$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa File: 5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa (raw, json) Hash identifier: kymLzsh7VNh35zlRFp3HJ+1Uh0OU8JE0767e6P3pqgk= Subject key identifier: 18:69:7A:6D:9F:23:FA:DB:62:E1:4E:60:11:7B:F0:32:89:27:DF:6B Certificate issuer: /CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Certificate serial: 010D0C9F4328584EA7887FF50EEF5DA05DB39100 Authority key identifier: E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13764 IP address blocks: 162.245.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7f:f5:0e:ef:5d:a0:5d:b3:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=15fbb9b9-2a23-4ce0-96ec-f5ebd87188d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:3d:a0:aa:0d:be:48:3a:ec:b4:16:c9:f5: 59:6a:97:6c:14:24:a7:77:6e:d7:bf:5d:91:36:d8: da:21:ea:1a:54:7f:6c:23:78:44:8d:bd:03:09:0d: 78:93:33:b3:9c:62:e0:7d:b7:0b:a8:5a:00:82:a5: df:4a:1b:37:73:a7:cf:4b:65:c6:9b:4f:10:f0:96: eb:9b:2c:92:53:bb:9e:55:70:40:6c:d6:ee:55:e6: 02:c3:1c:53:53:e2:34:80:01:27:28:82:8f:d1:c7: 36:c0:d8:89:98:72:73:64:1a:20:58:c9:45:f6:00: 4d:5f:f6:33:42:cb:12:e8:a1:76:09:cf:91:e8:6f: 4a:4b:83:31:c2:5a:67:8d:a2:4e:2e:52:be:48:11: 5d:c4:b2:7d:2d:7d:50:dd:4e:f2:83:ca:10:b2:67: ba:93:15:0c:3f:f0:9d:c3:24:49:8b:1c:e4:76:35: ef:f2:91:11:3f:e3:d2:02:25:08:cc:c6:24:ea:2d: bb:98:b3:85:69:41:6e:55:43:cb:5b:24:93:17:d4: 4e:71:90:5c:a4:9e:51:91:21:6a:0c:eb:b6:e9:16: 5a:fa:14:9d:16:ec:81:1a:3e:da:58:c0:2b:67:61: 52:18:7f:d9:64:df:76:dc:31:82:b3:e3:21:4d:18: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:69:7A:6D:9F:23:FA:DB:62:E1:4E:60:11:7B:F0:32:89:27:DF:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl X509v3 Authority Key Identifier: keyid:E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer sbgp-ipAddrBlock: critical IPv4: 162.245.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:8c:bd:b5:3a:64:7a:b4:1c:6d:94:dc:4b:62:45:e9:61: 47:83:14:29:76:be:4f:30:b6:44:52:95:84:c0:74:af:2e:13: 03:47:03:73:b2:e7:23:4e:e2:5e:52:12:67:bd:2b:bc:65:a2: 63:8d:88:50:5b:f1:04:64:a9:f2:3b:3b:fd:4f:1d:c0:4f:c1: 68:b3:55:63:bc:2a:f7:b2:72:a1:7d:44:2e:b2:36:80:aa:d3: 6a:f3:e1:fe:62:dc:c7:77:70:15:d1:56:77:d4:e4:da:00:f4: 87:17:24:8e:7b:c9:18:fa:04:26:62:f5:99:44:86:47:fc:89: 4b:55:c5:eb:92:ee:2b:32:f2:93:7b:0c:1e:94:c1:ea:08:81: 20:6a:88:e8:76:05:0f:cc:98:7d:4d:23:e5:17:00:0e:cd:a3: dc:36:0f:ef:19:8a:de:ae:fc:4c:0e:83:04:46:17:79:43:4f: 53:dd:89:c0:d9:97:fe:78:3e:b0:ce:05:a9:ac:a9:8d:f0:08: 46:7a:75:b9:b4:cc:a3:7b:78:b2:7b:0a:ba:ea:87:5e:b3:c5: 82:01:62:2d:a0:d4:31:15:c2:94:8b:c9:0d:a7:e2:22:46:ac: b2:51:83:b5:31:e5:69:cb:39:3e:2e:f6:82:9c:41:b3:1a:7e: bf:20:c3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH/1Du9doF2zkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwOGM1OWYtZDFlYy00NDUwLTg2MzMtZDk0ZTZiOWYx NjQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTVmYmI5YjktMmEyMy00Y2UwLTk2ZWMtZjVlYmQ4NzE4OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxE9oKoNvkg67LQWyfVZapdsFCSnd27Xv12R NtjaIeoaVH9sI3hEjb0DCQ14kzOznGLgfbcLqFoAgqXfShs3c6fPS2XGm08Q8Jbr myySU7ueVXBAbNbuVeYCwxxTU+I0gAEnKIKP0cc2wNiJmHJzZBogWMlF9gBNX/Yz QssS6KF2Cc+R6G9KS4MxwlpnjaJOLlK+SBFdxLJ9LX1Q3U7yg8oQsme6kxUMP/Cd wyRJixzkdjXv8pERP+PSAiUIzMYk6i27mLOFaUFuVUPLWySTF9ROcZBcpJ5RkSFq DOu26RZa+hSdFuyBGj7aWMArZ2FSGH/ZZN923DGCs+MhTRhE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhpem2fI/rbYuFOYBF78DKJJ99rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4 YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRlNmI5ZjE2NDgvNWQwMWU1ZGMtOWIxZi0z ZTRkLTg3MzUtYWEzNmIzYjllNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTkwOGM1OWYtZDFlYy00NDUwLTg2 MzMtZDk0ZTZiOWYxNjQ4LzE5MDhjNTlmLWQxZWMtNDQ1MC04NjMzLWQ5NGU2Yjlm MTY0OC5jcmwwHwYDVR0jBBgwFoAU5t3EzcMGiT1NW+9tqyGuTFkv7dswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRl NmI5ZjE2NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjUjL21OmR6tBxtlNxLYkXpYUeDFCl2vk8wtkRSlYTAdK8uEwNHA3Oy 5yNO4l5SEme9K7xlomONiFBb8QRkqfI7O/1PHcBPwWizVWO8KveycqF9RC6yNoCq 02rz4f5i3Md3cBXRVnfU5NoA9IcXJI57yRj6BCZi9ZlEhkf8iUtVxeuS7isy8pN7 DB6UweoIgSBqiOh2BQ/MmH1NI+UXAA7No9w2D+8Zit6u/EwOgwRGF3lDT1PdicDZ l/54PrDOBamsqY3wCEZ6dbm0zKN7eLJ7Crrqh16zxYIBYi2g1DEVwpSLyQ2n4iJG rLJRg7Ux5WnLOT4u9oKcQbMafr8gw7g= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:13 2026 by rpki-client