$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa File: 5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa (raw, json) Hash identifier: +8SURkLY9aNWUcSB2P2Xw1pTynPFqHAEk2XslbZphmE= Subject key identifier: 3A:46:2A:C1:ED:BF:76:C1:C4:EE:03:74:FA:02:72:6F:4A:B7:58:AB Certificate issuer: /CN=cbad4f77-6011-4cb2-a417-af400d03bc68 Certificate serial: 010D0C9F4328584F45AE90D004C14B43B96D1A80 Authority key identifier: CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa Signing time: Wed 23 Sep 2026 16:37:57 +0000 ROA not before: Wed 23 Sep 2026 16:37:57 +0000 ROA not after: Tue 22 Dec 2026 17:28:55 +0000 asID: 399282 IP address blocks: 162.210.20.0/22 maxlen: 24 209.147.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:ae:90:d0:04:c1:4b:43:b9:6d:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbad4f77-6011-4cb2-a417-af400d03bc68 Validity Not Before: Sep 23 16:37:57 2026 GMT Not After : Dec 22 17:28:55 2026 GMT Subject: CN=14da6689-bf36-46f5-8413-e9486beba4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a1:86:38:06:8c:4d:d4:6b:be:60:06:ab:35: 3b:c5:b4:31:45:20:07:3c:3d:ff:7a:d3:08:36:ab: d6:97:bf:f2:ee:49:c8:76:d1:1f:b6:a4:fb:0d:79: e2:da:5c:8c:79:7e:05:6a:ce:ca:22:de:4c:3c:3c: 58:9b:cb:78:23:99:00:83:7b:ac:bd:5c:42:00:4e: 9e:55:64:17:b1:f4:8c:f5:c1:97:24:50:c0:5f:d2: dc:f4:99:7a:dc:ae:e6:9a:79:fb:eb:f9:da:dc:57: 80:00:32:bd:c8:d3:0d:5e:96:8d:a3:aa:12:76:91: 82:5f:6e:0b:53:af:37:55:8e:52:f9:95:32:f3:c1: 65:3e:ca:e2:b2:92:de:46:51:1f:51:ba:30:57:b6: 81:1c:71:1b:dc:4b:eb:29:ef:ae:80:29:68:e0:7a: 47:68:6b:56:2f:9a:2d:64:64:a2:26:82:c4:c1:79: 36:5f:ce:ea:26:44:ad:21:ab:db:8f:54:6f:6f:1c: 4d:d9:f0:c1:46:75:fe:0e:b5:f6:44:66:3a:0f:10: 91:7c:e2:3b:60:f3:a7:45:50:f7:c0:10:35:62:2e: 1d:a7:aa:e8:35:71:bd:b5:50:b2:bb:b2:78:92:10: b3:da:c7:fa:86:5a:d3:ab:d6:83:ac:55:71:3e:fb: a6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:46:2A:C1:ED:BF:76:C1:C4:EE:03:74:FA:02:72:6F:4A:B7:58:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.crl X509v3 Authority Key Identifier: keyid:CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer sbgp-ipAddrBlock: critical IPv4: 162.210.20.0/22 209.147.