$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: USxLDMnOhR3bgC0H7N/qe/eQ1BZLYk77J2jnbfhB+AY= Subject key identifier: BE:FD:ED:B5:F0:98:73:A2:D3:2A:13:6B:C3:69:1A:7E:0B:6E:C4:F0 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584F4974047ADBE91F3908774250 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:04:7a:db:e9:1f:39:08:77:42:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=113fa7cc-4c9c-4454-b30e-a63cd8c19b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:d8:53:d0:84:a2:d2:50:dd:00:b1:f7:c6: d9:e4:7f:a2:60:2d:05:a2:06:15:3b:3d:7c:eb:b3: ce:ac:c8:a0:c2:d6:16:05:93:60:d6:08:0f:ce:59: e2:b2:18:6e:f2:c9:ce:e9:a9:98:c1:b9:0d:32:00: 8d:65:e8:99:83:40:dd:ab:d1:ef:c5:b1:b6:9c:fe: d1:28:81:4b:da:0f:d7:eb:ab:10:77:18:55:bf:04: f2:91:d6:8d:38:33:e5:36:f9:e0:99:00:46:b5:b9: f8:ac:d3:af:6c:91:74:59:6f:fa:a2:2b:e4:b2:e2: 22:c3:7d:9d:03:17:bf:15:e5:12:b4:6f:bf:84:85: 8b:cf:75:21:44:bd:22:94:96:68:f5:95:0b:51:a0: ed:2c:6c:a4:eb:cd:dd:10:c2:14:8b:be:04:77:8e: 2f:93:8f:8e:44:ed:5f:a6:88:d6:98:c8:11:3c:47: 66:7a:30:7d:88:6d:ff:f0:7b:f8:7c:d7:1f:0b:c4: 9a:39:e7:9c:0a:ba:0f:48:05:0c:d2:9d:a8:11:a5: 1e:61:92:31:5c:cf:e1:32:fd:fd:80:bf:03:ed:10: 74:c2:20:6f:85:ec:47:4b:a9:1f:20:92:0a:37:70: 08:de:ef:60:ad:7e:f5:92:79:5b:f5:ed:5d:26:c8: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:ED:B5:F0:98:73:A2:D3:2A:13:6B:C3:69:1A:7E:0B:6E:C4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ec:a2:69:47:6d:79:51:63:f0:44:03:6e:cb:e6:69:29:a3: ad:2d:fd:9b:ef:19:67:66:3b:ed:5a:72:34:03:96:ab:12:fd: fe:e6:6b:84:47:5b:4a:ba:be:a5:7d:0a:7e:35:bc:70:22:37: 09:bf:17:71:4d:98:b4:0d:11:68:06:a1:c6:35:ae:b6:9a:e3: c6:6f:c6:e1:24:92:d7:d2:f8:3d:0b:48:1c:01:fc:63:f8:e9: ab:ff:17:e0:64:46:5f:42:37:be:57:c3:41:bd:31:e2:40:21: db:9e:98:1b:f3:ce:2c:de:24:91:7c:7a:e7:de:83:52:02:1a: f1:d0:65:50:e4:4b:02:04:a7:e9:8b:ad:1f:96:87:d0:49:1d: 4d:94:04:f7:2d:94:ad:61:42:2d:93:40:a4:e7:6c:02:8f:6b: 55:3a:3c:82:df:fe:1b:78:f5:54:eb:12:13:28:49:5b:dc:24: dd:78:84:73:8c:3b:a1:1f:db:cc:1d:82:a2:47:e8:dd:48:e2: 03:5a:16:20:34:a3:ed:0a:4e:bf:be:17:e4:33:a2:d7:e8:0c: 6f:54:e1:3a:eb:16:a3:88:78:ff:82:c7:69:b2:27:4e:78:5c: 48:14:52:d5:1c:a4:7d:5f:43:8d:74:0c:d0:66:30:ed:19:78: 94:5e:48:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAR62+kfOQh3QlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTEzZmE3Y2MtNGM5Yy00NDU0LWIzMGUtYTYzY2Q4YzE5YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnDYU9CEotJQ3QCx98bZ5H+iYC0FogYVOz18 67POrMigwtYWBZNg1ggPzlnishhu8snO6amYwbkNMgCNZeiZg0Ddq9HvxbG2nP7R KIFL2g/X66sQdxhVvwTykdaNODPlNvngmQBGtbn4rNOvbJF0WW/6oivksuIiw32d Axe/FeUStG+/hIWLz3UhRL0ilJZo9ZULUaDtLGyk683dEMIUi74Ed44vk4+ORO1f pojWmMgRPEdmejB9iG3/8Hv4fNcfC8SaOeecCroPSAUM0p2oEaUeYZIxXM/hMv39 gL8D7RB0wiBvhexHS6kfIJIKN3AI3u9grX71knlb9e1dJsivEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL797bXwmHOi0yoTa8NpGn4LbsTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfsomlHbXlRY/BEA27L5mkpo60t/ZvvGWdmO+1acjQDlqsS/f7ma4RH W0q6vqV9Cn41vHAiNwm/F3FNmLQNEWgGocY1rraa48ZvxuEkktfS+D0LSBwB/GP4 6av/F+BkRl9CN75Xw0G9MeJAIduemBvzzizeJJF8eufeg1ICGvHQZVDkSwIEp+mL rR+Wh9BJHU2UBPctlK1hQi2TQKTnbAKPa1U6PILf/ht49VTrEhMoSVvcJN14hHOM O6Ef28wdgqJH6N1I4gNaFiA0o+0KTr++F+QzotfoDG9U4TrrFqOIeP+Cx2myJ054 XEgUUtUcpH1fQ410DNBmMO0ZeJReSAg= -----END CERTIFICATE-----Generated at Mon Sep 28 21:45:04 2026 by rpki-client