$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa File: 3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa (raw, json) Hash identifier: jaXal0idqKBtXe1yWda683MCuRy4CFgrThI1EX02MKQ= Subject key identifier: 77:F4:5A:7E:14:C3:05:D8:60:B7:08:60:79:29:E6:F5:DD:60:85:1F Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584F49733F1D6A510030CC6F19E0 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22504 IP address blocks: 162.118.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3f:1d:6a:51:00:30:cc:6f:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ff45d24-b926-412d-be51-a630dc275a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:99:46:65:62:ba:dd:0a:48:67:ae:26:76: c2:90:5c:ab:c0:68:13:ba:d4:b4:e9:2d:09:1e:37: 80:5c:3a:67:9a:e1:d1:b8:d2:54:1c:13:87:f8:5c: 0f:90:45:5e:17:25:3f:c0:4a:a2:b5:23:5b:b7:ee: 1a:41:9b:a5:3f:10:0d:06:26:c4:d8:41:33:ab:18: d3:6c:18:fa:c6:14:37:f9:a4:31:7a:3f:15:f3:83: 91:f9:e0:67:9f:6d:f5:e8:f0:ec:37:47:1d:fd:40: 34:a3:9a:2a:7d:64:d4:59:95:71:06:bc:5f:a4:06: d1:14:b8:11:58:be:8d:8a:bd:af:ba:c8:58:e8:7e: d1:a9:3d:e0:ba:e8:68:9e:60:1e:a2:bd:56:1d:89: b5:37:f4:e5:0f:be:a4:8d:a4:12:a5:d2:91:e7:f7: a8:c8:6d:40:02:56:bc:b4:34:57:94:25:2e:82:0b: 90:29:09:b9:28:32:ca:59:cc:31:f7:46:f5:ac:a9: 3e:aa:57:fb:6f:56:3d:fb:cb:87:82:81:5d:93:0e: 3e:fe:2d:d8:de:ba:0a:ff:84:8d:b1:10:0f:f1:65: 3b:e1:99:7b:3c:4c:ce:d9:8a:d4:78:98:e0:b0:75: 8b:5f:ab:35:8c:3e:4b:50:d7:86:ff:40:48:24:c2: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:5A:7E:14:C3:05:D8:60:B7:08:60:79:29:E6:F5:DD:60:85:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/3ef595d1-cf75-3f92-99ab-1d8416f272ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7e:e0:72:75:da:a4:81:b6:8e:2f:8b:2f:ad:b4:1e:76:03: 18:bd:84:52:b4:c9:a1:ea:20:68:7c:7f:6b:83:4f:66:a3:36: 25:b2:0d:20:7c:13:5f:69:3f:80:ec:90:9f:d9:0e:94:2c:c4: 6d:d2:17:70:f1:67:6e:1e:17:7d:30:b2:0b:d8:27:dd:d2:8c: b4:0c:d2:2e:84:e8:51:a1:af:42:ce:ea:94:85:c3:c6:ea:d7: e6:76:37:fd:c7:56:3f:1f:b2:a5:5b:d6:f3:74:46:7c:49:03: e5:18:c4:3a:df:ef:0a:3c:83:f6:7a:a0:8d:d7:05:93:04:9c: 8a:28:a7:c9:f4:6b:f8:1b:51:82:32:97:a3:68:70:e8:c1:71: a5:5d:55:7e:d7:ca:da:1b:c5:db:6e:b2:98:4d:61:cf:54:4b: 36:25:3e:dc:c0:36:6d:bf:e0:e7:3a:d0:d1:70:5b:c1:63:e9: e4:42:5a:6d:24:16:fd:d2:dd:05:47:88:e6:b3:b3:2e:0b:93: af:b4:c9:00:c6:57:03:8f:8b:6e:7b:ca:b2:29:18:b8:89:b0: 13:17:72:f0:42:6a:00:c1:c6:6a:22:0c:94:fe:1b:0a:92:aa: d5:89:11:e2:06:b1:e7:a5:ab:f2:f9:28:3f:fa:6a:f5:ab:3b: 06:4b:a2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcz8dalEAMMxvGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWZmNDVkMjQtYjkyNi00MTJkLWJlNTEtYTYzMGRjMjc1YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SZRmViut0KSGeuJnbCkFyrwGgTutS06S0J HjeAXDpnmuHRuNJUHBOH+FwPkEVeFyU/wEqitSNbt+4aQZulPxANBibE2EEzqxjT bBj6xhQ3+aQxej8V84OR+eBnn2316PDsN0cd/UA0o5oqfWTUWZVxBrxfpAbRFLgR WL6Nir2vushY6H7RqT3guuhonmAeor1WHYm1N/TlD76kjaQSpdKR5/eoyG1AAla8 tDRXlCUugguQKQm5KDLKWcwx90b1rKk+qlf7b1Y9+8uHgoFdkw4+/i3Y3roK/4SN sRAP8WU74Zl7PEzO2YrUeJjgsHWLX6s1jD5LUNeG/0BIJMLQrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf0Wn4UwwXYYLcIYHkp5vXdYIUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvM2VmNTk1ZDEtY2Y3NS0z ZjkyLTk5YWItMWQ4NDE2ZjI3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl+4HJ12qSBto4viy+ttB52Axi9hFK0yaHqIGh8f2uDT2ajNiWyDSB8 E19pP4DskJ/ZDpQsxG3SF3DxZ24eF30wsgvYJ93SjLQM0i6E6FGhr0LO6pSFw8bq 1+Z2N/3HVj8fsqVb1vN0RnxJA+UYxDrf7wo8g/Z6oI3XBZMEnIoop8n0a/gbUYIy l6NocOjBcaVdVX7XytobxdtusphNYc9USzYlPtzANm2/4Oc60NFwW8Fj6eRCWm0k Fv3S3QVHiOazsy4Lk6+0yQDGVwOPi257yrIpGLiJsBMXcvBCagDBxmoiDJT+GwqS qtWJEeIGseelq/L5KD/6avWrOwZLorI= -----END CERTIFICATE-----Generated at Thu Oct 1 22:14:53 2026 by rpki-client