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:30:99:bd:d5:34:37:f6:94:7e:fc:e6:d5:3b:a6:25:fc:70: 00:15:c7:34:ef:da:fb:21:aa:e9:26:61:ea:3e:32:7a:45:eb: 04:b4:5b:38:de:b7:04:99:a1:e9:96:fe:a5:c5:d9:57:0d:ff: b9:02:b8:2f:f8:8f:51:bd:c3:79:87:f1:ff:26:5f:df:22:99: 73:e2:83:13:cc:30:8e:7b:61:21:18:fc:17:87:95:df:89:e2: 5b:41:ae:61:bb:d8:a6:52:06:89:13:84:80:c8:fa:68:a8:39: e7:98:d7:6f:d7:70:a2:7b:62:11:0b:4c:e8:72:85:83:9e:1b: bc:27:29:73:07:e2:fe:cb:4f:9b:d0:2a:e1:81:34:5e:4d:0a: 31:12:da:19:a3:66:d5:ca:28:ca:dc:69:29:3e:d0:03:27:0a: 14:eb:32:69:44:20:4e:9d:2e:12:58:5d:15:d6:75:d9:42:4b: cb:ad:9e:11:b9:67:87:54:06:86:97:8f:3c:4a:7d:2b:7c:b6: a3:70:e4:ea:ac:a8:d3:7c:d1:e4:1a:5b:e9:0a:b9:49:aa:6c: 75:74:b9:42:98:a4:f1:ba:52:71:db:32:b4:bd:a1:a5:cb:55: a1:8e:09:f9:63:02:0d:c8:cf:0e:03:6f:9f:37:e9:21:69:13: e2:cb:3b:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9FrpDQBMFLQ7ltGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JhZDRmNzctNjAxMS00Y2IyLWE0MTctYWY0MDBkMDNi YzY4MB4XDTI2MDkyMzE2Mzc1N1oXDTI2MTIyMjE3Mjg1NVowLzEtMCsGA1UEAxMk MTRkYTY2ODktYmYzNi00NmY1LTg0MTMtZTk0ODZiZWJhNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKGGOAaMTdRrvmAGqzU7xbQxRSAHPD3/etMI NqvWl7/y7knIdtEftqT7DXni2lyMeX4Fas7KIt5MPDxYm8t4I5kAg3usvVxCAE6e VWQXsfSM9cGXJFDAX9Lc9Jl63K7mmnn76/na3FeAADK9yNMNXpaNo6oSdpGCX24L U683VY5S+ZUy88FlPsrispLeRlEfUbowV7aBHHEb3EvrKe+ugClo4HpHaGtWL5ot ZGSiJoLEwXk2X87qJkStIavbj1RvbxxN2fDBRnX+DrX2RGY6DxCRfOI7YPOnRVD3 wBA1Yi4dp6roNXG9tVCyu7J4khCz2sf6hlrTq9aDrFVxPvumJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDpGKsHtv3bBxO4DdPoCcm9Kt1irMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jYmFk NGY3Ny02MDExLTRjYjItYTQxNy1hZjQwMGQwM2JjNjgvNWVkMzJiMDYtNjUxNy0z ZjBmLTg3ZTItMGNkMGU2MzM4YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvY2JhZDRmNzctNjAxMS00Y2IyLWE0 MTctYWY0MDBkMDNiYzY4L2NiYWQ0Zjc3LTYwMTEtNGNiMi1hNDE3LWFmNDAwZDAz YmM2OC5jcmwwHwYDVR0jBBgwFoAUypo9m1MfI2YBl3lRaDx/5a/HfZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jYmFkNGY3Ny02MDExLTRjYjItYTQxNy1hZjQw MGQwM2JjNjguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotIUAwQD 0ZNoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIAwmb3VNDf2lH785tU7piX8cAAVxzTv2vshqukmYeo+MnpF 6wS0WzjetwSZoemW/qXF2VcN/7kCuC/4j1G9w3mH8f8mX98imXPigxPMMI57YSEY /BeHld+J4ltBrmG72KZSBokThIDI+mioOeeY12/XcKJ7YhELTOhyhYOeG7wnKXMH 4v7LT5vQKuGBNF5NCjES2hmjZtXKKMrcaSk+0AMnChTrMmlEIE6dLhJYXRXWddlC S8utnhG5Z4dUBoaXjzxKfSt8tqNw5OqsqNN80eQaW+kKuUmqbHV0uUKYpPG6UnHb MrS9oaXLVaGOCfljAg3Izw4Db5836SFpE+LLO9E= -----END CERTIFICATE-----Generated at Mon Oct 12 00:53:54 2026 by rpki-client