$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa File: 68f1f328-bc80-3bd2-89c9-7effd0549089.roa (raw, json) Hash identifier: ukphxKGFgW5YwBBT3wW/ZTBNlwwQdKaykRttAXiPvjM= Subject key identifier: 9A:AB:58:87:81:E9:52:1D:B9:CC:80:4A:E4:6E:C9:9A:1A:7D:C7:DC Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584F4112B314B3DA3021EEB03200 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 396026 IP address blocks: 162.216.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b3:14:b3:da:30:21:ee:b0:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=34f24668-7ac1-4c07-a943-7170c5a6b976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:6c:e6:08:20:76:6c:b5:65:be:d1:4b:5c: b6:77:04:ec:24:f9:d6:2a:9a:41:da:11:49:eb:14: 01:33:a7:60:af:d4:5f:11:e8:88:d9:c0:15:cd:f6: 7e:ac:9c:cf:ed:29:97:79:0f:8c:21:30:b2:03:15: 94:50:2a:06:c4:ee:ff:0a:28:c1:42:36:8b:8b:72: 3d:02:67:a5:73:1b:41:3b:67:fc:a0:0b:cd:ad:d0: 8e:64:19:65:52:21:b0:ee:c2:db:a5:b9:4e:b7:1c: 52:ce:b8:b7:70:bd:69:47:e0:6a:f2:51:83:37:a6: e8:85:0b:ba:b2:65:1e:2c:4e:e2:50:ea:a3:ba:cf: 0d:c7:40:d7:ee:0a:81:4b:63:cd:79:a8:0c:69:54: 31:a8:25:16:3c:7c:54:92:11:f8:f9:f7:ad:3d:15: 91:ea:9d:46:35:71:89:03:a0:da:5b:f3:49:8e:4e: a3:88:41:38:28:29:73:f1:63:80:d4:88:aa:16:3c: 77:7a:80:82:a6:e0:b0:3f:3d:07:01:66:6c:9f:05: 3c:f6:b3:0e:78:b1:d7:fe:6a:6e:5c:cb:22:6d:72: d4:32:08:61:a0:9d:2e:0c:04:c4:f3:ce:59:40:f2: 07:84:72:66:d0:80:cb:09:3d:7d:80:80:67:13:5e: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:58:87:81:E9:52:1D:B9:CC:80:4A:E4:6E:C9:9A:1A:7D:C7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 162.216.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:2b:d6:db:f0:7f:48:6b:6d:95:ef:9d:ea:02:7d:e1:f0: 8e:6f:ea:79:7c:5b:b7:5c:b0:42:e5:0c:40:4a:c1:0e:eb:d3: 90:0f:b5:1f:8c:50:82:ed:6f:66:f9:5b:8e:23:78:bf:54:40: 39:bf:1f:fd:53:09:6d:86:f5:83:5a:d6:af:e4:29:fb:ca:11: 32:23:e1:e5:66:58:ed:98:8c:16:b4:6b:35:ab:04:9f:d0:f1: f0:63:f3:37:f1:21:48:85:db:8e:cc:8a:63:a0:35:17:f2:0a: 0f:1d:d3:51:2b:47:0a:ff:09:2a:9b:2f:31:28:1d:9d:db:a6: be:90:35:15:2e:04:a7:69:58:55:7e:45:f8:9b:f2:97:09:7b: 17:1e:7a:64:5b:10:4b:c4:d0:eb:10:76:f8:b2:80:fb:28:b4: 56:8d:f6:d5:31:5d:8b:07:39:c5:6d:c5:33:0d:be:6c:06:66: e9:56:96:0e:c0:d2:16:de:10:6a:17:06:23:c1:d9:5a:46:74: 4a:d1:c5:57:2d:33:e2:b4:02:5c:cd:87:ba:6e:72:a7:7d:91: 44:c7:fe:4a:d6:22:82:47:1a:db:6c:fa:cc:ab:d5:ec:9c:ba: c2:1c:80:64:c4:76:be:e8:e6:d7:6a:e2:82:95:b8:60:70:0a: 41:01:51:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErMUs9owIe6wMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzRmMjQ2NjgtN2FjMS00YzA3LWE5NDMtNzE3MGM1YTZiOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cJs5gggdmy1Zb7RS1y2dwTsJPnWKppB2hFJ 6xQBM6dgr9RfEeiI2cAVzfZ+rJzP7SmXeQ+MITCyAxWUUCoGxO7/CijBQjaLi3I9 AmelcxtBO2f8oAvNrdCOZBllUiGw7sLbpblOtxxSzri3cL1pR+Bq8lGDN6bohQu6 smUeLE7iUOqjus8Nx0DX7gqBS2PNeagMaVQxqCUWPHxUkhH4+fetPRWR6p1GNXGJ A6DaW/NJjk6jiEE4KClz8WOA1IiqFjx3eoCCpuCwPz0HAWZsnwU89rMOeLHX/mpu XMsibXLUMghhoJ0uDATE885ZQPIHhHJm0IDLCT19gIBnE16lHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqrWIeB6VIducyASuRuyZoafcfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvNjhmMWYzMjgtYmM4MC0z YmQyLTg5YzktN2VmZmQwNTQ5MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmaK9bb8H9Ia22V753qAn3h8I5v6nl8W7dcsELlDEBKwQ7r05APtR+M UILtb2b5W44jeL9UQDm/H/1TCW2G9YNa1q/kKfvKETIj4eVmWO2YjBa0azWrBJ/Q 8fBj8zfxIUiF247MimOgNRfyCg8d01ErRwr/CSqbLzEoHZ3bpr6QNRUuBKdpWFV+ Rfib8pcJexceemRbEEvE0OsQdviygPsotFaN9tUxXYsHOcVtxTMNvmwGZulWlg7A 0hbeEGoXBiPB2VpGdErRxVctM+K0AlzNh7pucqd9kUTH/krWIoJHGtts+syr1eyc usIcgGTEdr7o5tdq4oKVuGBwCkEBUb0= -----END CERTIFICATE-----Generated at Tue Sep 29 14:12:57 2026 by rpki-client