$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa File: 5819b85c-1290-392c-af04-a578ef8c63f4.roa (raw, json) Hash identifier: 99w9WJODE772XJAmyK4P6iGg1YQK2vz0z7x2/Uvxp34= Subject key identifier: 88:1B:06:69:40:9A:DE:65:CC:D8:F5:76:35:86:59:3C:01:27:B9:76 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4F080A6F38CB0BE7702D27B0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16433 IP address blocks: 162.43.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:0a:6f:38:cb:0b:e7:70:2d:27:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=4b84e313-dfb5-4704-97bf-37d9982c72b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:5e:9c:6d:69:01:db:fc:ea:d2:8d:ca:81: 19:6a:6f:76:17:aa:fc:2f:de:0c:00:73:5e:47:47: c2:19:24:f9:1b:0c:7c:3e:f1:29:34:30:ad:07:14: 96:a5:50:47:0f:a6:f6:35:45:e9:64:6a:1b:9a:9d: 3f:a6:35:01:0d:90:76:eb:11:23:d6:02:5d:8d:82: b1:56:44:7c:1c:dc:f5:7a:86:cf:b9:cb:bc:0d:ae: d1:a8:b5:83:17:a9:06:05:23:3f:7c:53:f0:dc:4e: 51:da:a5:9f:30:56:a2:51:4a:fd:eb:46:ed:eb:7e: 7a:96:29:18:a7:c7:5b:5c:81:1c:3c:c9:41:30:08: ca:50:07:ed:5f:1c:98:2c:24:a5:58:07:63:6b:bd: e3:f1:ca:ec:f4:0b:0b:a8:d4:19:75:bf:42:3c:c4: fd:47:9e:af:b3:f0:e3:ad:a1:6d:fd:49:03:b0:cb: b0:f2:28:ab:26:9a:92:55:cd:83:d0:77:ab:cf:25: b1:6b:e8:3e:e0:c4:52:7f:16:5a:42:9f:fd:22:26: a6:f9:2d:81:2b:2e:bf:1c:06:26:2a:cd:71:cf:28: c2:4d:0f:94:33:ab:ee:bf:8b:d8:d4:79:96:a0:7d: fc:ef:f1:0c:f2:2a:d0:3d:f1:53:1f:f1:dc:5b:ab: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1B:06:69:40:9A:DE:65:CC:D8:F5:76:35:86:59:3C:01:27:B9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.43.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f9:c9:91:dc:1d:d0:e7:d5:65:7e:80:5e:b6:1e:c0:34:52: f5:01:45:df:f5:f6:6b:be:1f:23:04:1e:19:91:cf:d7:e1:10: 18:46:7f:41:f8:f6:27:3c:43:5a:66:bd:09:4f:67:c4:85:c8: 46:4d:89:3b:f6:c1:04:51:cd:66:8f:ec:01:92:7e:9a:f5:34: 05:70:35:0d:ee:fb:33:5b:ca:be:79:41:16:4b:69:e3:c8:da: 19:5f:05:52:59:19:e1:d9:58:46:ac:d7:ff:d4:e0:32:32:28: 05:ef:83:ff:cd:c1:dc:b2:b2:7d:de:c4:f2:5d:79:95:39:e0: f2:2b:95:e6:43:9e:4f:c9:c1:4f:5e:ba:2a:5b:9c:90:cb:f1: c3:6c:db:e0:4a:44:d9:29:18:15:ba:4e:d2:b0:7e:68:d3:7c: 94:dd:91:ff:88:b3:56:fe:09:18:bb:32:22:22:3b:d7:80:37: 48:7b:57:98:c6:5a:ff:b1:bf:07:96:a6:4c:7d:8e:b0:08:7e: 6e:84:2b:97:82:3b:44:13:4e:82:59:90:7b:12:e4:6c:e2:39: 43:25:d7:1a:c7:37:57:bf:63:2c:32:b8:eb:43:2a:2c:4e:27: e5:5c:5e:06:ea:9d:d3:d3:2d:ad:e2:78:1c:f4:af:50:f4:34: 34:43:5f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCApvOMsL53AtJ7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NGI4NGUzMTMtZGZiNS00NzA0LTk3YmYtMzdkOTk4MmM3MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlxenG1pAdv86tKNyoEZam92F6r8L94MAHNe R0fCGST5Gwx8PvEpNDCtBxSWpVBHD6b2NUXpZGobmp0/pjUBDZB26xEj1gJdjYKx VkR8HNz1eobPucu8Da7RqLWDF6kGBSM/fFPw3E5R2qWfMFaiUUr960bt6356likY p8dbXIEcPMlBMAjKUAftXxyYLCSlWAdja73j8crs9AsLqNQZdb9CPMT9R56vs/Dj raFt/UkDsMuw8iirJpqSVc2D0HerzyWxa+g+4MRSfxZaQp/9Iiam+S2BKy6/HAYm Ks1xzyjCTQ+UM6vuv4vY1HmWoH387/EM8irQPfFTH/HcW6vr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgbBmlAmt5lzNj1djWGWTwBJ7l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTgxOWI4NWMtMTI5MC0z OTJjLWFmMDQtYTU3OGVmOGM2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD5yZHcHdDn1WV+gF62HsA0UvUBRd/19mu+HyMEHhmRz9fhEBhGf0H4 9ic8Q1pmvQlPZ8SFyEZNiTv2wQRRzWaP7AGSfpr1NAVwNQ3u+zNbyr55QRZLaePI 2hlfBVJZGeHZWEas1//U4DIyKAXvg//Nwdyysn3exPJdeZU54PIrleZDnk/JwU9e uipbnJDL8cNs2+BKRNkpGBW6TtKwfmjTfJTdkf+Is1b+CRi7MiIiO9eAN0h7V5jG Wv+xvweWpkx9jrAIfm6EK5eCO0QTToJZkHsS5GziOUMl1xrHN1e/YywyuOtDKixO J+VcXgbqndPTLa3ieBz0r1D0NDRDX44= -----END CERTIFICATE-----Generated at Sun Sep 27 08:08:50 2026 by rpki-client