$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/4ffc80e8-2513-39a2-8ca0-02a97d75f2f8.roa File: 4ffc80e8-2513-39a2-8ca0-02a97d75f2f8.roa (raw, json) Hash identifier: X/KBmSvBqcZpPrzL+Dwa7IKv+V3+RHILrYu/zvRjACU= Subject key identifier: 32:48:CB:28:76:C8:9B:7D:48:70:02:30:D1:FE:64:B4:21:5A:A1:96 Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584F45797EB71D0DF16815E2E8C0 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/4ffc80e8-2513-39a2-8ca0-02a97d75f2f8.roa Signing time: Wed 23 Sep 2026 14:51:01 +0000 ROA not before: Wed 23 Sep 2026 14:51:01 +0000 ROA not after: Tue 22 Dec 2026 15:51:01 +0000 asID: 401016 IP address blocks: 162.251.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:79:7e:b7:1d:0d:f1:68:15:e2:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Sep 23 14:51:01 2026 GMT Not After : Dec 22 15:51:01 2026 GMT Subject: CN=f4a8d7e9-febe-4cd1-9cea-657b5c0da6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:ef:36:dc:2b:fd:66:6e:0b:0e:44:48:09: e9:e5:56:ed:91:90:b1:70:bf:b1:2d:96:23:aa:ca: 73:d5:3c:32:a7:4f:8c:a1:31:70:8a:4e:cc:3d:12: 4b:a0:8c:b0:0a:3d:05:23:89:e9:28:63:96:c6:db: b2:79:e3:29:cb:b6:3b:0a:70:f0:3c:fe:d5:af:73: aa:ac:78:62:32:7d:00:16:fd:d7:06:bd:27:09:a8: 55:82:3c:e1:2c:0f:c8:8d:f8:35:9f:47:b6:c2:2f: 8c:16:97:ce:de:69:13:da:4d:a1:36:3f:ac:87:c5: 23:f5:7a:f1:46:6b:6e:ad:c2:d7:2d:84:0c:c3:6c: ab:3b:ba:ae:26:77:b3:c1:65:77:7d:a1:8b:4e:a4: 08:75:a4:10:f6:5f:9b:75:b1:b1:8c:e6:83:d4:f3: 35:7f:a0:f3:66:a6:81:b3:50:fc:cc:e1:93:ef:3b: 08:3c:57:0e:24:44:03:e3:b8:13:56:bd:1f:2b:15: 19:de:f7:94:d4:a6:5d:73:fc:27:d0:af:15:74:d5: f7:85:ce:27:a6:61:34:63:03:35:86:bf:18:cf:7f: 26:49:5c:41:48:eb:4d:a4:e1:60:3c:4e:1f:93:28: d1:68:bd:44:5a:fc:bc:a8:da:a9:3c:e4:a5:28:a4: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:48:CB:28:76:C8:9B:7D:48:70:02:30:D1:FE:64:B4:21:5A:A1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/4ffc80e8-2513-39a2-8ca0-02a97d75f2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.251.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:db:d3:74:71:3c:9b:10:3b:8c:51:9d:89:da:a6:0e:a9:61: ab:1c:0b:e2:30:30:6c:62:f5:a4:c2:7d:a8:1e:99:38:d2:f5: 27:14:a4:3a:d7:d8:a8:eb:c7:99:12:6a:29:60:af:78:c6:07: 05:c3:92:46:8f:ee:5d:30:dd:32:b0:b9:a2:bb:37:e5:27:5b: 9f:3f:37:f2:da:2b:0b:ef:00:d2:1e:c4:c1:e8:51:86:b7:74: ad:ef:70:b2:a6:43:fc:c2:e3:02:94:bb:e6:f2:cc:03:eb:6f: f3:52:7f:16:bb:6b:80:3b:ef:f1:a0:dc:7c:93:04:ce:db:48: 7b:e4:04:82:ec:36:28:b4:ab:07:f9:37:98:12:7b:82:14:6d: b5:0a:42:bd:11:86:e5:25:e3:68:a3:7f:4a:b8:77:7b:1a:7a: 69:18:e5:b9:78:59:cc:d7:b8:9e:2f:b7:fd:5b:a7:b5:c6:d8: 77:0a:a7:e9:25:28:37:a3:78:81:5b:e6:ba:05:91:e8:e9:1f: 00:7e:93:54:39:70:29:62:ef:d3:e7:5e:83:33:1e:ce:1b:dc: 00:8b:9b:2b:fc:43:a5:f4:a4:9c:f0:8e:17:5f:71:c1:a8:a2: ab:2e:9c:5a:b4:11:e1:2e:71:59:7e:59:ea:0d:44:e5:24:07: ff:a9:5a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FeX63HQ3xaBXi6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI2MDkyMzE0NTEwMVoXDTI2MTIyMjE1NTEwMVowLzEtMCsGA1UEAxMk ZjRhOGQ3ZTktZmViZS00Y2QxLTljZWEtNjU3YjVjMGRhNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS/vNtwr/WZuCw5ESAnp5VbtkZCxcL+xLZYj qspz1Twyp0+MoTFwik7MPRJLoIywCj0FI4npKGOWxtuyeeMpy7Y7CnDwPP7Vr3Oq rHhiMn0AFv3XBr0nCahVgjzhLA/Ijfg1n0e2wi+MFpfO3mkT2k2hNj+sh8Uj9Xrx RmturcLXLYQMw2yrO7quJnezwWV3faGLTqQIdaQQ9l+bdbGxjOaD1PM1f6DzZqaB s1D8zOGT7zsIPFcOJEQD47gTVr0fKxUZ3veU1KZdc/wn0K8VdNX3hc4npmE0YwM1 hr8Yz38mSVxBSOtNpOFgPE4fkyjRaL1EWvy8qNqpPOSlKKQzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJIyyh2yJt9SHACMNH+ZLQhWqGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvNGZmYzgwZTgtMjUxMy0z OWEyLThjYTAtMDJhOTdkNzVmMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvb03RxPJsQO4xRnYnapg6pYascC+IwMGxi9aTCfagemTjS9ScUpDrX 2Kjrx5kSailgr3jGBwXDkkaP7l0w3TKwuaK7N+UnW58/N/LaKwvvANIexMHoUYa3 dK3vcLKmQ/zC4wKUu+byzAPrb/NSfxa7a4A77/Gg3HyTBM7bSHvkBILsNii0qwf5 N5gSe4IUbbUKQr0RhuUl42ijf0q4d3saemkY5bl4WczXuJ4vt/1bp7XG2HcKp+kl KDejeIFb5roFkejpHwB+k1Q5cCli79PnXoMzHs4b3ACLmyv8Q6X0pJzwjhdfccGo oqsunFq0EeEucVl+WeoNROUkB/+pWj8= -----END CERTIFICATE-----Generated at Sun Sep 27 02:45:44 2026 by rpki-client