$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa File: 0f0b6b28-4fd9-341d-b09c-debd722a166c.roa (raw, json) Hash identifier: dBWVa1EddG4Dyq12GWBV9aG0HBcKP5SCbI0TUG8cxto= Subject key identifier: C0:12:ED:44:99:06:E3:1A:A4:11:87:E5:7D:49:9F:CE:CD:7E:87:29 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584FD3C132EC0A6955B6275E0C20 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 22223 IP address blocks: 162.211.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:32:ec:0a:69:55:b6:27:5e:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=727bf60d-1ec5-476f-9e8b-75b0d67d9220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:f1:b2:14:a4:97:22:6e:e1:cb:d4:93:0a: 57:48:78:3f:47:f0:6d:6f:1f:6a:71:16:7e:e5:8e: 4a:4a:c3:24:ef:b2:67:42:dc:b6:5b:97:eb:28:24: 42:29:95:bb:63:e8:7e:3a:27:d9:63:07:ff:9d:cc: 3a:e3:c5:ca:15:53:1a:f4:0e:87:b7:35:5a:9e:b9: 3a:82:22:f7:d0:5f:93:46:a5:39:1e:40:5b:06:6c: f4:d6:3e:41:af:41:93:7f:d5:53:00:1f:be:d6:56: 71:4f:96:c1:33:b8:33:a8:31:80:8d:90:e9:97:a1: 5a:ed:cc:33:f7:be:6e:a1:53:26:48:dc:8b:7c:ee: d8:c8:42:76:de:78:6f:d0:47:c1:57:c1:1e:34:2a: d2:a4:1d:b5:09:de:f8:6d:46:0c:3e:0c:90:60:7a: f0:01:92:58:cd:bb:52:fd:c5:5f:1f:f3:da:f3:e4: 9b:0a:79:0e:73:c7:99:db:e1:05:53:38:02:21:04: 1b:da:7b:de:9f:8b:94:aa:46:5f:ca:10:e5:dc:f2: 7b:22:0e:c2:4a:46:ca:3d:ab:14:5d:ef:af:3e:59: a8:bc:a6:28:36:0e:88:4b:60:51:1e:23:7c:ab:46: 7a:0e:08:5b:62:ff:3d:77:14:af:37:a5:dd:e7:42: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:ED:44:99:06:E3:1A:A4:11:87:E5:7D:49:9F:CE:CD:7E:87:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.211.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a8:04:a5:19:62:64:d8:be:fa:8e:7f:43:6c:81:7a:85:16: eb:22:b3:13:06:c4:9c:a7:b2:cb:24:53:d5:02:49:30:6e:f8: 77:15:47:f7:e8:24:0a:74:78:f4:86:0e:32:cf:52:c8:0a:aa: 59:09:45:45:58:76:09:20:52:b9:c5:70:76:26:8a:79:b4:5f: 36:70:3c:1c:8e:4e:7f:b9:ca:20:db:4b:7b:e6:76:96:ad:e2: 90:d4:74:f2:a3:40:e6:b2:60:28:4b:e5:b2:b2:68:b8:33:aa: 93:4b:f5:4f:8d:23:eb:08:4b:ae:48:66:94:53:39:a3:72:04: df:40:25:2e:d6:9d:c0:0a:6d:5c:c9:08:6b:43:64:97:9a:35: b1:8f:4f:8f:cf:0e:5d:6d:26:38:dc:2c:f4:17:c7:27:38:00: 74:4d:03:6b:c9:ad:78:00:89:39:f1:70:86:0b:73:af:82:f2: a4:3c:53:51:b5:80:5f:68:06:fd:d0:ad:6f:70:f8:9f:6d:bf: db:89:fa:d8:b3:8b:2b:50:21:9f:3d:d3:92:e6:6f:70:15:7d: de:43:c1:95:6c:23:94:23:68:73:e5:f5:56:1b:f8:31:95:03: 7c:73:51:da:28:0a:e4:4d:2f:c1:4b:65:cc:5d:b5:25:01:d6: c7:8d:1a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/TwTLsCmlVtideDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk NzI3YmY2MGQtMWVjNS00NzZmLTllOGItNzViMGQ2N2Q5MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEfxshSklyJu4cvUkwpXSHg/R/Btbx9qcRZ+ 5Y5KSsMk77JnQty2W5frKCRCKZW7Y+h+OifZYwf/ncw648XKFVMa9A6HtzVanrk6 giL30F+TRqU5HkBbBmz01j5Br0GTf9VTAB++1lZxT5bBM7gzqDGAjZDpl6Fa7cwz 975uoVMmSNyLfO7YyEJ23nhv0EfBV8EeNCrSpB21Cd74bUYMPgyQYHrwAZJYzbtS /cVfH/Pa8+SbCnkOc8eZ2+EFUzgCIQQb2nven4uUqkZfyhDl3PJ7Ig7CSkbKPasU Xe+vPlmovKYoNg6IS2BRHiN8q0Z6DghbYv89dxSvN6Xd50IV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAS7USZBuMapBGH5X1Jn87NfocpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvMGYwYjZiMjgtNGZkOS0z NDFkLWIwOWMtZGViZDcyMmExNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABioBKUZYmTYvvqOf0NsgXqFFusisxMGxJynssskU9UCSTBu+HcVR/fo JAp0ePSGDjLPUsgKqlkJRUVYdgkgUrnFcHYminm0XzZwPByOTn+5yiDbS3vmdpat 4pDUdPKjQOayYChL5bKyaLgzqpNL9U+NI+sIS65IZpRTOaNyBN9AJS7WncAKbVzJ CGtDZJeaNbGPT4/PDl1tJjjcLPQXxyc4AHRNA2vJrXgAiTnxcIYLc6+C8qQ8U1G1 gF9oBv3QrW9w+J9tv9uJ+tiziytQIZ8905Lmb3AVfd5DwZVsI5QjaHPl9VYb+DGV A3xzUdooCuRNL8FLZcxdtSUB1seNGpY= -----END CERTIFICATE-----Generated at Sun Nov 15 13:21:52 2026 by rpki-client