$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa File: a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa (raw, json) Hash identifier: N+BoNWDVDbAWQtr+o+5jbdi03g6jGOPA8tZyz8Evf4E= Subject key identifier: 72:A1:86:77:06:BA:B7:FD:62:C3:4D:52:3D:19:9F:EF:EB:DC:52:DF Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F4328584F20F7D35835D184BEB6ABF180 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d3:58:35:d1:84:be:b6:ab:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=68f9fbe3-71ec-4dcf-9198-5d5ed6148dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:87:09:4e:65:c7:17:2e:65:55:60:57:b8: 2a:ff:c0:8b:03:87:f2:21:da:0c:54:ad:af:a1:e3: 62:a3:c1:e0:0b:fc:eb:88:88:b4:99:ec:6a:ed:a5: 8c:7f:86:ca:aa:7d:67:26:89:0e:c1:b1:90:8c:38: ea:61:ea:46:e7:22:20:86:35:1e:8e:75:38:a6:b6: b7:63:18:06:18:8c:03:96:b3:75:ac:ae:b9:71:cd: 0c:dc:8f:db:93:42:76:76:b6:c5:74:9c:c5:55:9b: c2:37:23:c6:1d:8d:ce:09:29:8d:61:2a:e5:3d:36: 1d:70:66:a1:34:60:c4:61:de:a7:f0:35:97:8c:1c: 07:f5:82:27:d6:76:07:eb:60:f2:c7:93:a8:6b:2a: 29:c1:a8:3c:96:05:a4:81:dc:b1:fd:ad:c6:ac:09: 14:bc:8b:7a:e5:00:f8:38:c0:68:5a:af:05:a0:b0: 33:75:86:b2:f2:8e:8b:63:87:71:fe:3d:d6:ad:47: 81:91:3d:f4:56:f8:01:6a:83:60:79:c7:d2:aa:90: c3:f8:e1:ed:d7:3a:45:39:04:22:70:b9:5e:5f:13: e4:aa:89:d8:7d:f1:d6:23:3b:3d:71:11:1a:2c:8a: 73:21:31:71:39:1a:56:f3:96:ac:4b:e3:48:82:5b: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A1:86:77:06:BA:B7:FD:62:C3:4D:52:3D:19:9F:EF:EB:DC:52:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:67:97:4a:f4:f0:4c:a0:41:63:ba:56:c0:b9:88:54:d9:b5: de:1e:8b:fb:33:c5:b3:7a:e1:94:90:20:72:c8:17:1b:22:a3: 6c:c9:f4:58:cb:48:09:b6:8a:ec:d7:a2:ae:63:4b:f1:1e:9a: cf:ac:d3:ca:12:d5:f6:b8:5f:52:0b:9c:60:06:ba:d6:ae:cd: 06:48:41:b7:0a:70:ce:7f:d5:1c:94:4b:5d:f0:09:f6:c2:d9: 33:e2:f3:d6:8f:2d:d5:7c:67:5e:be:78:c2:a7:1a:34:ae:2a: 18:0b:74:06:64:f4:98:dd:d4:d1:ef:72:85:99:b8:31:29:90: a1:6a:27:b3:43:ea:40:90:6c:68:d0:b7:d7:b5:fb:7c:13:aa: c5:ec:e6:6e:a3:c4:de:3e:1a:f2:d3:3b:0a:20:b3:cf:85:23: d9:0f:6d:23:91:f1:b2:44:4f:66:5c:98:af:40:bc:5d:be:67: 55:53:dc:7f:9d:ef:88:2d:49:79:ca:d0:31:6a:b4:96:e6:e9: 0a:0c:dc:9f:c4:14:ed:23:dc:5b:44:0a:f8:14:57:ed:3f:02: a0:4c:08:f0:5c:89:54:24:cb:bc:16:57:56:5a:ad:32:b6:c8: d4:01:22:6d:b6:53:7c:fb:60:6e:7b:f9:f6:8d:09:5d:07:9a: c4:42:34:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99NYNdGEvrar8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjhmOWZiZTMtNzFlYy00ZGNmLTkxOTgtNWQ1ZWQ2MTQ4ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNuHCU5lxxcuZVVgV7gq/8CLA4fyIdoMVK2v oeNio8HgC/zriIi0mexq7aWMf4bKqn1nJokOwbGQjDjqYepG5yIghjUejnU4pra3 YxgGGIwDlrN1rK65cc0M3I/bk0J2drbFdJzFVZvCNyPGHY3OCSmNYSrlPTYdcGah NGDEYd6n8DWXjBwH9YIn1nYH62Dyx5Ooayopwag8lgWkgdyx/a3GrAkUvIt65QD4 OMBoWq8FoLAzdYay8o6LY4dx/j3WrUeBkT30VvgBaoNgecfSqpDD+OHt1zpFOQQi cLleXxPkqonYffHWIzs9cREaLIpzITFxORpW85asS+NIglvgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKhhncGurf9YsNNUj0Zn+/r3FLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvYTYyYTI3ZWItMGU0Yy0z OTJlLWJiYjctNDZjZGE4MzhlNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhnl0r08EygQWO6VsC5iFTZtd4ei/szxbN64ZSQIHLIFxsio2zJ9FjL SAm2iuzXoq5jS/Eems+s08oS1fa4X1ILnGAGutauzQZIQbcKcM5/1RyUS13wCfbC 2TPi89aPLdV8Z16+eMKnGjSuKhgLdAZk9Jjd1NHvcoWZuDEpkKFqJ7ND6kCQbGjQ t9e1+3wTqsXs5m6jxN4+GvLTOwogs8+FI9kPbSOR8bJET2ZcmK9AvF2+Z1VT3H+d 74gtSXnK0DFqtJbm6QoM3J/EFO0j3FtECvgUV+0/AqBMCPBciVQky7wWV1ZarTK2 yNQBIm22U3z7YG57+faNCV0HmsRCNMI= -----END CERTIFICATE-----Generated at Sat Sep 26 14:26:27 2026 by rpki-client