$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa File: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json) Hash identifier: Mb8ZxCJnvNRW/E71ERCjSjZrbS5M5aboc5odf2FbiJI= Subject key identifier: EE:56:16:32:EF:59:DD:A3:C5:6D:00:5C:D7:85:F6:97:FC:AE:36:15 Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F4328584F497625627B65A3CFF1DBDFA0 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395839 IP address blocks: 199.5.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:25:62:7b:65:a3:cf:f1:db:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb10ed25-546e-4b58-959e-9b31bd4671ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:bc:a9:39:93:46:c1:dc:b5:75:a3:e9:88: b5:57:c7:9d:f9:8f:04:94:59:d9:cc:8f:0f:50:63: 08:93:b7:9c:c1:8c:e8:48:a7:c9:b7:95:ef:bb:5f: f8:03:03:0f:33:31:c1:54:5d:46:c0:c5:74:a7:b4: 31:cf:79:b9:81:18:7f:96:2e:a7:52:d5:1d:c3:22: 8d:8b:55:92:29:a8:e0:4f:89:1c:eb:9f:44:6b:03: 8f:b7:00:b2:25:57:ea:c1:94:94:90:69:b5:d4:da: f1:cf:ca:2c:2a:50:3f:9f:62:6d:df:e9:81:10:5b: 50:87:cd:f4:3e:77:eb:61:2e:b4:4d:94:00:23:1f: 1b:2a:5d:6c:0b:9d:12:bb:76:70:ac:22:0e:90:30: 06:3f:a5:21:15:16:30:d0:22:e2:f3:75:56:de:ec: 6d:6b:d7:ff:12:af:b9:57:a8:65:38:e7:d3:dc:29: 8b:2d:b5:47:a8:79:b2:05:ce:1a:ed:68:d2:8c:e0: 1b:a3:21:5a:5a:e8:90:59:27:e1:15:21:bb:8f:06: d5:bc:76:55:da:53:cb:77:58:b7:f6:03:95:a9:be: 08:14:c6:53:d7:9b:2d:0d:d9:ba:ef:1b:d4:03:b6: 98:13:04:09:82:e8:6b:1d:5a:0a:05:35:16:ed:c3: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:56:16:32:EF:59:DD:A3:C5:6D:00:5C:D7:85:F6:97:FC:AE:36:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: 199.5.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a3:93:f6:22:48:d0:be:d1:28:d7:6c:59:7b:e0:7a:e1:e4: b3:b8:0c:cb:42:94:8e:1c:47:0d:8f:3a:1e:e0:fc:0f:8f:21: 98:8c:e1:f5:d9:d8:dc:28:2f:dc:c3:06:d5:aa:52:a9:c5:2d: 67:54:63:ff:26:cc:e0:a3:e4:91:2c:aa:59:8c:3b:7b:c0:a0: 82:c4:c5:28:fe:6d:fe:b4:cd:4a:ef:20:75:ff:78:da:b5:3c: b5:f8:0f:dc:1a:b1:81:fc:ad:f9:a9:01:a9:9a:67:ad:53:77: 8c:cf:a3:0a:e1:a7:f9:81:d9:93:07:e7:0a:5e:94:54:8e:59: 17:15:08:78:fe:9d:5e:9b:f3:e9:55:a7:a8:8c:2b:b2:91:17: b7:db:62:28:7e:a0:2d:29:15:e8:fd:0d:b6:f6:82:d7:00:36: 2f:5c:2e:c7:2f:2f:b9:87:64:33:92:77:e9:74:b7:a6:61:b7: 64:c7:01:89:5d:e2:f5:ec:60:2a:3b:37:fa:ab:04:ab:4b:c0: 89:59:b6:60:6e:6f:c4:f7:7a:19:88:7e:03:ff:08:a5:8d:46: 73:c8:8a:76:d7:e9:31:82:79:a3:34:5e:67:dd:dc:9a:b1:69: 84:2e:2e:9b:15:6c:b8:06:a9:7f:be:0c:a1:03:c0:a0:f4:6c: 79:09:7a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdiVie2Wjz/Hb36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIxMGVkMjUtNTQ2ZS00YjU4LTk1OWUtOWIzMWJkNDY3MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC+8qTmTRsHctXWj6Yi1V8ed+Y8ElFnZzI8P UGMIk7ecwYzoSKfJt5Xvu1/4AwMPMzHBVF1GwMV0p7Qxz3m5gRh/li6nUtUdwyKN i1WSKajgT4kc659EawOPtwCyJVfqwZSUkGm11Nrxz8osKlA/n2Jt3+mBEFtQh830 PnfrYS60TZQAIx8bKl1sC50Su3ZwrCIOkDAGP6UhFRYw0CLi83VW3uxta9f/Eq+5 V6hlOOfT3CmLLbVHqHmyBc4a7WjSjOAboyFaWuiQWSfhFSG7jwbVvHZV2lPLd1i3 9gOVqb4IFMZT15stDdm67xvUA7aYEwQJguhrHVoKBTUW7cNrJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5WFjLvWd2jxW0AXNeF9pf8rjYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvMGVhNjJlN2UtMDU0Yy0z MWQ1LWJiOGQtMTAwNWJjYWM1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICjk/YiSNC+0SjXbFl74Hrh5LO4DMtClI4cRw2POh7g/A+PIZiM4fXZ 2NwoL9zDBtWqUqnFLWdUY/8mzOCj5JEsqlmMO3vAoILExSj+bf60zUrvIHX/eNq1 PLX4D9wasYH8rfmpAamaZ61Td4zPowrhp/mB2ZMH5wpelFSOWRcVCHj+nV6b8+lV p6iMK7KRF7fbYih+oC0pFej9Dbb2gtcANi9cLscvL7mHZDOSd+l0t6Zht2THAYld 4vXsYCo7N/qrBKtLwIlZtmBub8T3ehmIfgP/CKWNRnPIinbX6TGCeaM0Xmfd3Jqx aYQuLpsVbLgGqX++DKEDwKD0bHkJemc= -----END CERTIFICATE-----Generated at Sat Oct 10 16:19:38 2026 by rpki-client