$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa File: c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa (raw, json) Hash identifier: /nbDHZqJzPXXRR02HPT84EEcCthyf6wWxqII0SSbWIM= Subject key identifier: 0F:F4:51:FC:FE:3D:32:A7:72:7F:99:E1:24:6D:E7:53:66:6C:DD:A0 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F4328584F4988A3ACA03EEAD3138BA980 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26431 IP address blocks: 203.31.160.0/24 maxlen: 24 2602:f666::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a3:ac:a0:3e:ea:d3:13:8b:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56c75fc9-0639-4515-90d9-7e13dfbbb1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:db:e9:44:8a:7c:6d:73:aa:94:47:85:58: a4:50:10:11:86:75:9f:db:08:f7:56:48:12:c6:58: be:d9:ca:e5:d3:39:ba:d3:86:a9:8d:26:48:04:44: 60:35:cc:f4:e1:4b:f4:58:b6:e1:1a:d5:8f:7f:0a: ac:0f:3b:f6:9f:7a:ed:0b:3b:7c:e0:e2:ec:21:ec: f6:39:91:b1:c2:a8:45:68:7b:1c:93:ee:a2:df:dd: b5:f5:45:e1:df:64:6e:76:c7:b8:c5:f8:16:19:de: 16:28:b9:47:9c:28:66:25:2c:8c:07:1a:b7:be:92: 96:24:7a:0c:93:06:d6:19:ad:83:83:c9:46:50:a3: 7b:d3:f6:3e:4b:37:db:c4:d0:b1:cc:d7:78:a9:c2: f8:9c:10:bf:84:7c:33:d9:74:67:be:18:02:8e:ff: 98:6f:30:7c:e9:58:fc:e0:b0:70:15:eb:ef:48:4f: 1a:70:0d:14:22:bc:a0:d3:a2:b5:14:24:4a:27:3d: 67:ca:95:7f:e6:28:6a:87:09:3e:87:f4:2c:55:52: e9:5f:d1:50:6e:01:47:87:60:7f:aa:b2:79:a0:be: ad:c3:56:af:2f:08:c5:e9:f0:2d:4a:e8:22:db:73: 90:4e:72:79:7b:29:10:25:4d:73:a4:77:da:a7:7d: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F4:51:FC:FE:3D:32:A7:72:7F:99:E1:24:6D:E7:53:66:6C:DD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv4: 203.31.160.0/24 IPv6: 2602:f666::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:07:d2:15:da:af:63:6f:d5:7f:7c:f0:24:a9:02:a5:a6:35: cb:02:69:98:7a:bd:c3:4e:40:5a:8d:91:1d:bc:ba:2f:84:95: db:4b:6c:13:0d:f1:e2:4d:5f:15:5e:14:fc:cc:5c:8e:42:15: 53:6b:98:bc:1c:a8:66:4b:f3:1e:fc:dd:f4:14:48:1d:b6:d5: d4:4b:ac:cd:0c:cd:e4:41:af:44:27:31:3e:59:b3:59:2c:da: a8:ef:4c:e6:b9:02:4a:03:bc:b0:d2:98:8e:50:92:a4:5c:a5: e8:b1:ff:69:21:a4:91:75:dd:30:1d:82:65:37:0a:2d:d6:ff: 7c:2e:7e:4b:52:30:dc:53:1b:a6:6f:f6:c5:75:73:89:af:94: 88:d8:d3:2e:e2:fb:87:86:04:96:33:76:64:f7:b9:3f:b1:ce: 50:fb:4d:d0:ac:b2:60:3c:0a:fb:e3:5c:f8:44:5d:19:ae:6c: a7:88:a7:e8:bd:ae:55:36:13:de:a8:b3:b0:e7:f0:f9:84:2f: b9:2b:f9:03:60:2a:f0:8a:30:5c:91:a5:ea:92:cb:9a:c9:f4: 1d:6b:f0:98:06:0f:27:ec:32:93:d7:8b:6e:28:28:97:92:13: 68:03:f6:55:9f:87:5d:9c:fd:06:f3:10:f9:7b:39:4f:38:aa: d5:37:a5:92 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JiKOsoD7q0xOLqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZjNzVmYzktMDYzOS00NTE1LTkwZDktN2UxM2RmYmJiMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjibb6USKfG1zqpRHhVikUBARhnWf2wj3VkgS xli+2crl0zm604apjSZIBERgNcz04Uv0WLbhGtWPfwqsDzv2n3rtCzt84OLsIez2 OZGxwqhFaHsck+6i39219UXh32Rudse4xfgWGd4WKLlHnChmJSyMBxq3vpKWJHoM kwbWGa2Dg8lGUKN70/Y+SzfbxNCxzNd4qcL4nBC/hHwz2XRnvhgCjv+YbzB86Vj8 4LBwFevvSE8acA0UIryg06K1FCRKJz1nypV/5ihqhwk+h/QsVVLpX9FQbgFHh2B/ qrJ5oL6tw1avLwjF6fAtSugi23OQTnJ5eykQJU1zpHfap32ZrQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA/0Ufz+PTKncn+Z4SRt51NmbN2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvYzZlZDE3ZjEtMzRjYi0z Y2U5LThkMDYtZTBhMTZkMjQwNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAyx+gMA4E AgACMAgDBgAmAvZmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCB9IV2q9jb9V/fPAkqQKlpjXLAmmYer3D TkBajZEdvLovhJXbS2wTDfHiTV8VXhT8zFyOQhVTa5i8HKhmS/Me/N30FEgdttXU S6zNDM3kQa9EJzE+WbNZLNqo70zmuQJKA7yw0piOUJKkXKXosf9pIaSRdd0wHYJl Nwot1v98Ln5LUjDcUxumb/bFdXOJr5SI2NMu4vuHhgSWM3Zk97k/sc5Q+03QrLJg PAr741z4RF0ZrmyniKfova5VNhPeqLOw5/D5hC+5K/kDYCrwijBckaXqksuayfQd a/CYBg8n7DKT14tuKCiXkhNoA/ZVn4ddnP0G8xD5ezlPOKrVN6WS -----END CERTIFICATE-----Generated at Sun Sep 27 14:58:31 2026 by rpki-client