$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa File: a73e168d-7b30-3863-a850-c6259591b98c.roa (raw, json) Hash identifier: 0zlonx+BhS2ddRMtV2rE31GIm68PA5sh/Ysqnlylyiw= Subject key identifier: 73:B1:DA:B5:B8:12:22:DC:55:66:3F:F5:3F:76:C2:13:F3:4A:9A:90 Certificate issuer: /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Certificate serial: 010D0C9F4328584F63F8129B94439C2CA76DA7C0 Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 46890 IP address blocks: 164.163.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:12:9b:94:43:9c:2c:a7:6d:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=71d5943a-0632-4ae5-a682-e3cd8b2f1d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:17:fc:e2:11:d3:a5:4b:c3:72:52:9d:14: 65:94:1b:33:b0:c6:4e:6b:bc:bf:7c:0b:23:1d:70: 95:f1:b2:83:3a:2a:dc:c8:61:40:0a:fb:54:f2:d5: 76:2f:f6:97:c9:2c:f8:9f:17:00:88:24:b4:14:4e: e5:4d:8b:11:7d:8c:37:e6:11:4d:86:11:0a:f8:cb: cc:0d:05:e9:88:1f:43:12:33:18:ec:ef:94:c6:dd: 83:f2:fa:e2:75:15:36:3d:84:f7:98:df:42:5d:eb: 50:8e:92:cb:eb:b1:84:db:4c:a9:e5:31:76:4c:ed: ab:a8:b0:a4:4f:f5:99:2e:49:f0:13:c9:38:7a:fb: 02:45:cb:87:4d:4e:9b:a6:c5:08:f2:8e:59:dc:0e: ba:b3:68:73:d7:b4:5c:80:4d:e2:a4:c6:61:a1:be: 8e:77:94:41:64:7d:09:17:a8:01:f5:f4:77:da:61: 4c:b4:2e:40:e7:24:95:81:c0:44:b9:5f:d1:b3:d9: 9a:bc:3b:e9:45:8c:ca:cc:99:dd:40:80:cd:a8:02: d1:fa:cd:6c:2c:04:a0:0f:e6:ba:76:b6:ec:bd:81: b9:ee:d7:4b:cb:e4:58:07:71:ea:68:40:cd:46:a9: 06:4b:e4:37:2e:55:6e:43:6d:f9:32:8e:e3:bd:60: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B1:DA:B5:B8:12:22:DC:55:66:3F:F5:3F:76:C2:13:F3:4A:9A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl X509v3 Authority Key Identifier: keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer sbgp-ipAddrBlock: critical IPv4: 164.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9d:03:17:0e:92:0d:e8:74:bb:df:37:83:da:e5:d9:c7:9b: 7c:b6:1a:80:d6:70:27:0e:5a:1d:6c:08:85:7c:d4:1d:3e:21: 98:1a:1c:00:8a:f4:40:14:3a:58:97:c0:05:91:01:fb:05:46: 48:0e:86:5b:00:ad:ec:fc:c1:32:a4:e5:2d:6b:9e:bc:d4:ea: f2:80:81:b8:9a:d0:21:f7:9f:bc:98:c8:e2:1c:3e:aa:25:64: 62:b7:db:4b:1b:94:0b:96:92:77:20:91:0b:58:b2:af:ee:20: 33:72:ee:98:50:fe:4b:7a:f6:74:d7:66:90:37:82:20:36:98: 74:f6:e3:ca:f4:27:11:d6:05:ac:dc:c9:6c:b2:a6:5e:52:b9: ad:8f:fc:3e:91:01:27:d1:72:c9:60:10:e0:ff:3c:e6:44:77: f8:f6:07:f5:f6:79:82:fe:9b:bb:a1:e2:4d:82:72:54:41:5f: 73:41:a8:44:b6:12:df:02:26:49:27:17:7e:08:3b:f9:74:92: 7b:91:24:21:b5:fd:84:37:3d:84:c8:ef:3f:99:fb:55:23:e1: 98:a0:b7:e0:73:c1:55:45:90:3e:01:92:8c:fe:a0:ff:2f:1c: 47:74:84:47:48:c1:4f:31:56:25:3c:c5:14:69:58:a2:b9:0e: d8:ab:58:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BKblEOcLKdtp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyNGFmZjEtODdmNS00YmE3LWJlMWQtZTZlODdlMGE2 NjA1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NzFkNTk0M2EtMDYzMi00YWU1LWE2ODItZTNjZDhiMmYxZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPgX/OIR06VLw3JSnRRllBszsMZOa7y/fAsj HXCV8bKDOircyGFACvtU8tV2L/aXySz4nxcAiCS0FE7lTYsRfYw35hFNhhEK+MvM DQXpiB9DEjMY7O+Uxt2D8vridRU2PYT3mN9CXetQjpLL67GE20yp5TF2TO2rqLCk T/WZLknwE8k4evsCRcuHTU6bpsUI8o5Z3A66s2hz17RcgE3ipMZhob6Od5RBZH0J F6gB9fR32mFMtC5A5ySVgcBEuV/Rs9mavDvpRYzKzJndQIDNqALR+s1sLASgD+a6 drbsvYG57tdLy+RYB3HqaEDNRqkGS+Q3LlVuQ235Mo7jvWDsswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOx2rW4EiLcVWY/9T92whPzSpqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0 YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4N2UwYTY2MDUvYTczZTE2OGQtN2IzMC0z ODYzLWE4NTAtYzYyNTk1OTFiOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGYyNGFmZjEtODdmNS00YmE3LWJl MWQtZTZlODdlMGE2NjA1LzBmMjRhZmYxLTg3ZjUtNGJhNy1iZTFkLWU2ZTg3ZTBh NjYwNS5jcmwwHwYDVR0jBBgwFoAUnIpo9XzTR1sU8GPgfgDAELa7AS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4 N2UwYTY2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpKNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOdAxcOkg3odLvfN4Pa5dnHm3y2GoDWcCcOWh1sCIV81B0+IZgaHACK 9EAUOliXwAWRAfsFRkgOhlsArez8wTKk5S1rnrzU6vKAgbia0CH3n7yYyOIcPqol ZGK320sblAuWkncgkQtYsq/uIDNy7phQ/kt69nTXZpA3giA2mHT248r0JxHWBazc yWyypl5Sua2P/D6RASfRcslgEOD/POZEd/j2B/X2eYL+m7uh4k2CclRBX3NBqES2 Et8CJkknF34IO/l0knuRJCG1/YQ3PYTI7z+Z+1Uj4Zigt+BzwVVFkD4Bkoz+oP8v HEd0hEdIwU8xViU8xRRpWKK5DtirWLM= -----END CERTIFICATE-----Generated at Tue Oct 13 04:27:01 2026 by rpki-client