$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa File: 67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa (raw, json) Hash identifier: K1udhr4FE+b3D3r8UyPrhAn2FN8DF1hYY19xmwHKHl4= Subject key identifier: 5E:9E:87:D6:3F:B9:0A:F9:97:EA:C2:2F:AA:E0:02:45:66:B7:6E:B3 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F497419DC7DC7BD1921799400 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 162.210.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:19:dc:7d:c7:bd:19:21:79:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57800bd7-c36a-4178-99cb-c9f377abb1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:1e:d2:7d:da:4f:85:4a:b9:f6:c7:14:ac: 51:89:12:36:fc:b6:01:79:b4:1e:99:3d:21:ec:94: 90:0c:a0:9d:61:6a:80:58:d8:e5:d8:ac:18:54:e5: fc:83:2d:b1:b1:31:c3:d8:67:18:7d:8b:15:c2:9e: ea:80:91:b8:6d:6d:2a:8c:a1:e2:0f:7c:55:3c:76: 46:40:1d:57:85:cd:cd:1d:3c:7f:c9:e3:99:65:f8: c8:e4:24:29:ac:e0:c0:9e:11:c3:01:fc:02:8c:93: b3:02:7c:d6:dd:d8:21:9d:89:84:2f:70:60:5f:92: 31:d3:44:55:68:e3:31:50:01:d2:a0:dc:ba:52:cc: 0c:fe:44:a4:cc:96:23:b5:4f:68:c5:43:d9:00:0f: 8c:ae:7b:58:1b:a4:f9:c0:c7:25:cd:d0:00:b3:38: b9:04:b2:c2:c2:27:b1:b8:8c:79:2c:8e:cd:16:66: 4b:57:9a:bc:cd:c7:7d:07:b1:a9:e3:03:7a:2f:1e: ad:77:5b:6a:29:8a:5e:e3:fe:e0:1d:c1:34:1d:4a: 46:ad:ff:06:f6:ce:11:b2:5a:65:b9:6c:f4:02:2d: 21:29:1b:3a:65:15:f0:f1:64:80:6c:3b:21:e9:d6: ca:39:f8:51:e1:08:b9:2b:06:98:c3:88:6f:bd:bd: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9E:87:D6:3F:B9:0A:F9:97:EA:C2:2F:AA:E0:02:45:66:B7:6E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/67a9ce10-5f9a-3684-aca6-3f363e44e6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.210.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:46:c7:f6:b8:32:9a:70:28:f6:98:a3:25:fe:f8:1f:3c:cc: aa:fc:1d:41:2d:48:a2:eb:52:27:36:64:b5:44:a0:ec:74:4c: 2b:05:bc:b3:d8:8c:80:fd:db:48:62:2e:4f:43:7f:57:58:9b: 3e:7a:c5:8f:6c:7c:4c:1e:d4:4a:45:c2:28:45:b2:f4:62:7a: 34:3d:21:e6:b0:5a:99:69:b5:6c:95:13:09:63:c2:c1:c6:cd: 60:b5:b9:fb:39:3c:02:14:6f:86:02:d0:d4:6c:b8:97:96:5f: 4c:6f:b0:35:f6:bc:ff:e5:84:86:fd:cf:f9:7a:4a:4b:d3:07: 49:a5:68:a2:00:eb:09:22:be:02:29:9b:30:a6:e8:60:2c:73: de:c4:83:9e:7b:7d:2c:93:ef:96:53:03:c1:2d:a6:de:58:18: ba:de:35:20:be:7b:26:67:06:e8:7d:ce:65:0f:a2:87:f4:33: c1:0e:6f:5f:af:50:69:83:20:b7:1d:cd:a8:2a:3c:30:ff:ea: ed:5c:d5:64:01:d3:33:b2:8f:74:41:2e:7f:b3:74:71:4a:f7: c7:fc:8d:f4:4f:76:2a:6a:4d:a5:70:85:60:96:29:3f:90:99: 7c:42:f1:9f:45:2b:42:59:34:dd:0d:17:64:f0:96:9c:0c:63: 0d:e5:25:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBncfce9GSF5lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTc4MDBiZDctYzM2YS00MTc4LTk5Y2ItYzlmMzc3YWJiMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Ue0n3aT4VKufbHFKxRiRI2/LYBebQemT0h 7JSQDKCdYWqAWNjl2KwYVOX8gy2xsTHD2GcYfYsVwp7qgJG4bW0qjKHiD3xVPHZG QB1Xhc3NHTx/yeOZZfjI5CQprODAnhHDAfwCjJOzAnzW3dghnYmEL3BgX5Ix00RV aOMxUAHSoNy6UswM/kSkzJYjtU9oxUPZAA+MrntYG6T5wMclzdAAszi5BLLCwiex uIx5LI7NFmZLV5q8zcd9B7Gp4wN6Lx6td1tqKYpe4/7gHcE0HUpGrf8G9s4Rslpl uWz0Ai0hKRs6ZRXw8WSAbDsh6dbKOfhR4Qi5KwaYw4hvvb1G9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6eh9Y/uQr5l+rCL6rgAkVmt26zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvNjdhOWNlMTAtNWY5YS0z Njg0LWFjYTYtM2YzNjNlNDRlNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVGx/a4MppwKPaYoyX++B88zKr8HUEtSKLrUic2ZLVEoOx0TCsFvLPY jID920hiLk9Df1dYmz56xY9sfEwe1EpFwihFsvRiejQ9IeawWplptWyVEwljwsHG zWC1ufs5PAIUb4YC0NRsuJeWX0xvsDX2vP/lhIb9z/l6SkvTB0mlaKIA6wkivgIp mzCm6GAsc97Eg557fSyT75ZTA8Etpt5YGLreNSC+eyZnBuh9zmUPoof0M8EOb1+v UGmDILcdzagqPDD/6u1c1WQB0zOyj3RBLn+zdHFK98f8jfRPdipqTaVwhWCWKT+Q mXxC8Z9FK0JZNN0NF2TwlpwMYw3lJdE= -----END CERTIFICATE-----Generated at Sun Oct 11 17:55:14 2026 by rpki-client