$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa File: dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa (raw, json) Hash identifier: oMjHzX+JY7o8sznZ8HCJE9BB5wxeJ/TOm/WGlf5Y8lE= Subject key identifier: 59:C6:86:52:2A:04:82:BB:F8:93:0B:64:C7:05:A7:DF:66:89:CD:BB Certificate issuer: /CN=9b3c70c6-7546-4f4f-a22d-687b96c25de3 Certificate serial: 010D0C9F4328584E5084B0BBA782A2533B06FA0C Authority key identifier: F7:EF:67:1B:30:26:9F:60:50:95:84:A7:EA:E6:DB:88:F4:7A:1B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 204902 IP address blocks: 162.12.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:b0:bb:a7:82:a2:53:3b:06:fa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3c70c6-7546-4f4f-a22d-687b96c25de3 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=e82c1a2c-9ae5-4ed4-bdc4-67ef4d66e1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:82:ad:4e:03:5b:92:19:95:56:7f:e1:54: a2:96:02:6e:cf:cd:bd:6c:dc:c5:39:0c:30:33:c7: 87:20:7a:57:87:96:da:e7:8e:9c:af:cb:b4:f2:e4: d5:f5:d6:5c:b4:d8:35:c9:c0:5c:c7:6b:f1:9d:01: 79:5c:2f:43:0e:f2:8c:82:f7:d9:7d:ba:9d:e5:60: ac:a9:08:ab:79:17:79:c9:28:2b:3c:5e:fe:14:d6: 1f:f4:2a:6f:d4:8d:c2:20:b8:94:a6:f8:f7:78:1d: f7:0f:90:1b:74:34:5a:62:b5:68:78:1f:db:7a:d6: c8:37:c8:2b:62:01:f8:81:3e:f8:0d:0b:0d:6d:d7: c4:4d:65:f5:50:98:3a:d0:9b:65:80:a9:cf:5d:c7: 63:09:40:79:a1:0d:0e:f2:ce:f1:a0:d6:7c:0b:bb: ff:b2:e8:4e:bc:a6:4a:db:36:97:77:50:ac:95:58: 58:69:67:0a:b7:94:d1:17:35:ec:1f:79:01:b7:a7: e5:f1:dc:45:6c:2f:a7:83:62:f1:30:e0:53:ab:fc: 61:d9:03:20:30:6e:d6:5e:5d:1e:b2:b3:16:9e:25: 8c:55:db:1f:e8:6a:75:2f:a9:4d:f9:df:d3:49:e6: af:d1:96:2c:39:e4:f0:1c:de:0d:08:79:39:db:5c: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:86:52:2A:04:82:BB:F8:93:0B:64:C7:05:A7:DF:66:89:CD:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.crl X509v3 Authority Key Identifier: keyid:F7:EF:67:1B:30:26:9F:60:50:95:84:A7:EA:E6:DB:88:F4:7A:1B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer sbgp-ipAddrBlock: critical IPv4: 162.12.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ea:15:c9:32:54:d1:27:35:80:54:2c:df:d0:a2:d5:0a:c2: d8:a3:21:69:08:22:c5:53:20:2c:ba:ce:3e:89:e3:25:8e:c0: 9c:e5:55:86:c9:f5:d6:9c:77:c2:ae:9b:33:d7:2e:36:35:43: 03:1b:96:bc:b4:9c:47:c7:18:19:c3:c8:13:51:85:9f:08:0b: f0:d9:a5:ba:69:62:3f:a2:9e:37:0d:2d:39:dd:b3:eb:4a:b3: ba:43:5f:17:84:da:0d:1b:02:ef:97:92:60:f3:ca:f7:f9:c8: 2f:a8:d4:b8:34:07:d6:6d:00:56:17:34:12:09:ef:1e:e7:45: a9:fd:79:77:62:b4:b9:94:6b:fb:8e:8a:04:7c:bb:84:bd:ea: d6:fe:9e:82:d4:f3:aa:cb:0a:2b:2b:19:ae:10:d9:35:ef:c1: d0:bf:1e:79:36:b5:ca:1e:39:6a:23:a8:fc:f3:f3:a9:e9:92: ba:db:f5:6c:9d:28:0d:37:6d:9b:10:b5:1e:fb:f9:3f:ee:2f: fd:fc:f8:78:95:3a:ac:c4:5b:e4:5a:4a:05:87:f4:cf:31:65: 81:03:81:66:12:13:98:d7:14:28:1d:81:2a:41:d7:f5:f4:5d: 25:be:f0:4e:70:31:23:b0:08:42:02:fc:f1:ad:d7:ab:74:9e: e4:3c:69:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLC7p4KiUzsG+gwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIzYzcwYzYtNzU0Ni00ZjRmLWEyMmQtNjg3Yjk2YzI1 ZGUzMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk ZTgyYzFhMmMtOWFlNS00ZWQ0LWJkYzQtNjdlZjRkNjZlMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGyCrU4DW5IZlVZ/4VSilgJuz829bNzFOQww M8eHIHpXh5ba546cr8u08uTV9dZctNg1ycBcx2vxnQF5XC9DDvKMgvfZfbqd5WCs qQireRd5ySgrPF7+FNYf9Cpv1I3CILiUpvj3eB33D5AbdDRaYrVoeB/betbIN8gr YgH4gT74DQsNbdfETWX1UJg60JtlgKnPXcdjCUB5oQ0O8s7xoNZ8C7v/suhOvKZK 2zaXd1CslVhYaWcKt5TRFzXsH3kBt6fl8dxFbC+ng2LxMOBTq/xh2QMgMG7WXl0e srMWniWMVdsf6Gp1L6lN+d/TSeav0ZYsOeTwHN4NCHk521zsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnGhlIqBIK7+JMLZMcFp99mic27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YjNj NzBjNi03NTQ2LTRmNGYtYTIyZC02ODdiOTZjMjVkZTMvZGZhM2ViZDAtNzQ4OC0z MTE3LTg2Y2QtNTFmNWNkZjdlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWIzYzcwYzYtNzU0Ni00ZjRmLWEy MmQtNjg3Yjk2YzI1ZGUzLzliM2M3MGM2LTc1NDYtNGY0Zi1hMjJkLTY4N2I5NmMy NWRlMy5jcmwwHwYDVR0jBBgwFoAU9+9nGzAmn2BQlYSn6ubbiPR6G8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YjNjNzBjNi03NTQ2LTRmNGYtYTIyZC02ODdi OTZjMjVkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAogzZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfqFckyVNEnNYBULN/QotUKwtijIWkIIsVTICy6zj6J4yWOwJzlVYbJ 9dacd8KumzPXLjY1QwMblry0nEfHGBnDyBNRhZ8IC/DZpbppYj+injcNLTnds+tK s7pDXxeE2g0bAu+XkmDzyvf5yC+o1Lg0B9ZtAFYXNBIJ7x7nRan9eXditLmUa/uO igR8u4S96tb+noLU86rLCisrGa4Q2TXvwdC/Hnk2tcoeOWojqPzz86npkrrb9Wyd KA03bZsQtR77+T/uL/38+HiVOqzEW+RaSgWH9M8xZYEDgWYSE5jXFCgdgSpB1/X0 XSW+8E5wMSOwCEIC/PGt16t0nuQ8aTk= -----END CERTIFICATE-----Generated at Fri Jul 24 01:58:19 2026 by rpki-client