$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa File: 5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa (raw, json) Hash identifier: b4FZoylSRYl40nESbylx9ELU7kt1BNdxhesYcxLHohE= Subject key identifier: 36:D3:19:A7:15:51:10:E6:B3:E6:46:7D:E7:73:12:B2:5A:14:43:4F Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4F080A7CD0A886EFA7A18380 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16433 IP address blocks: 162.251.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:0a:7c:d0:a8:86:ef:a7:a1:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=a26f2237-270a-453b-8a4f-0c5ad328cb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:cb:b8:9a:ae:80:68:bc:a4:ea:a4:d1:b9: 36:0b:35:4e:92:a8:45:f7:f4:44:0a:12:26:30:cd: 3b:4c:10:81:25:37:8f:85:63:be:cb:b3:59:89:96: 56:55:b5:55:21:e3:f2:5c:5b:02:6c:2d:79:9f:f8: 5f:08:ac:1e:e0:67:35:49:22:0e:a3:b8:e6:37:91: 04:fd:c2:b1:22:44:a9:4e:82:78:a8:bc:6b:e2:a0: 87:e9:3f:c5:ab:e5:e7:3d:d4:0b:90:04:8b:d3:cb: ae:0d:be:f8:c3:e0:6a:d2:75:e3:fc:b6:f0:64:6f: fb:ba:00:12:2d:bd:8c:e4:0d:88:7c:44:78:f9:51: a0:1a:46:23:ec:23:97:54:bc:50:d0:2a:28:15:ee: 2e:41:71:57:30:e9:bc:0d:33:e8:f7:0b:75:ff:8c: 35:5d:c4:21:08:7e:c9:b4:85:9d:22:f4:11:d7:9c: 75:73:e5:4a:d9:11:a1:d2:4e:ea:3c:6e:15:bb:7e: 54:3e:1f:2e:84:27:ae:d6:94:a7:03:1f:e0:90:4c: ee:ff:52:52:b5:f8:5a:59:7b:35:1c:54:1c:1d:6f: 63:d6:5d:5b:be:83:6e:ab:ed:9d:49:2c:8f:a5:1d: 58:c2:c3:bb:45:3d:e9:0a:a0:36:1b:e8:89:d9:46: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:19:A7:15:51:10:E6:B3:E6:46:7D:E7:73:12:B2:5A:14:43:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.251.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:85:98:7f:59:d0:b1:df:8e:26:40:1b:49:ae:ac:72:36:bc: 85:31:e4:af:08:6a:5b:9a:96:24:e7:6c:6a:7b:3d:7e:36:52: 07:2c:6e:2b:5a:73:4e:82:89:01:e5:ed:af:36:0b:f2:d1:d2: 2f:3a:73:91:8f:47:dc:ee:05:46:65:3e:cf:cf:b2:ba:7a:be: 34:b7:bc:b7:47:f0:21:79:be:33:39:db:92:cb:fe:44:8a:7e: 7f:a8:1e:89:61:c7:e6:44:b6:25:9e:25:82:e0:a6:ba:8b:5c: 9c:14:de:47:b6:ad:50:ee:70:e9:6a:76:4e:c1:e6:a4:84:ee: 1c:88:17:01:29:44:2e:7e:27:2c:95:57:26:4f:71:80:7f:80: 86:5d:58:3f:bf:fb:36:4d:43:2a:c5:dd:06:83:f0:98:a7:1a: 51:56:c8:15:32:37:f5:f4:ac:f4:d8:0e:8d:b2:ed:53:24:c1: 71:9c:e8:fe:32:9f:fa:ae:92:7d:a9:29:a9:e0:04:77:3f:5b: c4:65:8d:3f:db:bd:fc:59:68:39:0a:54:07:64:45:5c:e1:fe: f1:1d:9f:60:b2:eb:64:42:35:fc:4f:e7:5a:88:74:7c:32:78: c5:6d:4d:1d:61:b6:8a:78:e4:18:ec:b1:73:2c:02:24:6f:b9: 02:d3:de:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAp80KiG76ehg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YTI2ZjIyMzctMjcwYS00NTNiLThhNGYtMGM1YWQzMjhjYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh87LuJqugGi8pOqk0bk2CzVOkqhF9/REChIm MM07TBCBJTePhWO+y7NZiZZWVbVVIePyXFsCbC15n/hfCKwe4Gc1SSIOo7jmN5EE /cKxIkSpToJ4qLxr4qCH6T/Fq+XnPdQLkASL08uuDb74w+Bq0nXj/LbwZG/7ugAS Lb2M5A2IfER4+VGgGkYj7COXVLxQ0CooFe4uQXFXMOm8DTPo9wt1/4w1XcQhCH7J tIWdIvQR15x1c+VK2RGh0k7qPG4Vu35UPh8uhCeu1pSnAx/gkEzu/1JStfhaWXs1 HFQcHW9j1l1bvoNuq+2dSSyPpR1YwsO7RT3pCqA2G+iJ2Ua/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbTGacVURDms+ZGfedzErJaFENPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTUwNWFjZDMtZmUwNy0z NGNlLWJjMmYtNmFjM2M2MGU5YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmFmH9Z0LHfjiZAG0murHI2vIUx5K8IalualiTnbGp7PX42Ugcsbita c06CiQHl7a82C/LR0i86c5GPR9zuBUZlPs/Psrp6vjS3vLdH8CF5vjM525LL/kSK fn+oHolhx+ZEtiWeJYLgprqLXJwU3ke2rVDucOlqdk7B5qSE7hyIFwEpRC5+JyyV VyZPcYB/gIZdWD+/+zZNQyrF3QaD8JinGlFWyBUyN/X0rPTYDo2y7VMkwXGc6P4y n/qukn2pKangBHc/W8RljT/bvfxZaDkKVAdkRVzh/vEdn2Cy62RCNfxP51qIdHwy eMVtTR1htop45BjssXMsAiRvuQLT3jc= -----END CERTIFICATE-----Generated at Sun Sep 27 10:25:04 2026 by rpki-client