$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa File: 0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa (raw, json) Hash identifier: I8L/uRVN55fKo+V0bzNBR2zTtcFEFX8JKct650B7b7M= Subject key identifier: E7:CF:4C:0F:BE:13:1D:97:EE:3D:A1:33:39:2F:61:D0:1A:28:87:15 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584E9EAFEBE14D97EC7E2E44D240 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 26548 IP address blocks: 162.249.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:eb:e1:4d:97:ec:7e:2e:44:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=e13accf7-65ca-42ed-a22f-bc66f164b735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:df:ad:c2:49:c9:4f:7a:7e:66:33:1d:74:0a: 29:da:10:23:7e:84:ca:eb:47:3a:65:3e:ec:97:1e: b2:8f:7e:5d:bf:d3:ac:8e:d8:18:f3:9f:2b:41:f9: 43:95:85:92:ac:ee:88:11:8a:98:37:aa:cd:34:87: 63:6e:44:01:aa:c8:b0:29:83:6d:14:ea:11:d0:64: 3e:31:44:53:8e:bc:2a:d8:0e:c9:d5:35:c8:8a:e0: 69:e0:35:ce:aa:e1:28:54:0b:bf:1e:5e:f9:6b:72: 61:e5:f1:b7:56:d5:98:ea:ba:a6:ec:c6:40:7a:3e: bf:cd:e2:2c:26:86:4b:05:8d:07:9c:eb:09:5e:0f: 91:13:31:36:67:02:55:11:42:23:0c:14:9f:77:92: 0f:d1:c5:99:d0:9a:76:9a:5e:ac:e4:8e:34:7d:5c: ed:22:cd:b9:69:54:0a:c1:a7:a3:0c:23:70:ef:88: b7:98:05:ac:3c:84:09:da:b9:b3:6a:78:28:5f:0e: b0:61:3c:68:80:44:46:db:23:54:36:06:99:74:46: 27:8d:57:77:f7:c3:1a:6a:c2:56:4d:4a:d8:62:49: 8c:7a:d9:52:52:c9:e3:59:03:28:0b:95:01:39:21: 14:4f:d6:74:fa:4f:dd:71:0d:0a:03:16:89:f1:4b: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:4C:0F:BE:13:1D:97:EE:3D:A1:33:39:2F:61:D0:1A:28:87:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 162.249.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c2:0c:c7:98:ad:37:0d:2a:8c:55:e3:07:d9:01:b6:4a:cc: 5a:23:2b:da:ce:f2:2c:ad:06:de:d2:0c:f4:f2:3a:d3:d4:ca: 08:5b:6b:60:b2:80:1e:1e:2d:58:42:f2:7f:0b:da:7d:97:86: c9:6e:46:fd:2f:72:04:b1:73:a6:9b:f8:4e:e4:87:23:3f:91: 7a:44:13:5b:5b:15:c5:12:16:40:0b:2f:f6:5f:ec:cd:3e:3f: 10:0a:d8:77:c5:6f:07:cb:4c:37:42:cb:9a:12:5d:75:e8:28: f6:51:aa:8b:6b:4d:a4:8b:cf:f0:d1:26:28:68:8c:40:7c:ec: 86:0d:64:54:1a:db:9e:b9:57:7a:0c:13:da:22:c2:8c:c2:d7: 06:53:39:30:38:9d:38:78:af:2c:fa:8d:25:89:f4:21:4a:ff: 6e:13:13:f4:3f:09:46:28:ff:ff:3b:67:89:26:18:e1:1c:0a: 69:bb:87:b0:ff:04:6f:73:71:44:77:7d:57:90:60:da:76:e0: 84:43:3e:c0:43:1c:4a:df:39:4f:7f:ee:1f:5c:41:11:57:af: 44:43:85:46:9b:f3:63:39:fd:81:44:b0:38:4b:46:1a:7d:b2: 46:4a:c8:ea:39:87:fb:f3:69:8e:a4:34:c6:03:98:ea:9b:5b: 62:05:e2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+vhTZfsfi5E0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTEzYWNjZjctNjVjYS00MmVkLWEyMmYtYmM2NmYxNjRiNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t+twknJT3p+ZjMddAop2hAjfoTK60c6ZT7s lx6yj35dv9OsjtgY858rQflDlYWSrO6IEYqYN6rNNIdjbkQBqsiwKYNtFOoR0GQ+ MURTjrwq2A7J1TXIiuBp4DXOquEoVAu/Hl75a3Jh5fG3VtWY6rqm7MZAej6/zeIs JoZLBY0HnOsJXg+REzE2ZwJVEUIjDBSfd5IP0cWZ0Jp2ml6s5I40fVztIs25aVQK waejDCNw74i3mAWsPIQJ2rmzangoXw6wYTxogERG2yNUNgaZdEYnjVd398MaasJW TUrYYkmMetlSUsnjWQMoC5UBOSEUT9Z0+k/dcQ0KAxaJ8UvFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfPTA++Ex2X7j2hMzkvYdAaKIcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMDM0NWJlNWEtMjBjMi0z NWMwLTlhYjgtYThjMjJjZTkyMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvCDMeYrTcNKoxV4wfZAbZKzFojK9rO8iytBt7SDPTyOtPUyghba2Cy gB4eLVhC8n8L2n2XhsluRv0vcgSxc6ab+E7khyM/kXpEE1tbFcUSFkALL/Zf7M0+ PxAK2HfFbwfLTDdCy5oSXXXoKPZRqotrTaSLz/DRJihojEB87IYNZFQa2565V3oM E9oiwozC1wZTOTA4nTh4ryz6jSWJ9CFK/24TE/Q/CUYo//87Z4kmGOEcCmm7h7D/ BG9zcUR3fVeQYNp24IRDPsBDHErfOU9/7h9cQRFXr0RDhUab82M5/YFEsDhLRhp9 skZKyOo5h/vzaY6kNMYDmOqbW2IF4mI= -----END CERTIFICATE-----Generated at Tue Jul 28 18:17:23 2026 by rpki-client