$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa File: 483d1de4-9ec0-336b-a09e-53bda41f9515.roa (raw, json) Hash identifier: zrwOEZwrP0L/O+8PJ7rVVe6Jiry/F0SEjn9mgmUjM/o= Subject key identifier: 60:E2:9F:52:E8:66:21:C6:A1:7C:E6:AC:BD:EC:C8:7B:0F:0A:E2:21 Certificate issuer: /CN=ca63f656-6be5-42a9-ad64-85773747152a Certificate serial: 010D0C9F4328584F374D2090F35CEF3D0F0F68E0 Authority key identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 14041 IP address blocks: 161.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:20:90:f3:5c:ef:3d:0f:0f:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca63f656-6be5-42a9-ad64-85773747152a Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=c4091d2b-9660-4163-a0bd-434fedc95749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:c8:18:93:9a:da:cb:58:fd:e0:ae:50:b7: 62:ff:1c:50:08:8d:be:e4:4b:95:62:05:5d:d8:08: 7d:4c:cb:46:ae:29:5c:94:b6:3a:4c:5d:ea:89:89: f8:90:6c:6b:9e:6b:9c:5f:90:cb:59:93:15:5d:87: b9:c3:3b:23:43:c5:bf:48:60:0d:ec:0c:bd:7b:cd: 89:7b:fd:48:64:f4:49:25:aa:99:c8:ba:96:b6:8a: 9a:5c:96:07:6c:7d:59:d4:04:c5:94:f3:9d:4b:7b: f3:51:90:b6:82:11:ff:e5:00:ec:d1:4f:b2:b2:6e: 85:a1:65:11:53:f4:28:ba:21:bb:c7:bd:84:b5:03: 2a:fb:1c:15:0e:dd:32:aa:c2:3c:a3:36:35:8c:4c: 7b:e4:cc:b4:ef:1a:ac:16:60:cb:3d:7f:29:7a:be: cd:bf:97:bf:f2:a6:57:0e:b7:84:b5:ec:41:c7:40: 0a:d3:5f:dd:d9:34:49:04:df:9f:d6:6f:2f:26:bd: f0:c8:e2:01:e7:18:36:c0:5c:2f:c3:ba:db:58:2e: 15:b9:99:89:23:dd:d9:31:68:44:6f:22:a2:03:85: 4e:9a:f5:e5:39:22:9c:85:85:46:8c:99:b8:da:cc: 3b:97:d0:03:21:b3:75:66:f3:69:54:ed:77:04:72: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:9F:52:E8:66:21:C6:A1:7C:E6:AC:BD:EC:C8:7B:0F:0A:E2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl X509v3 Authority Key Identifier: keyid:B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer sbgp-ipAddrBlock: critical IPv4: 161.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d2:58:65:42:49:9f:7e:5d:50:24:c7:be:f5:ac:f8:96:bf: 9c:42:eb:cb:e1:ea:fe:e3:9e:21:f1:a2:2c:9f:25:54:d0:ab: 1c:3c:1a:f7:ed:20:16:08:83:ff:53:5e:6f:a3:3f:dc:11:0e: e4:d3:6b:83:4d:62:d8:27:ea:33:a6:d4:90:d5:12:e1:55:6f: 16:1a:9b:bc:9d:09:1e:40:b7:53:88:30:8a:a8:c4:1a:69:3f: f1:33:a4:e4:44:13:0d:4a:88:b1:ca:06:71:aa:3f:1a:a5:f1: cc:54:df:19:e0:4e:32:97:d4:56:4a:d7:70:1e:71:88:8d:eb: 11:bb:fb:bb:56:a3:38:c2:99:b8:04:dc:e9:4a:3e:26:32:ae: 1f:5c:a0:95:66:30:e1:c5:05:71:ad:0e:90:64:78:7c:33:20: b0:16:cc:02:3b:22:a8:03:12:7f:77:ac:cf:4f:78:c9:5b:80: 3a:4f:69:79:09:47:a4:f3:45:19:7a:7a:58:4f:78:a4:66:cd: c5:0e:f8:cd:23:5c:5d:ae:e8:da:09:79:78:a3:32:02:b8:e6: 5a:cf:78:e4:0e:9f:c9:26:ab:de:ec:0d:90:2f:95:11:08:cc: 44:f6:da:c2:c0:7b:59:47:8b:5f:f6:0f:a3:7b:d8:98:39:37: b4:33:47:60 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE83TSCQ81zvPQ8PaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E2M2Y2NTYtNmJlNS00MmE5LWFkNjQtODU3NzM3NDcx NTJhMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YzQwOTFkMmItOTY2MC00MTYzLWEwYmQtNDM0ZmVkYzk1NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhjIGJOa2stY/eCuULdi/xxQCI2+5EuVYgVd 2Ah9TMtGrilclLY6TF3qiYn4kGxrnmucX5DLWZMVXYe5wzsjQ8W/SGAN7Ay9e82J e/1IZPRJJaqZyLqWtoqaXJYHbH1Z1ATFlPOdS3vzUZC2ghH/5QDs0U+ysm6FoWUR U/QouiG7x72EtQMq+xwVDt0yqsI8ozY1jEx75My07xqsFmDLPX8per7Nv5e/8qZX DreEtexBx0AK01/d2TRJBN+f1m8vJr3wyOIB5xg2wFwvw7rbWC4VuZmJI93ZMWhE byKiA4VOmvXlOSKchYVGjJm42sw7l9ADIbN1ZvNpVO13BHKwXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGDin1LoZiHGoXzmrL3syHsPCuIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYz ZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3Mzc0NzE1MmEvNDgzZDFkZTQtOWVjMC0z MzZiLWEwOWUtNTNiZGE0MWY5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E2M2Y2NTYtNmJlNS00MmE5LWFk NjQtODU3NzM3NDcxNTJhL2NhNjNmNjU2LTZiZTUtNDJhOS1hZDY0LTg1NzczNzQ3 MTUyYS5jcmwwHwYDVR0jBBgwFoAUsh/nXonJdkzHOyoUaSlUPCvuJEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYzZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3 Mzc0NzE1MmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoWIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAY9JYZUJJn35dUCTHvvWs+Ja/nELry+Hq/uOeIfGiLJ8lVNCrHDwa9+0g FgiD/1Neb6M/3BEO5NNrg01i2CfqM6bUkNUS4VVvFhqbvJ0JHkC3U4gwiqjEGmk/ 8TOk5EQTDUqIscoGcao/GqXxzFTfGeBOMpfUVkrXcB5xiI3rEbv7u1ajOMKZuATc 6Uo+JjKuH1yglWYw4cUFca0OkGR4fDMgsBbMAjsiqAMSf3esz094yVuAOk9peQlH pPNFGXp6WE94pGbNxQ74zSNcXa7o2gl5eKMyArjmWs945A6fySar3uwNkC+VEQjM RPbawsB7WUeLX/YPo3vYmDk3tDNHYA== -----END CERTIFICATE-----Generated at Sun Sep 20 13:10:04 2026 by rpki-client