$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/3768f78f-7c71-3790-bdb3-6930ef7d506e.roa File: 3768f78f-7c71-3790-bdb3-6930ef7d506e.roa (raw, json) Hash identifier: mJF1xoGBm0xL9m5M8jS5BVz3Nb7TUrz8XeyCGuCPIu0= Subject key identifier: 5A:F4:2B:36:E9:D4:C2:3B:C2:CE:0C:C9:14:0B:CE:7B:3A:95:3D:3B Certificate issuer: /CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Certificate serial: 010D0C9F4328584F1662C8969CC4A55A53312100 Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/3768f78f-7c71-3790-bdb3-6930ef7d506e.roa Signing time: Sun 06 Sep 2026 18:02:16 +0000 ROA not before: Sun 06 Sep 2026 18:02:16 +0000 ROA not after: Sat 05 Dec 2026 19:02:16 +0000 asID: 398578 IP address blocks: 162.220.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:16:62:c8:96:9c:c4:a5:5a:53:31:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Validity Not Before: Sep 6 18:02:16 2026 GMT Not After : Dec 5 19:02:16 2026 GMT Subject: CN=1c05599c-11bd-4a93-b96d-2e7177bff215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:9b:26:e9:79:44:35:ce:0a:a4:da:a4:28: 05:87:ee:9d:a5:21:b5:f7:73:46:74:d4:f2:c0:ae: 02:c1:93:7a:b4:09:8f:d1:54:c7:39:26:00:e8:cc: 13:16:28:48:8a:f5:ff:01:65:48:d1:c2:2b:aa:0a: 67:55:fa:fb:78:69:86:38:95:f3:15:a2:e7:32:26: a0:51:97:6d:ab:cc:2c:f5:ff:7d:6f:6d:9c:6b:a8: 56:ba:bd:6f:e7:a8:7a:83:3e:18:6b:e9:31:6f:e0: 48:2d:48:81:b3:b3:8a:f9:e3:45:86:59:ba:69:0b: bf:01:05:20:5c:fd:da:06:ce:b7:23:02:09:e7:ce: eb:f1:66:17:37:ac:1e:a9:78:77:66:6f:8d:5a:c2: ef:4e:ce:8a:97:fe:5e:d9:95:c1:48:92:82:15:9f: 78:3f:78:63:05:7e:f3:01:5d:5e:87:15:4a:2f:fe: 05:37:93:64:d0:d5:37:82:b2:14:a4:2a:90:30:d9: 3b:ee:f7:97:f4:b1:77:d3:7d:f7:bd:87:fd:68:ae: ee:33:e4:62:62:31:d3:65:0c:11:b2:60:70:e0:75: ea:73:4c:bb:9b:3e:77:8c:f9:1a:43:43:57:a0:52: 39:e1:85:b2:7e:58:3b:ce:5b:18:f6:3f:09:a9:4c: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:2B:36:E9:D4:C2:3B:C2:CE:0C:C9:14:0B:CE:7B:3A:95:3D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/3768f78f-7c71-3790-bdb3-6930ef7d506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl X509v3 Authority Key Identifier: keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer sbgp-ipAddrBlock: critical IPv4: 162.220.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:16:5b:0e:5f:65:c5:62:60:51:8b:ca:58:d6:36:1b:99: 16:1a:22:17:49:5f:d9:35:50:cb:0b:25:73:3e:83:bb:cd:fa: 9d:00:74:d0:8e:56:d7:9b:71:2e:22:79:14:0a:f7:a0:e0:9b: 02:f7:1b:65:5f:cc:39:e2:d1:ee:24:0c:d5:c5:e5:fd:f6:55: df:36:0d:f4:46:f7:fb:fa:6e:a8:52:ea:9f:90:54:74:8b:85: 01:f7:66:4c:24:da:b6:38:e5:bc:6b:2f:f5:c9:d8:ad:63:93: 73:48:d6:60:49:91:4c:c3:a5:84:28:a6:07:2c:03:14:df:69: 13:05:e6:a0:ef:d2:d3:68:75:c0:d2:3a:b7:12:32:c7:ec:46: 6e:bb:7c:12:7d:6a:3b:19:24:58:7e:2c:a5:d1:74:23:7a:56: 0b:d2:79:8e:7f:8b:69:64:63:ec:4a:72:1d:e8:34:ae:78:eb: 09:58:72:9e:4d:ec:1d:8a:55:c5:5e:6c:34:db:6e:2f:c9:e0: 88:b5:b5:a9:ca:17:3d:d5:89:3f:24:b2:63:18:5e:c4:26:84: 96:27:5d:74:e4:19:3b:0d:ba:cf:49:88:2d:04:fd:26:2f:9c: c0:9b:d6:de:41:aa:2f:be:f2:9a:35:80:75:c0:de:c6:0a:a6: 39:78:ee:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8WYsiWnMSlWlMxIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY0ZTRjNTEtZjdiNS00NTNlLWE3YjAtODA4MWE2NDA0 NjYyMB4XDTI2MDkwNjE4MDIxNloXDTI2MTIwNTE5MDIxNlowLzEtMCsGA1UEAxMk MWMwNTU5OWMtMTFiZC00YTkzLWI5NmQtMmU3MTc3YmZmMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4GbJul5RDXOCqTapCgFh+6dpSG193NGdNTy wK4CwZN6tAmP0VTHOSYA6MwTFihIivX/AWVI0cIrqgpnVfr7eGmGOJXzFaLnMiag UZdtq8ws9f99b22ca6hWur1v56h6gz4Ya+kxb+BILUiBs7OK+eNFhlm6aQu/AQUg XP3aBs63IwIJ587r8WYXN6weqXh3Zm+NWsLvTs6Kl/5e2ZXBSJKCFZ94P3hjBX7z AV1ehxVKL/4FN5Nk0NU3grIUpCqQMNk77veX9LF30333vYf9aK7uM+RiYjHTZQwR smBw4HXqc0y7mz53jPkaQ0NXoFI54YWyflg7zlsY9j8JqUzi9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr0Kzbp1MI7ws4MyRQLzns6lT07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRl NGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0MDQ2NjIvMzc2OGY3OGYtN2M3MS0z NzkwLWJkYjMtNjkzMGVmN2Q1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjY0ZTRjNTEtZjdiNS00NTNlLWE3 YjAtODA4MWE2NDA0NjYyLzY2NGU0YzUxLWY3YjUtNDUzZS1hN2IwLTgwODFhNjQw NDY2Mi5jcmwwHwYDVR0jBBgwFoAUrgVKm7uplPBwrIMbVQW0XQXjxHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgx YTY0MDQ2NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiHFlsOX2XFYmBRi8pY1jYbmRYaIhdJX9k1UMsLJXM+g7vN+p0AdNCO VtebcS4ieRQK96DgmwL3G2VfzDni0e4kDNXF5f32Vd82DfRG9/v6bqhS6p+QVHSL hQH3Zkwk2rY45bxrL/XJ2K1jk3NI1mBJkUzDpYQopgcsAxTfaRMF5qDv0tNodcDS OrcSMsfsRm67fBJ9ajsZJFh+LKXRdCN6VgvSeY5/i2lkY+xKch3oNK546wlYcp5N 7B2KVcVebDTbbi/J4Ii1tanKFz3ViT8ksmMYXsQmhJYnXXTkGTsNus9JiC0E/SYv nMCb1t5Bqi++8po1gHXA3sYKpjl47hg= -----END CERTIFICATE-----Generated at Sun Oct 4 12:59:05 2026 by rpki-client