$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa File: ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa (raw, json) Hash identifier: bYpEFMcOrq6QikyhPYRFMQo9nqS9DeCxpGaiYhgyQBo= Subject key identifier: E5:69:01:D9:A6:02:C7:57:0A:C3:1D:14:DC:2A:0B:9D:16:07:0A:6D Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584F173246848DFDC1B0EB855746 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 27395 IP address blocks: 162.248.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:46:84:8d:fd:c1:b0:eb:85:57:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=4c4b1be2-0fe6-48f4-a1ec-29e84efc9010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:5d:44:bc:05:0f:16:73:fe:2b:b4:d5:5a: 6b:3a:53:0a:88:47:e2:0f:20:d6:ec:22:79:2c:c3: c5:95:36:54:b2:4d:38:db:f3:f2:7a:89:5a:63:b9: 7c:11:a3:94:47:fa:cd:ac:f8:9a:17:e0:c1:8e:24: bd:66:57:b3:57:a8:c3:2e:89:eb:e1:ae:6b:e3:89: d6:7b:8d:47:a1:3d:60:d4:9e:bc:df:0c:eb:89:1a: d2:bd:f4:56:fe:e8:1f:cb:bf:d6:0b:a1:ae:81:9f: 94:8f:bb:b7:1b:fc:3e:f9:e6:f2:24:09:90:33:f5: d5:cb:3f:6e:69:3d:55:b6:15:79:43:d8:e8:1b:e6: ec:54:40:50:ac:10:eb:88:bf:4e:6f:21:98:66:83: a3:f1:52:06:ec:bb:66:a7:14:e0:97:75:3a:fa:36: c0:f0:4b:e5:cc:5b:85:64:26:77:29:91:06:53:15: dc:6c:39:63:6b:0d:00:07:08:49:66:fd:b0:cc:35: 63:d0:bb:32:d2:79:39:f3:14:cf:d8:24:97:c1:11: 4d:ea:f1:6b:de:d5:26:8e:c7:9a:b8:d8:7a:33:9c: b1:86:6b:c4:0c:79:e8:83:18:24:ce:b4:57:be:59: df:dd:55:50:ff:71:34:89:94:c1:cd:7f:6e:80:4e: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:69:01:D9:A6:02:C7:57:0A:C3:1D:14:DC:2A:0B:9D:16:07:0A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1d:5f:64:82:0c:49:8f:48:c0:16:c8:b6:44:f3:80:88:24: d6:cb:4a:d6:f0:95:7a:69:53:a9:9b:75:80:eb:e7:9f:cd:35: c3:9b:0e:c1:88:6d:57:34:5e:35:fa:cc:be:03:42:e2:3d:c5: 71:16:5b:70:17:c5:c8:8c:03:18:93:08:57:b5:98:ba:6f:42: 28:5e:62:03:e5:70:c3:b7:b6:fd:18:a9:6e:8d:77:35:85:07: 59:cb:b6:3e:41:7b:03:61:1c:ea:0e:35:ad:ad:6a:d7:1f:74: 58:18:f6:34:9d:f3:d7:ec:69:92:bd:d5:3e:45:35:ed:b6:a8: 0b:7b:29:0a:1b:2e:51:90:a5:ab:61:12:7b:0c:5b:51:c0:64: cb:b0:1a:dc:35:6d:24:b2:2e:04:f5:9d:a9:b7:3f:81:d7:6a: 81:05:4f:7b:2b:ee:21:0d:8a:3a:51:65:74:64:dd:fd:18:67: 65:be:a8:93:ec:56:04:c4:fd:cf:cf:4c:72:ac:eb:f5:78:d8: 40:0c:07:20:c7:ce:d7:8f:98:59:d1:2a:5c:19:7d:10:02:e4: 4c:88:70:43:54:f2:39:4a:17:51:00:c7:ca:9b:c8:28:f3:69: e2:c8:2a:4a:2b:3b:42:59:7e:f0:37:19:ca:4d:cb:4b:e0:31: 44:22:aa:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkaEjf3BsOuFV0YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NGM0YjFiZTItMGZlNi00OGY0LWExZWMtMjllODRlZmM5MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNBdRLwFDxZz/iu01VprOlMKiEfiDyDW7CJ5 LMPFlTZUsk042/PyeolaY7l8EaOUR/rNrPiaF+DBjiS9ZlezV6jDLonr4a5r44nW e41HoT1g1J683wzriRrSvfRW/ugfy7/WC6GugZ+Uj7u3G/w++ebyJAmQM/XVyz9u aT1VthV5Q9joG+bsVEBQrBDriL9ObyGYZoOj8VIG7LtmpxTgl3U6+jbA8EvlzFuF ZCZ3KZEGUxXcbDljaw0ABwhJZv2wzDVj0Lsy0nk58xTP2CSXwRFN6vFr3tUmjsea uNh6M5yxhmvEDHnogxgkzrRXvlnf3VVQ/3E0iZTBzX9ugE5qrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVpAdmmAsdXCsMdFNwqC50WBwptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvY2ExNDRhMGUtZTgyYy0z NTEyLWIxMTEtOTlmNTRmZmQzYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcdX2SCDEmPSMAWyLZE84CIJNbLStbwlXppU6mbdYDr55/NNcObDsGI bVc0XjX6zL4DQuI9xXEWW3AXxciMAxiTCFe1mLpvQiheYgPlcMO3tv0YqW6NdzWF B1nLtj5BewNhHOoONa2tatcfdFgY9jSd89fsaZK91T5FNe22qAt7KQobLlGQpath EnsMW1HAZMuwGtw1bSSyLgT1nam3P4HXaoEFT3sr7iENijpRZXRk3f0YZ2W+qJPs VgTE/c/PTHKs6/V42EAMByDHztePmFnRKlwZfRAC5EyIcENU8jlKF1EAx8qbyCjz aeLIKkorO0JZfvA3GcpNy0vgMUQiqko= -----END CERTIFICATE-----Generated at Tue Sep 22 05:48:53 2026 by rpki-client