$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/71bf7c9e-90ad-3399-88e6-8505ecf3a8fa.roa File: 71bf7c9e-90ad-3399-88e6-8505ecf3a8fa.roa (raw, json) Hash identifier: DywnJTgnSJsUlFUYrVJvgbIV1JGw9FlRcI8r5G76iyE= Subject key identifier: E6:FF:18:59:62:73:34:BC:21:FA:63:9B:52:B3:CE:AD:B1:D0:96:76 Certificate issuer: /CN=a665cb61-7028-4565-8deb-5c2df54ff766 Certificate serial: 010D0C9F4328584F41127B89EF6D65E02F690380 Authority key identifier: AF:08:8A:77:B2:E1:46:2C:F8:00:76:22:CE:25:2A:1B:74:A6:F4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/71bf7c9e-90ad-3399-88e6-8505ecf3a8fa.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 11738 IP address blocks: 163.123.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:7b:89:ef:6d:65:e0:2f:69:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a665cb61-7028-4565-8deb-5c2df54ff766 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=5eef234b-0b31-447c-86a5-2c9bf4f1312c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:d2:cc:ea:00:c3:a8:ea:5e:f4:a6:87:56: b9:df:0b:1c:11:0b:b2:33:48:10:a5:21:bf:82:5c: 1e:21:4b:cb:f9:38:25:88:72:ff:e8:77:4c:c8:e3: cc:52:87:7c:3b:f9:4e:6e:ad:32:8e:36:a2:fd:72: 24:1d:df:96:82:34:b1:3f:79:23:87:c6:50:71:a7: c4:71:6a:9c:1f:da:58:08:eb:7d:26:79:5e:7d:11: 0f:a8:8a:c0:89:28:f9:51:81:a9:73:45:c0:3f:f5: 00:62:2d:9f:03:a0:74:b7:e6:c8:87:ca:ae:8e:82: cd:64:da:e6:26:0c:18:96:f5:2e:ea:f7:d1:60:67: 98:c9:7c:1e:1b:6f:18:4b:10:d0:4d:c3:3b:9a:2a: a8:21:41:5c:7a:ce:9a:55:e1:de:f3:a7:7a:6d:27: 7d:f0:df:c0:37:51:48:0f:cb:63:fc:21:31:83:81: a1:3c:02:b2:b3:ef:03:98:ea:dd:d0:4e:91:50:e2: 43:b5:38:ed:8c:22:66:2f:53:ae:84:64:12:11:15: 8c:7d:86:a2:34:8f:aa:c5:a6:a6:87:5a:65:e1:4b: 94:97:81:ec:64:9b:f6:b9:2d:62:98:62:3e:7d:44: 12:f3:94:b6:a3:6a:38:75:71:8b:42:60:a4:8b:31: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:18:59:62:73:34:BC:21:FA:63:9B:52:B3:CE:AD:B1:D0:96:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/71bf7c9e-90ad-3399-88e6-8505ecf3a8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.crl X509v3 Authority Key Identifier: keyid:AF:08:8A:77:B2:E1:46:2C:F8:00:76:22:CE:25:2A:1B:74:A6:F4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer sbgp-ipAddrBlock: critical IPv4: 163.123.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:30:67:d6:e4:4e:20:25:70:58:8f:d4:40:f7:13:4e:ba: 74:16:ec:10:42:5f:44:22:a3:37:5f:67:dd:16:d4:ba:30:1a: 07:ac:b2:d9:fe:31:aa:de:6c:af:53:bf:7f:cf:95:db:33:14: a1:3c:06:28:02:90:5a:f7:5c:e7:ec:e0:ef:ac:9a:a1:cc:d5: c5:7e:a5:54:4a:b2:c5:4d:aa:c8:be:d1:ac:77:5c:3f:32:43: b4:31:49:90:78:d9:86:67:c4:11:dd:5f:10:75:cf:22:57:02: d4:40:7b:a8:6a:17:57:8e:fc:1f:71:cf:bd:47:e2:f0:fe:2d: 6c:fe:83:42:c0:26:e6:83:1c:c5:b5:89:98:f7:a4:e3:ac:d3: 96:aa:8b:31:aa:42:a6:cd:bf:f2:8e:7c:8c:5f:a0:6d:61:6e: 7c:e0:02:00:09:0f:92:85:ad:d8:58:9b:9b:6a:44:f9:80:43: 23:ca:c0:3b:33:ac:ce:ee:b4:d1:2b:6d:be:5d:90:05:37:75: 29:df:2b:4d:d7:76:aa:40:b1:0f:ac:d4:c7:eb:f6:0e:b2:a4: bb:a6:ce:78:cc:11:0a:20:1c:19:18:5f:89:f3:42:85:cf:81: 04:b9:f3:2d:75:f8:3a:34:ed:80:07:3b:d9:72:80:d2:5c:2b: e8:76:60:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEnuJ721l4C9pA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2NWNiNjEtNzAyOC00NTY1LThkZWItNWMyZGY1NGZm NzY2MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NWVlZjIzNGItMGIzMS00NDdjLTg2YTUtMmM5YmY0ZjEzMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNXSzOoAw6jqXvSmh1a53wscEQuyM0gQpSG/ glweIUvL+TgliHL/6HdMyOPMUod8O/lObq0yjjai/XIkHd+WgjSxP3kjh8ZQcafE cWqcH9pYCOt9JnlefREPqIrAiSj5UYGpc0XAP/UAYi2fA6B0t+bIh8qujoLNZNrm JgwYlvUu6vfRYGeYyXweG28YSxDQTcM7miqoIUFces6aVeHe86d6bSd98N/AN1FI D8tj/CExg4GhPAKys+8DmOrd0E6RUOJDtTjtjCJmL1OuhGQSERWMfYaiNI+qxaam h1pl4UuUl4HsZJv2uS1imGI+fUQS85S2o2o4dXGLQmCkizFoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb/GFliczS8Ifpjm1Kzzq2x0JZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hNjY1 Y2I2MS03MDI4LTQ1NjUtOGRlYi01YzJkZjU0ZmY3NjYvNzFiZjdjOWUtOTBhZC0z Mzk5LTg4ZTYtODUwNWVjZjNhOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTY2NWNiNjEtNzAyOC00NTY1LThk ZWItNWMyZGY1NGZmNzY2L2E2NjVjYjYxLTcwMjgtNDU2NS04ZGViLTVjMmRmNTRm Zjc2Ni5jcmwwHwYDVR0jBBgwFoAUrwiKd7LhRiz4AHYiziUqG3Sm9BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hNjY1Y2I2MS03MDI4LTQ1NjUtOGRlYi01YzJk ZjU0ZmY3NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXbMGfW5E4gJXBYj9RA9xNOunQW7BBCX0QiozdfZ90W1LowGgesstn+ MarebK9Tv3/PldszFKE8BigCkFr3XOfs4O+smqHM1cV+pVRKssVNqsi+0ax3XD8y Q7QxSZB42YZnxBHdXxB1zyJXAtRAe6hqF1eO/B9xz71H4vD+LWz+g0LAJuaDHMW1 iZj3pOOs05aqizGqQqbNv/KOfIxfoG1hbnzgAgAJD5KFrdhYm5tqRPmAQyPKwDsz rM7utNErbb5dkAU3dSnfK03XdqpAsQ+s1Mfr9g6ypLumznjMEQogHBkYX4nzQoXP gQS58y11+Do07YAHO9lygNJcK+h2YCM= -----END CERTIFICATE-----Generated at Sun Sep 27 03:25:35 2026 by rpki-client