$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa File: f7cef808-77ea-3a63-8140-5f1854878c63.roa (raw, json) Hash identifier: YJVKpFSu2IFWbMTz70PN2NLerxZyigzKa+B80BVGpzA= Subject key identifier: BF:82:BD:0F:7E:F2:64:BB:53:01:C0:48:72:07:E7:43:AD:61:EE:18 Certificate issuer: /CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Certificate serial: 010D0C9F4328584C6E2172A06510D8865F858900 Authority key identifier: 93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 55251 IP address blocks: 162.211.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:72:a0:65:10:d8:86:5f:85:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=38b6b904-e45e-4355-9955-4a7f0b5014b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:90:3e:17:bf:4c:8a:05:1a:36:c1:ba:6a: c2:bf:b0:18:ff:09:e4:58:e1:56:d2:26:cc:9f:d6: 54:e6:a0:0d:b6:0b:db:3f:26:24:ad:1f:db:13:19: 0e:a3:0a:3b:93:2c:ec:c0:35:85:3d:4a:a2:3d:d4: 6e:2f:19:bd:be:e1:49:0a:83:fa:e6:d0:71:00:c1: 26:31:a5:90:07:ce:6c:40:88:06:60:40:91:86:63: 74:79:23:c7:0a:3e:62:55:92:c7:d4:7d:68:43:98: 4c:47:23:63:85:7a:67:c4:73:a2:ad:f8:c1:70:24: 0a:12:07:0d:fb:09:39:cf:3a:30:99:91:7f:30:ba: 92:39:83:c4:68:a8:27:38:54:c6:f8:cd:56:e3:80: f9:54:3d:fd:ab:79:b6:62:0e:86:fc:95:59:14:87: a4:9c:26:f3:22:4a:30:47:70:88:df:fc:d1:7c:2e: 4c:ce:6f:98:c8:63:14:78:88:36:d4:6e:7e:90:eb: 64:5e:98:8c:18:2f:11:b6:eb:3d:3d:c9:b3:15:8a: ee:9a:e6:85:8c:f2:6f:04:67:13:40:bc:ec:9d:48: 4a:38:65:34:e9:b3:4e:7b:d6:96:84:e7:8f:de:6e: f4:12:9c:f6:1e:50:24:ea:f4:40:0f:24:4f:ff:42: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:BD:0F:7E:F2:64:BB:53:01:C0:48:72:07:E7:43:AD:61:EE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl X509v3 Authority Key Identifier: keyid:93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer sbgp-ipAddrBlock: critical IPv4: 162.211.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1a:a6:0b:5c:9e:b8:09:e6:7a:2a:fa:1a:32:25:6d:9a:fc: 50:72:67:d0:0d:12:46:9e:7d:5e:f4:36:07:44:57:46:c5:c4: 01:fc:33:36:8a:d0:dd:23:2c:6b:c2:9b:e2:d7:03:49:87:6d: 19:85:02:01:53:a3:24:d2:72:26:ed:42:b4:32:82:5c:14:3b: 8d:86:0d:03:9e:23:ec:8e:59:a3:e3:9c:73:6d:e1:37:e5:f0: ce:43:4d:7a:c3:b9:f5:d8:99:b4:0c:8f:ce:a2:0c:87:47:04: 3e:b1:06:b2:96:25:4c:d3:9e:d5:26:66:7c:e7:6b:0c:95:b2: fb:56:39:c9:14:fd:91:4c:ab:d0:72:84:39:02:39:2e:e8:49: 00:39:44:18:e5:3e:23:64:4d:47:00:41:99:eb:bb:b7:98:e1: aa:a6:1c:00:23:55:fb:58:69:58:cb:3f:a5:da:93:9d:70:fb: 99:02:54:6d:24:b8:85:e8:86:f2:8c:c0:9f:d4:44:c6:a9:59: c8:64:0e:f5:a5:5d:33:8c:f5:78:59:ab:6f:34:33:0d:9a:14: 35:79:14:db:62:ea:7d:8c:b1:01:88:d7:d6:19:f6:dd:43:b1: 58:a8:e4:aa:fe:d0:1b:f1:38:f6:b3:e0:17:20:4d:86:c9:b3: 6b:80:a0:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIXKgZRDYhl+FiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2 ZGVmMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk MzhiNmI5MDQtZTQ1ZS00MzU1LTk5NTUtNGE3ZjBiNTAxNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNOQPhe/TIoFGjbBumrCv7AY/wnkWOFW0ibM n9ZU5qANtgvbPyYkrR/bExkOowo7kyzswDWFPUqiPdRuLxm9vuFJCoP65tBxAMEm MaWQB85sQIgGYECRhmN0eSPHCj5iVZLH1H1oQ5hMRyNjhXpnxHOirfjBcCQKEgcN +wk5zzowmZF/MLqSOYPEaKgnOFTG+M1W44D5VD39q3m2Yg6G/JVZFIeknCbzIkow R3CI3/zRfC5Mzm+YyGMUeIg21G5+kOtkXpiMGC8Rtus9PcmzFYrumuaFjPJvBGcT QLzsnUhKOGU06bNOe9aWhOeP3m70Epz2HlAk6vRADyRP/0IXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+CvQ9+8mS7UwHASHIH50OtYe4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3 ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvZjdjZWY4MDgtNzdlYS0z YTYzLTgxNDAtNWYxODU0ODc4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDgxN2ViYjMtYTRjYy00OGE5LWJm NDItMDFkZTU1YTY2ZGVmLzQ4MTdlYmIzLWE0Y2MtNDhhOS1iZjQyLTAxZGU1NWE2 NmRlZi5jcmwwHwYDVR0jBBgwFoAUk9jXatQNVqalp94tfQbu0IZ0a+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRl NTVhNjZkZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsapgtcnrgJ5noq+hoyJW2a/FByZ9ANEkaefV70NgdEV0bFxAH8MzaK 0N0jLGvCm+LXA0mHbRmFAgFToyTScibtQrQyglwUO42GDQOeI+yOWaPjnHNt4Tfl 8M5DTXrDufXYmbQMj86iDIdHBD6xBrKWJUzTntUmZnznawyVsvtWOckU/ZFMq9By hDkCOS7oSQA5RBjlPiNkTUcAQZnru7eY4aqmHAAjVftYaVjLP6Xak51w+5kCVG0k uIXohvKMwJ/URMapWchkDvWlXTOM9XhZq280Mw2aFDV5FNti6n2MsQGI19YZ9t1D sVio5Kr+0BvxOPaz4BcgTYbJs2uAoDg= -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:58 2026 by rpki-client