhvBoFFmf7Id+zwTHBU4CaVz0kpWTLQ/tl8Txx9MLOH0iE 3FhMCXLfsksTnCL802O0a8gkYGXFkFm6wQ17jHuoH3Y6EXYX9dfGL9XiWQw/jG/6 8Jpqpjv77iEglovaoB+pankRV+4R6nIGYUuyYho/M+5AP0BjBybPJCcpbKIXH//w FqkuDfIQb7hrS+yr04n2kMKrZSKtLRsEzFyWQKULiGryx4aYb7fbkzsmlFzt0qEB Ee6sBukCuiEJaZLHUp0hBQJOar5JwaoWNxsNbfPmhc/nXTxETWrfmtkHAvtj6Pyj s9CJfS9kEmDllmLOzwHsRuLogVu/RbM= -----END CERTIFICATE-----Generated at Sun Oct 11 16:37:57 2026 by rpki-client