$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa File: 77249fb6-3491-3c4a-b600-9e887b42f36b.roa (raw, json) Hash identifier: a77VhTE1DDhG+Jx0GgVGEOMB6A9QoWzChQ8KKV5P15w= Subject key identifier: 0E:C0:48:A7:AB:95:33:25:AF:15:CD:8E:0D:F8:1D:EF:A5:CD:46:EA Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584F20F7AA5BDBC6F4585EB8F400 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 62856 IP address blocks: 162.248.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:aa:5b:db:c6:f4:58:5e:b8:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2aa9cbd1-88bc-4e58-8c79-c05d292dc0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:69:43:05:ba:98:0c:f1:27:be:45:0b:bd: 52:67:15:29:c7:4d:e4:2b:3b:2e:f5:0b:56:39:85: db:b6:b6:fb:5e:ba:cb:18:ce:e4:7f:18:55:04:d1: 18:12:b1:94:b7:67:38:fe:c8:73:e5:f3:15:96:72: ec:9f:ab:c8:94:01:e3:1f:94:86:81:a3:fb:a3:52: 5e:03:59:e3:ac:b9:7a:62:0a:47:15:ad:49:a1:f6: 2d:da:a1:45:df:0a:e3:8b:dd:9d:d6:f9:18:3b:55: 72:17:4b:6c:0b:3c:79:80:f6:d3:5f:ed:ac:a5:54: a9:26:a6:f4:22:3c:89:b8:30:6d:32:27:3a:7f:0e: a8:be:da:b3:d1:a7:28:0d:4c:9d:49:49:7f:8f:54: 22:7b:35:ce:74:99:11:81:9a:1c:06:d3:bc:45:57: 1e:f7:79:c9:6e:a3:c8:b0:65:2f:82:fc:f9:a1:c5: f6:aa:94:01:73:b4:ac:c1:93:0f:f2:32:f8:e0:7d: 38:a5:06:76:aa:71:77:ca:c1:d1:6c:3d:64:2c:be: 10:c7:c6:04:de:67:2a:3d:de:b5:65:78:68:bd:bc: 50:e3:5e:17:6b:69:20:23:85:dc:97:0f:a7:a1:7c: 12:6e:d7:df:51:6a:14:9a:c1:f3:2b:6d:45:29:4b: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C0:48:A7:AB:95:33:25:AF:15:CD:8E:0D:F8:1D:EF:A5:CD:46:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 162.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7a:b6:4e:a8:5b:69:35:64:e3:83:0c:b4:cf:4b:9b:df:b0: 6c:bd:cd:98:a8:32:62:bd:57:67:ea:0f:71:1c:10:ae:15:91: eb:24:26:61:1e:04:b9:ea:a8:60:6b:0d:eb:70:52:2f:f7:8f: 2d:77:7e:a5:5e:7a:2f:90:ab:44:81:55:0f:09:bf:0e:87:90: f0:a0:51:3c:9b:e6:e8:01:dd:44:a7:b0:c3:3c:3e:bd:8b:07: 21:51:72:fd:c7:80:b6:c6:c5:f6:c6:9a:e7:96:05:f2:0c:5c: 61:5b:3e:e6:2b:e0:5f:f2:d4:a3:06:00:ff:ed:94:72:3b:de: c3:88:4d:e7:01:73:e7:f7:1b:3f:06:7d:3c:e8:87:07:50:6d: 69:c1:c3:59:12:f6:95:bb:32:ae:47:76:a6:d2:3a:c3:94:28: 9b:43:d6:23:65:bf:6a:50:cc:ec:5d:09:c6:c0:d5:8d:a5:89: af:b1:d9:4d:f5:e6:b8:42:6b:3d:22:38:1e:75:67:2c:79:c0: fc:9b:d8:72:e9:a9:53:ce:7b:ba:30:a5:19:51:19:4f:9d:4e: 02:05:26:cf:b2:f5:3b:a0:10:55:e5:a2:37:c0:67:a7:e4:f1: 4f:82:7f:eb:8d:3b:ba:30:e0:68:91:09:1d:77:bf:04:02:4e: b3:c4:0b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96pb28b0WF649AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmFhOWNiZDEtODhiYy00ZTU4LThjNzktYzA1ZDI5MmRjMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r9pQwW6mAzxJ75FC71SZxUpx03kKzsu9QtW OYXbtrb7XrrLGM7kfxhVBNEYErGUt2c4/shz5fMVlnLsn6vIlAHjH5SGgaP7o1Je A1njrLl6YgpHFa1JofYt2qFF3wrji92d1vkYO1VyF0tsCzx5gPbTX+2spVSpJqb0 IjyJuDBtMic6fw6ovtqz0acoDUydSUl/j1QiezXOdJkRgZocBtO8RVce93nJbqPI sGUvgvz5ocX2qpQBc7SswZMP8jL44H04pQZ2qnF3ysHRbD1kLL4Qx8YE3mcqPd61 ZXhovbxQ414Xa2kgI4Xclw+noXwSbtffUWoUmsHzK21FKUscnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7ASKerlTMlrxXNjg34He+lzUbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNzcyNDlmYjYtMzQ5MS0z YzRhLWI2MDAtOWU4ODdiNDJmMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR6tk6oW2k1ZOODDLTPS5vfsGy9zZioMmK9V2fqD3EcEK4VkeskJmEe BLnqqGBrDetwUi/3jy13fqVeei+Qq0SBVQ8Jvw6HkPCgUTyb5ugB3USnsMM8Pr2L ByFRcv3HgLbGxfbGmueWBfIMXGFbPuYr4F/y1KMGAP/tlHI73sOITecBc+f3Gz8G fTzohwdQbWnBw1kS9pW7Mq5HdqbSOsOUKJtD1iNlv2pQzOxdCcbA1Y2lia+x2U31 5rhCaz0iOB51Zyx5wPyb2HLpqVPOe7owpRlRGU+dTgIFJs+y9TugEFXlojfAZ6fk 8U+Cf+uNO7ow4GiRCR13vwQCTrPEC+c= -----END CERTIFICATE-----Generated at Tue Sep 22 09:15:28 2026 by rpki-client