$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/af896368-d974-3c5f-ac62-f293cb53a7dc.roa File: af896368-d974-3c5f-ac62-f293cb53a7dc.roa (raw, json) Hash identifier: yHgVlYtrw8wNQvTjvjivp+uvLQv5LSy4i64Cr59Hsic= Subject key identifier: 98:7C:9D:40:02:47:23:78:4C:2F:44:F0:CB:E6:89:4F:76:A2:40:1E Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA8A8EC56545CD34212A75E80 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/af896368-d974-3c5f-ac62-f293cb53a7dc.roa Signing time: Thu 29 Oct 2026 03:31:37 +0000 ROA not before: Thu 29 Oct 2026 03:31:37 +0000 ROA not after: Wed 27 Jan 2027 04:31:37 +0000 asID: 11696 IP address blocks: 162.253.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:a8:ec:56:54:5c:d3:42:12:a7:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 29 03:31:37 2026 GMT Not After : Jan 27 04:31:37 2027 GMT Subject: CN=d0ab2f8b-2308-4c7d-b2cb-31e07acb2f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:ff:c9:3c:7d:f7:22:86:e3:cc:7f:cd:28: 0e:be:c5:3c:1c:c7:fa:8a:d8:d1:c9:69:8f:bd:9e: 75:c7:71:b3:d5:e1:4f:65:39:af:15:80:28:ba:d3: 5d:af:a2:4d:0f:2f:64:3c:df:e6:da:91:f3:56:84: 1f:0f:2f:63:a4:ae:57:7b:f9:55:59:6f:ca:7c:fa: ed:f6:b3:56:5f:1d:92:dd:fb:9c:be:8a:9c:3f:4c: f8:c1:eb:87:8f:81:0d:27:ce:e5:91:80:86:a7:25: 4b:25:87:dc:c6:e6:e9:83:9d:b3:56:e0:79:38:74: 9e:eb:3c:11:f4:11:f7:4e:77:93:47:2f:af:a0:db: 17:3d:0e:a2:62:e1:1d:e3:a5:27:93:43:25:ab:f0: 5e:ad:e5:fb:85:14:e3:2b:93:71:02:e3:d6:10:ad: 0a:c5:ee:5c:e1:eb:ce:7a:c3:72:2d:88:76:e1:e5: c7:54:96:f9:c7:f6:0d:f6:50:2a:1e:98:1c:ed:f8: 37:a9:b6:ad:ad:a0:f5:21:33:69:71:2d:50:ab:cc: 39:c3:d1:ca:92:4a:39:0d:f5:bd:8f:16:03:cc:97: 7c:24:a6:59:bb:7c:db:2d:b1:22:00:68:01:64:f1: 71:ac:77:fc:27:0b:8a:76:6c:37:9b:38:a0:85:89: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7C:9D:40:02:47:23:78:4C:2F:44:F0:CB:E6:89:4F:76:A2:40:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/af896368-d974-3c5f-ac62-f293cb53a7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 162.253.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c3:04:b5:ea:3a:87:ed:c6:2f:50:94:db:1d:d4:e6:3f:83: 8a:26:6d:b6:3a:9b:63:4a:3f:c0:5d:c3:c5:92:d6:d7:a5:da: f3:a0:7e:45:54:90:59:4d:03:c5:1f:da:4e:d4:51:3f:47:03: 0d:d0:b4:b6:c6:96:28:68:5a:fc:90:07:da:08:87:d5:dd:eb: 6c:c3:b2:48:fc:81:9a:1d:1b:84:60:dc:e9:72:14:ff:a0:e7: dc:63:23:27:ec:76:e1:f3:64:01:cb:20:40:57:a5:e7:4d:c2: 08:6b:88:09:6c:12:d7:b4:fc:05:69:a1:73:e8:fa:e3:94:24: 7d:56:ad:ec:20:8d:f8:68:79:0b:25:4c:f6:74:31:72:fa:8a: 5c:12:1d:13:b7:fa:a0:60:7c:9f:e6:2e:24:07:19:1b:cf:5e: 8f:4c:ce:99:21:b0:c9:eb:64:32:6a:b5:0b:0d:a2:1c:34:34: 0b:44:41:6b:fd:86:2d:27:a7:72:4e:ab:80:6a:29:90:cc:f8: 33:da:3e:70:48:b1:56:20:3b:57:2a:1b:9d:b2:4f:c8:8a:ea: 59:73:29:2d:c5:49:c9:80:6a:b6:b7:c2:2e:06:6e:5d:5c:6e: 1b:96:92:72:a3:6b:00:85:b4:32:78:0f:87:bd:24:83:9f:cd: c5:0c:1b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oqOxWVFzTQhKnXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyOTAzMzEzN1oXDTI3MDEyNzA0MzEzN1owLzEtMCsGA1UEAxMk ZDBhYjJmOGItMjMwOC00YzdkLWIyY2ItMzFlMDdhY2IyZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj7/yTx99yKG48x/zSgOvsU8HMf6itjRyWmP vZ51x3Gz1eFPZTmvFYAoutNdr6JNDy9kPN/m2pHzVoQfDy9jpK5Xe/lVWW/KfPrt 9rNWXx2S3fucvoqcP0z4weuHj4ENJ87lkYCGpyVLJYfcxubpg52zVuB5OHSe6zwR 9BH3TneTRy+voNsXPQ6iYuEd46Unk0Mlq/BereX7hRTjK5NxAuPWEK0Kxe5c4evO esNyLYh24eXHVJb5x/YN9lAqHpgc7fg3qbatraD1ITNpcS1Qq8w5w9HKkko5DfW9 jxYDzJd8JKZZu3zbLbEiAGgBZPFxrHf8JwuKdmw3mzighYkrVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh8nUACRyN4TC9E8MvmiU92okAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYWY4OTYzNjgtZDk3NC0z YzVmLWFjNjItZjI5M2NiNTNhN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/DBLXqOoftxi9QlNsd1OY/g4ombbY6m2NKP8Bdw8WS1tel2vOgfkVU kFlNA8Uf2k7UUT9HAw3QtLbGlihoWvyQB9oIh9Xd62zDskj8gZodG4Rg3OlyFP+g 59xjIyfsduHzZAHLIEBXpedNwghriAlsEte0/AVpoXPo+uOUJH1WrewgjfhoeQsl TPZ0MXL6ilwSHRO3+qBgfJ/mLiQHGRvPXo9MzpkhsMnrZDJqtQsNohw0NAtEQWv9 hi0np3JOq4BqKZDM+DPaPnBIsVYgO1cqG52yT8iK6llzKS3FScmAara3wi4Gbl1c bhuWknKjawCFtDJ4D4e9JIOfzcUMGzs= -----END CERTIFICATE-----Generated at Sat Oct 31 05:53:44 2026 by rpki-client