$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa File: a242d7cc-2230-359a-84d5-260d1b1ae300.roa (raw, json) Hash identifier: sNMsltBnLd8pPEPMj4Sjb7IuCm0wAszDXVFLuB0BA68= Subject key identifier: D0:CF:D8:D6:99:6F:17:DB:5A:6A:CE:23:87:A5:AD:C2:7E:69:E7:63 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584F6C583998E71B9D01E62C7A80 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 46632 IP address blocks: 162.254.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:98:e7:1b:9d:01:e6:2c:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=3b14d5df-0dc3-4120-80f0-f5a03138d44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:0a:99:07:b5:13:13:5a:50:02:3a:8f:49: 32:9c:b0:c6:34:11:e8:b9:9c:b9:1e:40:9c:52:22: 31:f0:62:a6:85:a8:bb:e7:cc:bc:7e:52:6c:f3:55: 91:0f:9f:ef:ad:9b:43:06:65:c2:62:77:31:c5:c5: f5:55:4c:e0:56:98:9f:31:fc:42:57:23:56:f9:3e: 68:94:b7:9b:59:6f:a2:0b:4d:d5:33:45:83:2e:41: 84:5f:7b:47:80:12:87:5d:60:9f:29:3e:63:8d:72: a3:3d:79:17:74:52:01:94:1a:04:68:bd:7e:82:d8: ea:ff:c2:ab:a7:fd:d6:1a:5c:8f:27:c3:23:e5:40: e1:76:7e:a8:63:a3:20:50:fa:dd:66:aa:d4:f5:fd: fa:01:9f:14:cb:88:f1:60:8e:6a:3e:35:da:2f:ab: 17:65:3a:11:86:1e:e4:40:e9:73:cc:0e:db:93:f8: f2:be:d6:f1:42:de:ef:5d:72:e2:bb:c7:71:b9:49: 6e:0b:fb:9e:15:d4:a0:a3:d1:5a:a6:ee:79:09:75: 58:6a:9f:11:39:49:00:18:dd:30:6c:11:32:39:cd: c2:0d:9e:45:91:9e:a7:64:ab:80:c3:9a:de:40:68: a7:1c:1d:b1:e3:b5:fb:6b:46:eb:47:e5:67:71:9d: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CF:D8:D6:99:6F:17:DB:5A:6A:CE:23:87:A5:AD:C2:7E:69:E7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 162.254.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3f:09:9d:cd:68:6b:50:fd:cd:17:f1:6b:7d:ad:df:88:f1: da:4d:bf:dc:17:f2:41:b3:6f:3b:35:5d:14:8a:9e:b0:37:00: d5:27:f0:5e:6e:8c:cd:f1:bd:0f:84:c1:3c:d9:05:81:14:6e: 12:6e:d8:2e:6b:95:13:ea:6b:08:3b:98:70:c1:29:32:04:50: 62:be:96:03:00:3b:e2:80:5b:99:69:a0:7b:0f:f8:33:9a:e4: e6:4d:42:1f:03:ed:d2:37:9d:16:c8:2f:64:7c:82:70:ba:72: e7:32:f1:64:5a:c0:cb:19:2c:1e:7a:0b:eb:2d:7c:f5:4c:ec: 5d:40:bc:29:49:63:91:d7:0b:a9:39:8f:31:0b:51:e0:81:38: de:ae:01:a1:6d:96:82:12:fb:cd:19:f4:a0:66:93:6b:f0:c8: 52:54:f9:25:b1:ec:87:8f:cf:fc:12:90:99:cc:60:7d:37:55: 60:14:24:5f:ca:eb:0d:dd:14:49:c3:5c:d2:b4:74:90:5c:9a: 4b:66:ea:4c:fb:81:ca:c4:76:14:63:69:2e:c0:e8:0a:2e:44: f0:75:f5:ca:ba:70:c1:2a:b3:f3:90:1e:14:db:d6:a6:9e:f3: 84:f0:1e:23:25:d5:72:48:d1:4f:69:fa:46:54:59:c3:de:5c: 69:65:6c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDmY5xudAeYseoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk M2IxNGQ1ZGYtMGRjMy00MTIwLTgwZjAtZjVhMDMxMzhkNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+kKmQe1ExNaUAI6j0kynLDGNBHouZy5HkCc UiIx8GKmhai758y8flJs81WRD5/vrZtDBmXCYncxxcX1VUzgVpifMfxCVyNW+T5o lLebWW+iC03VM0WDLkGEX3tHgBKHXWCfKT5jjXKjPXkXdFIBlBoEaL1+gtjq/8Kr p/3WGlyPJ8Mj5UDhdn6oY6MgUPrdZqrU9f36AZ8Uy4jxYI5qPjXaL6sXZToRhh7k QOlzzA7bk/jyvtbxQt7vXXLiu8dxuUluC/ueFdSgo9Fapu55CXVYap8ROUkAGN0w bBEyOc3CDZ5FkZ6nZKuAw5reQGinHB2x47X7a0brR+VncZ1a7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDP2NaZbxfbWmrOI4elrcJ+aedjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvYTI0MmQ3Y2MtMjIzMC0z NTlhLTg0ZDUtMjYwZDFiMWFlMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw/CZ3NaGtQ/c0X8Wt9rd+I8dpNv9wX8kGzbzs1XRSKnrA3ANUn8F5u jM3xvQ+EwTzZBYEUbhJu2C5rlRPqawg7mHDBKTIEUGK+lgMAO+KAW5lpoHsP+DOa 5OZNQh8D7dI3nRbIL2R8gnC6cucy8WRawMsZLB56C+stfPVM7F1AvClJY5HXC6k5 jzELUeCBON6uAaFtloIS+80Z9KBmk2vwyFJU+SWx7IePz/wSkJnMYH03VWAUJF/K 6w3dFEnDXNK0dJBcmktm6kz7gcrEdhRjaS7A6AouRPB19cq6cMEqs/OQHhTb1qae 84TwHiMl1XJI0U9p+kZUWcPeXGllbPs= -----END CERTIFICATE-----Generated at Wed Oct 14 15:14:25 2026 by rpki-client