$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa File: cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa (raw, json) Hash identifier: vNDLVAxGL+xAhhjNvwuRn/dRr1BLcVFWUa/cmGXKthc= Subject key identifier: E8:8D:F3:02:26:EA:99:F9:DA:F6:14:3F:9F:9E:CC:F0:11:E7:DE:B9 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F497298ACD491A89DDDBFAB00 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26337 IP address blocks: 162.251.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:98:ac:d4:91:a8:9d:dd:bf:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec2a3902-f9b8-4848-a20a-9c0a5a9ed89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:5f:03:0d:af:f9:9d:39:04:a0:58:f9:29: 08:b8:45:be:80:d4:6f:9e:ab:de:ad:e7:cd:c8:58: f4:8f:1a:b8:41:f3:19:ed:94:b2:e6:66:f3:64:68: 1d:21:4b:f1:ee:93:2d:b8:06:37:bc:14:f2:6e:05: 68:c6:09:ed:a6:8e:87:63:3e:d8:79:02:28:35:25: b8:dd:12:93:78:ed:be:da:16:0c:b5:7b:b0:93:e8: 90:85:00:d7:d5:1a:77:2f:d2:14:4c:8a:b6:10:b9: 8e:b7:01:9e:9d:e3:a5:17:83:43:4b:07:45:8b:ae: 5e:76:05:1f:69:38:fe:a3:aa:38:76:09:39:eb:08: 4d:86:40:da:02:b8:5a:c1:34:bd:3e:ea:b1:8a:33: 72:9d:2d:e0:3a:ed:76:00:b5:bc:c1:97:c3:43:90: 43:52:b0:51:92:f1:b7:8c:5c:48:78:68:5e:6c:a9: 69:c7:44:4f:d8:6c:12:5e:7a:e8:80:a3:81:45:89: 84:30:c3:15:55:5a:46:99:41:59:92:a9:92:7b:29: 74:5e:9f:cc:9a:0d:cb:ff:91:47:07:ea:83:d3:7d: 46:e5:6d:0c:9c:bf:96:c7:4f:d4:48:e1:9e:86:34: da:ff:fd:2a:47:6f:58:c0:b2:81:a9:71:2b:d8:17: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8D:F3:02:26:EA:99:F9:DA:F6:14:3F:9F:9E:CC:F0:11:E7:DE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.251.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:47:30:34:c7:e0:a2:84:a7:c1:7a:5d:b6:0d:74:a0:b3:b9: bc:91:d2:54:a1:bf:f8:1c:bd:b1:f4:54:5e:88:dd:dc:35:0d: ae:54:eb:7f:6f:79:96:17:76:3d:00:bb:0e:80:f5:45:b5:f0: 86:4c:c0:54:50:b6:5d:1c:45:01:7b:1e:f0:ef:63:6d:06:01: f3:c8:2d:67:96:8b:47:d5:f7:25:5a:c4:41:48:25:eb:93:c5: f0:50:aa:38:4f:8d:ad:a1:5c:b7:44:a2:e7:34:95:c2:ef:fd: 57:a1:7a:07:c3:e8:c0:44:fb:f1:04:ff:2e:6e:1b:60:3b:44: 1c:e9:67:db:b0:95:93:08:a1:02:1d:d0:8c:56:1c:75:ac:1d: 4f:51:5a:6e:ae:b1:2a:85:8d:34:81:19:89:61:3e:e1:60:78: ae:17:77:d6:02:89:36:09:cf:1e:33:eb:3d:7a:cd:55:23:ce: b8:3b:17:3c:e3:3a:da:1c:01:6d:a1:da:db:22:5b:4d:7a:a3: 8c:40:fd:39:0f:45:fc:38:7c:18:57:89:d0:ba:28:64:7b:26: a2:9e:0e:d9:65:7f:30:2c:14:d5:04:a5:89:fe:2f:65:3a:b0: 0e:44:e9:3c:02:ef:09:d4:32:01:23:66:d6:08:04:e5:35:76: 18:1d:89:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcpis1JGond2/qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWMyYTM5MDItZjliOC00ODQ4LWEyMGEtOWMwYTVhOWVkODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM9fAw2v+Z05BKBY+SkIuEW+gNRvnqverefN yFj0jxq4QfMZ7ZSy5mbzZGgdIUvx7pMtuAY3vBTybgVoxgntpo6HYz7YeQIoNSW4 3RKTeO2+2hYMtXuwk+iQhQDX1Rp3L9IUTIq2ELmOtwGeneOlF4NDSwdFi65edgUf aTj+o6o4dgk56whNhkDaArhawTS9PuqxijNynS3gOu12ALW8wZfDQ5BDUrBRkvG3 jFxIeGhebKlpx0RP2GwSXnrogKOBRYmEMMMVVVpGmUFZkqmSeyl0Xp/Mmg3L/5FH B+qD031G5W0MnL+Wx0/USOGehjTa//0qR29YwLKBqXEr2BdVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiN8wIm6pn52vYUP5+ezPAR5965MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvY2MwNjJhMzgtODk3Yi0z Y2NlLTljYTUtNGUzM2M4YTFiMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtHMDTH4KKEp8F6XbYNdKCzubyR0lShv/gcvbH0VF6I3dw1Da5U639v eZYXdj0Auw6A9UW18IZMwFRQtl0cRQF7HvDvY20GAfPILWeWi0fV9yVaxEFIJeuT xfBQqjhPja2hXLdEouc0lcLv/VehegfD6MBE+/EE/y5uG2A7RBzpZ9uwlZMIoQId 0IxWHHWsHU9RWm6usSqFjTSBGYlhPuFgeK4Xd9YCiTYJzx4z6z16zVUjzrg7Fzzj OtocAW2h2tsiW016o4xA/TkPRfw4fBhXidC6KGR7JqKeDtllfzAsFNUEpYn+L2U6 sA5E6TwC7wnUMgEjZtYIBOU1dhgdias= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:23 2026 by rpki-client