$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa File: 8092af76-214c-34c1-a5f8-aad25351bfc1.roa (raw, json) Hash identifier: u/mUZKk53h1G9r6Z6/MzOKdtPnloQr5HBGGrD/jFDdo= Subject key identifier: 85:46:72:A5:78:BA:FA:F3:37:AB:F7:C0:EF:2C:F8:8B:04:0F:2E:24 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584F498AD5FA1FBEB4ECCB1DB4C0 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22504 IP address blocks: 162.118.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d5:fa:1f:be:b4:ec:cb:1d:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3ae1266-9a29-4741-877e-83152d284b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:c7:68:e7:ab:56:82:35:dc:de:67:1b:87: 05:ad:d7:b2:aa:ba:2f:3a:21:57:1c:9d:c3:fb:62: 22:0c:8a:a3:da:a7:72:c7:a7:01:ca:70:42:81:09: 77:04:3a:a0:02:db:69:11:e5:34:1b:f4:96:c0:98: b9:c0:46:b2:71:26:2d:ff:95:83:06:f2:b5:38:19: ea:5f:2d:30:45:f3:19:b6:be:86:a8:7d:dc:1b:8d: a2:ea:83:91:02:7c:cf:46:35:2b:1c:dd:f3:25:42: 39:a3:1f:41:98:32:7f:07:b1:30:e3:e4:fa:3b:21: 25:10:ea:47:63:8d:00:56:b9:cb:cb:6f:74:66:48: f0:c8:97:68:8c:c0:8f:d9:57:48:01:d8:ef:c8:5d: d6:6e:40:a1:3d:49:7f:ab:ed:6d:fb:6d:c6:0c:3d: 72:53:40:cb:b7:f9:bf:b1:b1:3b:87:e8:21:8c:af: 0d:6c:86:de:fa:64:3c:86:dc:a4:b4:af:e9:5f:98: 39:f9:8a:6b:27:a0:65:fb:51:30:67:8d:8b:e1:85: c8:2c:d8:56:d4:06:02:85:36:93:c8:98:52:22:47: ab:3c:7d:f1:24:77:b0:b2:1d:89:9e:17:04:38:c6: 2c:5d:22:6d:10:5b:9d:f2:2f:47:71:fc:3e:45:66: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:46:72:A5:78:BA:FA:F3:37:AB:F7:C0:EF:2C:F8:8B:04:0F:2E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5f:b1:b1:c1:2f:e1:da:c8:1f:3a:44:9f:0d:af:5a:64:c2: fa:8d:34:82:c7:5b:ca:f0:19:4c:06:7e:2a:c6:3f:15:67:0c: d7:26:5e:b8:ae:5d:ca:bc:3a:82:9d:88:93:60:5e:7d:39:bc: 6b:a9:d9:fe:d7:92:5f:e1:d0:43:25:1c:2d:0b:c0:27:8f:1b: 11:28:32:31:46:73:97:8e:d6:aa:92:8a:10:37:cc:91:ef:4e: bd:45:b4:c7:8d:2d:ea:51:61:c4:2a:c0:74:cb:e1:d3:4e:6f: ec:67:70:21:26:7a:1c:8a:d9:57:f9:e8:7a:7e:18:ba:4d:d3: 37:8d:eb:27:58:a8:8b:27:72:1c:c8:8a:9d:5f:31:9a:b8:92: 1c:c3:e2:77:d8:ad:13:02:9a:91:34:97:47:60:e6:b3:e4:7f: f6:fd:5a:6a:03:8e:18:bb:97:29:ee:8a:72:8e:6a:4f:a2:5d: 05:87:cb:22:29:55:6e:8d:10:3c:73:2c:83:98:10:a1:25:ce: a1:79:32:54:84:e0:9d:bf:af:db:94:70:b5:2b:b7:0a:b2:db: 89:16:1e:04:06:1e:ed:fb:4f:e4:a1:7b:a1:63:6a:bb:be:a3: 97:4d:bd:d0:76:b9:b6:d3:68:a9:a8:0f:93:86:44:dc:f4:e0: e0:91:08:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JitX6H7607MsdtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNhZTEyNjYtOWEyOS00NzQxLTg3N2UtODMxNTJkMjg0YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttfHaOerVoI13N5nG4cFrdeyqrovOiFXHJ3D +2IiDIqj2qdyx6cBynBCgQl3BDqgAttpEeU0G/SWwJi5wEaycSYt/5WDBvK1OBnq Xy0wRfMZtr6GqH3cG42i6oORAnzPRjUrHN3zJUI5ox9BmDJ/B7Ew4+T6OyElEOpH Y40AVrnLy290ZkjwyJdojMCP2VdIAdjvyF3WbkChPUl/q+1t+23GDD1yU0DLt/m/ sbE7h+ghjK8NbIbe+mQ8htyktK/pX5g5+YprJ6Bl+1EwZ42L4YXILNhW1AYChTaT yJhSIkerPH3xJHewsh2JnhcEOMYsXSJtEFud8i9Hcfw+RWaBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVGcqV4uvrzN6v3wO8s+IsEDy4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvODA5MmFmNzYtMjE0Yy0z NGMxLWE1ZjgtYWFkMjUzNTFiZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1fsbHBL+HayB86RJ8Nr1pkwvqNNILHW8rwGUwGfirGPxVnDNcmXriu Xcq8OoKdiJNgXn05vGup2f7Xkl/h0EMlHC0LwCePGxEoMjFGc5eO1qqSihA3zJHv Tr1FtMeNLepRYcQqwHTL4dNOb+xncCEmehyK2Vf56Hp+GLpN0zeN6ydYqIsnchzI ip1fMZq4khzD4nfYrRMCmpE0l0dg5rPkf/b9WmoDjhi7lynuinKOak+iXQWHyyIp VW6NEDxzLIOYEKElzqF5MlSE4J2/r9uUcLUrtwqy24kWHgQGHu37T+She6Fjaru+ o5dNvdB2ubbTaKmoD5OGRNz04OCRCFo= -----END CERTIFICATE-----Generated at Fri Oct 9 02:08:56 2026 by rpki-client