$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa File: 4e55439e-b78a-365f-8c84-5ae476680d04.roa (raw, json) Hash identifier: WwHsvRbLQi0UkAud92bUbsCipT460x08MZqwWkJEq7I= Subject key identifier: 20:FA:5C:DD:F0:F1:5C:1C:B3:86:50:A4:9C:16:47:37:2E:5B:71:17 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F1B624E44C2317359ADD14500 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 26548 IP address blocks: 162.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4e:44:c2:31:73:59:ad:d1:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=6f139c63-e37a-4e51-bc62-3717d7e6f964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:dc:fc:2b:5c:2b:aa:40:10:a9:0e:2b:f2: 9c:48:72:c4:13:51:ec:24:b8:0c:0c:24:30:74:e0: ac:fb:a8:3c:df:c9:f4:fc:b7:da:ae:83:55:d3:31: 72:c8:14:41:6a:06:95:7a:d5:90:72:d1:98:6e:3f: 80:96:dd:43:a1:06:a0:ff:93:de:d4:3e:9f:8d:59: c9:63:c5:fe:88:60:af:57:df:5e:ad:eb:c1:ee:23: f3:f3:27:b1:75:1e:96:e1:6f:61:d2:5d:61:db:19: a7:c8:7b:fb:c1:e7:11:50:29:ce:0e:8f:60:12:98: ea:cb:75:55:cb:0a:e7:31:f7:c5:b8:3e:a6:5f:1f: ba:5f:b6:74:a1:3b:3a:0e:8a:cd:da:3d:10:f4:26: ea:dd:19:24:f9:49:99:83:8c:ec:1c:2f:b5:57:ac: 05:b4:6f:1c:49:18:4e:b8:f0:cb:63:61:e7:a8:a3: ee:8f:cd:6c:ef:35:f6:fe:06:b3:76:d7:9a:c5:c7: 73:b0:d2:58:e2:30:93:a8:2f:a3:2e:22:4e:93:f4: 4e:94:35:95:9d:9b:74:28:22:2f:6f:81:39:02:4a: 6f:1c:b6:7a:05:fa:cc:a5:01:03:e9:55:c4:6b:d3: 15:24:08:ca:26:20:83:d4:c2:23:c6:61:7d:cf:b0: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:5C:DD:F0:F1:5C:1C:B3:86:50:A4:9C:16:47:37:2E:5B:71:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 162.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6e:b5:b7:cb:b2:73:92:2e:b0:b2:5a:60:db:26:27:77:5c: 67:d3:df:9d:7a:88:c3:51:d7:1b:79:62:4f:c3:c7:a7:6b:cf: ed:80:a6:0c:df:1f:ea:ac:ff:51:43:8a:2b:60:f5:8c:e7:c5: 38:14:92:03:11:69:df:8e:73:b9:fe:71:ed:e1:1a:4f:37:92: d1:3b:84:86:98:71:80:fa:83:71:ea:95:38:14:5c:88:71:96: f9:14:38:d4:1a:40:2e:83:43:01:f4:a9:77:90:d5:5e:b5:91: 66:3b:e2:d3:e4:d7:3d:c1:56:63:9a:25:8e:09:68:ac:63:43: 00:38:e0:bf:7e:7a:17:9a:37:bb:93:e6:51:f0:fc:78:59:8c: 07:bf:1f:38:52:d0:85:ef:39:82:8c:ce:55:1a:c0:b3:58:bb: c0:43:61:08:74:53:2c:e8:60:5e:b7:2f:46:9b:bc:7b:e8:40: 07:8b:fa:17:9c:ce:28:c1:69:b1:f1:27:4f:d2:5a:59:15:b8: 0a:35:b4:ab:67:46:eb:39:77:d5:87:d0:d9:2a:33:90:1f:6e: 82:a7:05:e8:d9:17:00:57:df:69:7a:bf:91:f3:83:08:fe:1c: bb:15:db:a3:51:68:88:f4:37:9a:37:d5:34:72:4a:13:34:f4: f3:52:0b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk5EwjFzWa3RRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NmYxMzljNjMtZTM3YS00ZTUxLWJjNjItMzcxN2Q3ZTZmOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEfc/CtcK6pAEKkOK/KcSHLEE1HsJLgMDCQw dOCs+6g838n0/LfaroNV0zFyyBRBagaVetWQctGYbj+Alt1DoQag/5Pe1D6fjVnJ Y8X+iGCvV99erevB7iPz8yexdR6W4W9h0l1h2xmnyHv7wecRUCnODo9gEpjqy3VV ywrnMffFuD6mXx+6X7Z0oTs6DorN2j0Q9Cbq3Rkk+UmZg4zsHC+1V6wFtG8cSRhO uPDLY2HnqKPuj81s7zX2/gazdteaxcdzsNJY4jCTqC+jLiJOk/ROlDWVnZt0KCIv b4E5AkpvHLZ6BfrMpQED6VXEa9MVJAjKJiCD1MIjxmF9z7DOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD6XN3w8Vwcs4ZQpJwWRzcuW3EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNGU1NTQzOWUtYjc4YS0z NjVmLThjODQtNWFlNDc2NjgwZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNutbfLsnOSLrCyWmDbJid3XGfT3516iMNR1xt5Yk/Dx6drz+2Apgzf H+qs/1FDiitg9YznxTgUkgMRad+Oc7n+ce3hGk83ktE7hIaYcYD6g3HqlTgUXIhx lvkUONQaQC6DQwH0qXeQ1V61kWY74tPk1z3BVmOaJY4JaKxjQwA44L9+eheaN7uT 5lHw/HhZjAe/HzhS0IXvOYKMzlUawLNYu8BDYQh0UyzoYF63L0abvHvoQAeL+hec zijBabHxJ0/SWlkVuAo1tKtnRus5d9WH0NkqM5AfboKnBejZFwBX32l6v5Hzgwj+ HLsV26NRaIj0N5o31TRyShM09PNSC0M= -----END CERTIFICATE-----Generated at Tue Sep 22 13:38:39 2026 by rpki-client