$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa File: 9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json) Hash identifier: Rl9VPSyKeNSuYBVdq43SHFIAUSdo4IM+UHOFT9D0vI8= Subject key identifier: 78:C3:2A:94:87:0B:F0:47:01:6C:37:11:B4:D7:25:A0:B2:9A:BB:4B Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584F549D673E1935EDDCCB4724C0 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 33362 IP address blocks: 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:67:3e:19:35:ed:dc:cb:47:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=4bd0f0ce-2f2d-4ff3-bd77-ffce6d993fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:33:07:26:5c:a6:43:11:83:d7:da:fa:0b: c2:62:6d:79:84:58:d3:99:5a:fa:01:c9:25:d5:76: 80:b8:2d:ea:71:a6:92:b6:7f:57:7e:3e:c7:38:10: fa:33:9e:c6:92:09:11:55:91:94:cc:24:0f:0f:48: b5:01:56:c1:1f:38:31:17:5a:cb:fe:7f:99:08:b8: 4c:d4:01:a6:5e:1e:d8:0d:b9:45:18:e8:fe:f5:28: af:ad:91:ff:e3:b1:b9:4b:fd:70:cd:f5:b7:91:f3: c9:4f:cf:43:39:45:26:d8:87:77:38:44:ed:5d:de: 5b:36:7d:1b:20:d4:6a:f4:48:94:52:02:f6:51:01: 7d:b5:47:f8:5a:97:89:1f:c4:76:0b:c0:f2:58:78: 46:c3:6e:f4:25:1e:57:de:74:1f:8a:ca:9b:35:76: 76:c5:5e:dc:48:3e:0e:2c:d3:f7:3b:2f:56:83:fe: 9e:3f:8f:01:e6:bf:e9:ed:28:56:1a:66:dc:25:5c: ab:7d:e9:ab:8c:2b:d1:41:4b:69:e3:11:f8:bd:0f: 8f:1a:e0:97:88:82:59:8e:1a:cd:44:70:0f:38:0e: bc:d4:80:28:81:1e:d7:b7:93:fd:f3:93:e5:50:5b: c8:01:96:60:4c:6c:ce:01:1e:f9:db:92:5c:69:9f: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:2A:94:87:0B:F0:47:01:6C:37:11:B4:D7:25:A0:B2:9A:BB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:4c:6a:98:3a:fd:57:3a:8f:12:41:60:7e:01:4c:6a:c9: 4e:da:2e:aa:25:89:47:d4:87:ac:ee:79:63:07:74:b0:51:a9: 71:d3:30:be:f0:35:3e:8d:d2:f6:d2:5d:ab:58:0d:de:e1:e3: 64:89:c1:c0:f9:d4:ea:1d:b9:5d:dc:7e:be:d0:dd:ef:f4:d8: a5:8a:59:36:4b:50:cb:dc:ec:86:04:c3:34:71:ad:59:e0:92: 09:c6:b4:c6:ca:06:bd:f6:05:9f:42:93:4a:27:a0:bb:de:d6: 6d:a7:9f:0d:be:34:d1:c0:2d:a8:19:2f:90:2e:b9:e6:f2:98: e3:74:c8:61:c2:cf:25:6c:78:7b:5e:c8:22:c6:f4:35:a5:8c: c3:80:20:11:74:ab:2a:16:05:6b:8d:b1:b1:39:27:06:6f:8a: 51:96:01:53:5d:3d:cc:9f:23:8e:d2:9b:1d:5f:ad:1f:15:fd: c3:54:b2:a9:69:7a:75:b5:c7:43:a0:3c:cd:0c:6c:ce:11:e5: 10:89:29:ca:b9:18:84:f7:a9:9b:a8:b9:34:f8:b2:a1:44:74: 8c:ee:7c:33:8f:61:2c:c2:bc:48:12:82:99:37:76:7c:21:f6: ff:0a:18:ba:90:bb:e6:50:7c:bd:84:f8:c6:e3:97:b4:74:60: b3:f1:e6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWc+GTXt3MtHJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NGJkMGYwY2UtMmYyZC00ZmYzLWJkNzctZmZjZTZkOTkzZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfMzByZcpkMRg9fa+gvCYm15hFjTmVr6Ackl 1XaAuC3qcaaStn9Xfj7HOBD6M57GkgkRVZGUzCQPD0i1AVbBHzgxF1rL/n+ZCLhM 1AGmXh7YDblFGOj+9SivrZH/47G5S/1wzfW3kfPJT89DOUUm2Id3OETtXd5bNn0b INRq9EiUUgL2UQF9tUf4WpeJH8R2C8DyWHhGw270JR5X3nQfisqbNXZ2xV7cSD4O LNP3Oy9Wg/6eP48B5r/p7ShWGmbcJVyrfemrjCvRQUtp4xH4vQ+PGuCXiIJZjhrN RHAPOA681IAogR7Xt5P985PlUFvIAZZgTGzOAR7525JcaZ+2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjDKpSHC/BHAWw3EbTXJaCymrtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvOWQyMGVlMjktNTE2Zi0z OTMwLWI4NDktYWQwZWU4YjdlMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVpTGqYOv1XOo8SQWB+AUxqyU7aLqoliUfUh6zueWMHdLBRqXHTML7w NT6N0vbSXatYDd7h42SJwcD51OoduV3cfr7Q3e/02KWKWTZLUMvc7IYEwzRxrVng kgnGtMbKBr32BZ9Ck0onoLve1m2nnw2+NNHALagZL5AuuebymON0yGHCzyVseHte yCLG9DWljMOAIBF0qyoWBWuNsbE5JwZvilGWAVNdPcyfI47Smx1frR8V/cNUsqlp enW1x0OgPM0MbM4R5RCJKcq5GIT3qZuouTT4sqFEdIzufDOPYSzCvEgSgpk3dnwh 9v8KGLqQu+ZQfL2E+Mbjl7R0YLPx5ks= -----END CERTIFICATE-----Generated at Tue Oct 13 10:09:42 2026 by rpki-client