$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa File: 23efa9ca-27b1-3dec-8ab8-434288fce699.roa (raw, json) Hash identifier: WVkFgGw5K1b8wsz2y2Fsf7iz062biQZwyFBF3Rk7Jr4= Subject key identifier: 75:FB:75:35:A0:CC:DD:01:C1:BB:44:13:E5:E7:73:F4:CC:0D:90:66 Certificate issuer: /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Certificate serial: 010D0C9F4328584F4975605181E8EA45501F9980 Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31919 IP address blocks: 162.250.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:60:51:81:e8:ea:45:50:1f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f00e48b-bc09-4233-97d3-e613dec9a7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:57:32:00:47:6a:61:96:23:64:c5:ec:b0: 9f:1a:12:f0:c4:8c:16:5e:88:1c:87:e5:73:23:e3: 39:94:88:8f:33:24:b0:c3:11:cd:37:2d:a3:f7:f7: 15:5c:ff:b9:b6:04:48:ac:14:be:a3:76:a3:66:07: a9:b3:ee:87:bc:ff:3c:01:e0:a4:70:40:16:74:0b: d4:d1:39:d9:aa:59:7c:e7:10:b4:c3:fb:b3:12:da: ca:1c:a9:09:09:74:66:2b:dc:47:1b:c2:a4:12:99: 54:e2:d6:7c:cd:ff:65:5b:da:ab:67:dc:39:58:08: 1a:13:96:95:a0:b6:0e:0e:c1:e6:75:8b:c4:d0:5f: c2:4c:cb:77:ec:ee:dc:5e:74:7c:ad:5c:29:6d:38: 13:5a:54:c6:ed:5d:1c:ac:dd:0c:24:9f:2a:ab:f5: 60:cb:6d:ff:bd:08:0b:94:15:a2:c5:be:56:fe:70: ae:01:ce:df:ef:15:fa:aa:32:85:dc:f8:34:b4:d0: 02:a7:7e:74:d9:1e:7f:e0:8b:69:7f:12:23:97:2a: 18:f3:60:4e:54:fa:0e:d6:8b:58:3a:bd:e7:fa:53: 01:72:3e:c2:77:68:bb:7d:9d:a3:36:9f:77:46:1c: be:d9:21:59:cb:b5:84:49:c9:0a:0f:c8:a3:71:7d: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:75:35:A0:CC:DD:01:C1:BB:44:13:E5:E7:73:F4:CC:0D:90:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl X509v3 Authority Key Identifier: keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer sbgp-ipAddrBlock: critical IPv4: 162.250.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:37:6f:01:65:2e:d3:af:ef:15:ee:be:1f:9c:d0:9b:8b:b5: 9e:1d:02:4b:eb:ae:bd:ca:b0:70:63:7d:58:5b:b7:db:f9:38: 65:8b:5a:99:9c:b4:f4:81:7c:9f:f4:38:24:14:e0:7b:18:40: 7f:b5:de:12:ef:fb:76:76:a8:ae:6a:06:6b:22:bb:4a:06:73: 06:7a:95:c5:b9:fd:a5:44:19:ed:4b:df:55:c4:2e:13:1d:b9: 57:66:a9:6d:d2:ce:5b:f2:b6:49:38:0a:c9:68:5d:c0:17:be: 89:c7:57:41:ef:a4:f8:ae:5a:7c:5f:99:ee:c2:ad:9b:b6:8f: 93:34:f5:ce:ca:b6:de:13:ee:6a:70:03:ca:b4:62:86:82:48: 63:d8:c9:5c:82:75:15:14:b6:a6:10:c7:f8:b3:b9:e3:7a:f4: 3f:91:73:eb:1a:73:a8:2e:1a:0b:fc:97:b5:60:b9:3a:fa:0d: 88:fe:33:6c:b4:ea:27:0e:4b:ed:cd:2c:0c:82:d4:03:f8:d3: 1b:26:a5:22:6a:f8:85:70:79:77:89:66:1f:d0:1e:6b:d4:cd: b5:ae:92:62:04:0c:e6:90:cb:39:b2:6f:15:31:1f:2f:7e:fb: 22:45:21:d7:4d:d5:3e:90:0c:73:79:96:aa:6c:ea:9e:24:9c: 36:ca:df:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWBRgejqRVAfmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVl YTZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2YwMGU0OGItYmMwOS00MjMzLTk3ZDMtZTYxM2RlYzlhN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R9XMgBHamGWI2TF7LCfGhLwxIwWXogch+Vz I+M5lIiPMySwwxHNNy2j9/cVXP+5tgRIrBS+o3ajZgeps+6HvP88AeCkcEAWdAvU 0TnZqll85xC0w/uzEtrKHKkJCXRmK9xHG8KkEplU4tZ8zf9lW9qrZ9w5WAgaE5aV oLYODsHmdYvE0F/CTMt37O7cXnR8rVwpbTgTWlTG7V0crN0MJJ8qq/Vgy23/vQgL lBWixb5W/nCuAc7f7xX6qjKF3Pg0tNACp3502R5/4ItpfxIjlyoY82BOVPoO1otY Or3n+lMBcj7Cd2i7fZ2jNp93Rhy+2SFZy7WESckKD8ijcX0rgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX7dTWgzN0BwbtEE+Xnc/TMDZBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlk NmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvMjNlZmE5Y2EtMjdiMS0z ZGVjLThhYjgtNDM0Mjg4ZmNlNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU5ZDZlNjEtODYxMy00Mjg5LWJl MzQtY2IwZmUwYWVlYTZlLzQ1OWQ2ZTYxLTg2MTMtNDI4OS1iZTM0LWNiMGZlMGFl ZWE2ZS5jcmwwHwYDVR0jBBgwFoAU4cDQPgBLYWNKRx1bI0QthHr5a8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBm ZTBhZWVhNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE3bwFlLtOv7xXuvh+c0JuLtZ4dAkvrrr3KsHBjfVhbt9v5OGWLWpmc tPSBfJ/0OCQU4HsYQH+13hLv+3Z2qK5qBmsiu0oGcwZ6lcW5/aVEGe1L31XELhMd uVdmqW3Szlvytkk4CsloXcAXvonHV0HvpPiuWnxfme7CrZu2j5M09c7Ktt4T7mpw A8q0YoaCSGPYyVyCdRUUtqYQx/izueN69D+Rc+sac6guGgv8l7VguTr6DYj+M2y0 6icOS+3NLAyC1AP40xsmpSJq+IVweXeJZh/QHmvUzbWukmIEDOaQyzmybxUxHy9+ +yJFIddN1T6QDHN5lqps6p4knDbK330= -----END CERTIFICATE-----Generated at Sat Oct 10 17:59:14 2026 by rpki-client