$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa File: c8819cb6-ad46-30d6-a405-084987fa239d.roa (raw, json) Hash identifier: 0OZuA7JXo950hEuzdVwGufoJJ+wQxI2oOR/+l+An+SY= Subject key identifier: 11:A6:7F:A4:4A:31:63:56:15:EF:92:FE:76:5E:EC:C9:93:6C:23:C6 Certificate issuer: /CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Certificate serial: 010D0C9F4328584EF44CB3EF0CBFC8830A7EC889 Authority key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 202.37.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b3:ef:0c:bf:c8:83:0a:7e:c8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=33bf8b2b-459e-4736-a358-bfea3d63ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:9f:1e:cf:5a:1c:67:9c:18:d3:f0:78:46: 76:b3:53:57:e1:28:a8:0a:b9:40:c7:8f:6c:d3:00: 54:31:1a:60:85:79:64:23:8e:38:95:a2:92:7c:b4: 93:16:41:67:44:36:32:63:8e:04:da:45:94:bd:c0: 6e:8e:b6:7a:5d:44:98:bf:39:7e:0f:13:e8:42:19: e2:a2:2d:76:fd:d6:c1:47:b8:73:b3:7d:a6:ff:9d: de:bd:6a:c0:e9:3a:ea:53:89:b9:9b:b1:27:62:f2: 51:29:e5:0d:43:d8:bd:34:e4:b1:24:a2:f1:69:15: 7f:cc:e6:cb:c1:3c:4b:2c:14:27:7c:fb:b3:47:22: 95:8e:d1:d5:b4:45:93:c8:c6:e0:45:1a:08:a0:6b: 97:70:29:49:73:27:c6:47:cc:f7:9b:d1:14:4d:b8: a5:21:27:64:a6:eb:d6:2d:3d:12:e8:b1:a4:95:fa: b9:d9:84:b2:01:0d:a6:2f:5f:ed:64:ba:53:86:c6: 3d:84:4e:d3:d2:40:b2:46:f2:76:e2:0a:d4:09:7a: 6f:c1:b8:92:0a:c9:b7:2b:10:9d:02:41:2e:d1:da: e3:7c:b3:3a:79:8e:33:b3:98:9c:42:0e:42:92:7f: 14:d8:54:e1:b5:7e:fe:fa:46:55:c4:b8:87:1b:b2: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:7F:A4:4A:31:63:56:15:EF:92:FE:76:5E:EC:C9:93:6C:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl X509v3 Authority Key Identifier: keyid:D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer sbgp-ipAddrBlock: critical IPv4: 202.37.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2b:0e:15:6a:c8:93:c7:61:07:5b:22:0b:36:7f:b0:aa:4d: 43:4b:d8:8a:f8:16:f3:00:c9:40:ad:5b:f0:08:be:4f:c4:22: f4:73:ba:b8:b2:b0:ba:84:ea:94:86:cd:ad:b6:03:d8:bc:ff: f2:f6:89:42:9e:95:37:b9:5e:8f:19:46:18:b2:b9:20:2b:9c: 0f:3f:ed:a7:54:bc:6e:48:dc:6b:94:1d:be:62:6a:a9:81:a0: e1:ac:52:ce:72:2f:38:0f:dd:58:ec:a2:10:7e:1b:fc:8e:a9: 6b:bf:8d:f7:34:fb:8d:81:24:7e:6a:0d:a5:af:d3:62:07:c2: 73:df:6a:d1:c9:82:a6:6a:5a:44:39:59:5b:1a:1d:de:33:5e: d5:a6:da:d7:ba:80:b7:1c:06:7e:59:9b:89:9d:1e:df:34:e1: 5d:a6:bc:b5:cc:31:38:b6:58:92:52:9f:e2:58:19:44:eb:9d: b0:70:72:bc:31:27:94:05:c6:4b:1c:b6:aa:b8:1b:25:cc:22: 0f:da:69:e1:cc:98:15:ca:25:1e:88:1b:8d:26:69:0a:22:31: c1:28:0f:62:bc:c8:cc:22:1f:cd:3d:ee:df:a5:9b:5d:63:89: 31:9f:aa:5d:cf:d8:e1:32:44:fe:a3:a6:55:05:a1:a8:bb:73: 68:82:f5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLPvDL/Igwp+yIkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNjcyNDEtM2NkOC00M2ZkLTlmZjctM2UxOGJkODY3 OTI2MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MzNiZjhiMmItNDU5ZS00NzM2LWEzNTgtYmZlYTNkNjNlZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBOfHs9aHGecGNPweEZ2s1NX4SioCrlAx49s 0wBUMRpghXlkI444laKSfLSTFkFnRDYyY44E2kWUvcBujrZ6XUSYvzl+DxPoQhni oi12/dbBR7hzs32m/53evWrA6TrqU4m5m7EnYvJRKeUNQ9i9NOSxJKLxaRV/zObL wTxLLBQnfPuzRyKVjtHVtEWTyMbgRRoIoGuXcClJcyfGR8z3m9EUTbilISdkpuvW LT0S6LGklfq52YSyAQ2mL1/tZLpThsY9hE7T0kCyRvJ24grUCXpvwbiSCsm3KxCd AkEu0drjfLM6eY4zs5icQg5Ckn8U2FThtX7++kZVxLiHG7KifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGmf6RKMWNWFe+S/nZe7MmTbCPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MGE2 NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4YmQ4Njc5MjYvYzg4MTljYjYtYWQ0Ni0z MGQ2LWE0MDUtMDg0OTg3ZmEyMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDBhNjcyNDEtM2NkOC00M2ZkLTlm ZjctM2UxOGJkODY3OTI2LzQwYTY3MjQxLTNjZDgtNDNmZC05ZmY3LTNlMThiZDg2 NzkyNi5jcmwwHwYDVR0jBBgwFoAU1bVZn9b+cRz6Dr7OCynaNNsC9Z4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MGE2NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4 YmQ4Njc5MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0rDhVqyJPHYQdbIgs2f7CqTUNL2Ir4FvMAyUCtW/AIvk/EIvRzuriy sLqE6pSGza22A9i8//L2iUKelTe5Xo8ZRhiyuSArnA8/7adUvG5I3GuUHb5iaqmB oOGsUs5yLzgP3VjsohB+G/yOqWu/jfc0+42BJH5qDaWv02IHwnPfatHJgqZqWkQ5 WVsaHd4zXtWm2te6gLccBn5Zm4mdHt804V2mvLXMMTi2WJJSn+JYGUTrnbBwcrwx J5QFxksctqq4GyXMIg/aaeHMmBXKJR6IG40maQoiMcEoD2K8yMwiH8097t+lm11j iTGfql3P2OEyRP6jplUFoai7c2iC9cU= -----END CERTIFICATE-----Generated at Tue Sep 22 01:24:59 2026 by rpki-client