$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa File: 2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json) Hash identifier: y+PrDr3jeoJxH9n1vCVT4eX1x9bJ8orf1uMehX3i6Ko= Subject key identifier: FB:16:07:D6:76:4B:8E:88:6E:53:5E:0A:C8:74:85:87:DF:63:B9:2C Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584F4542841FA745DBED05B4ADC0 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 32329 IP address blocks: 162.218.224.0/22 maxlen: 24 164.152.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:84:1f:a7:45:db:ed:05:b4:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=c003070a-0ba4-42c3-a3ae-2d299a384cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:ef:e0:2e:ee:93:c7:14:ec:ca:f4:c5:aa: 60:e5:92:2a:9f:f7:95:29:a2:60:bc:ac:cb:1e:57: 08:b1:8c:1d:09:5f:9f:d7:40:cf:b8:f3:97:c0:ab: a6:66:db:9d:a6:8b:55:13:ca:56:cb:e3:62:ce:a2: 9c:4a:79:03:08:84:bc:6b:ce:b0:f3:46:13:9f:f6: c8:f4:62:4e:90:4f:77:fc:9e:dc:aa:38:a2:70:b5: ca:a4:62:9d:b6:4f:08:9e:2c:bd:ed:24:48:05:28: 57:f4:a8:02:0c:89:73:3c:83:ae:8c:51:bc:c6:0d: 7e:e8:96:a9:cb:35:42:4b:d1:31:fc:51:3e:9f:e0: 14:c7:75:af:f9:24:2f:99:b9:b7:60:bd:58:97:23: d1:cf:c1:bb:f6:08:70:50:0a:0a:2b:f8:4b:b5:82: 13:5a:05:a7:e5:c4:71:18:29:bd:dc:19:27:7c:c8: 10:fe:16:11:a5:a6:d4:34:93:6e:0e:d4:f0:23:7c: 5e:dd:f1:13:6c:d1:6a:87:a4:df:b3:9c:80:15:07: 77:bd:48:f0:a0:f2:a4:f4:c0:52:bb:83:73:a7:c0: 33:92:ee:5b:a4:a6:49:2d:3d:d1:75:91:b3:bf:66: ae:ea:53:5e:59:b2:03:db:64:b4:2c:a4:13:67:a2: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:16:07:D6:76:4B:8E:88:6E:53:5E:0A:C8:74:85:87:DF:63:B9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 162.218.224.0/22 164.152.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c9:bc:10:55:d5:b1:15:ed:c4:35:29:ca:d7:9b:5b:ee:cc: 48:c9:a0:de:54:67:47:f3:11:a2:3f:ce:cf:8b:4d:95:3a:8f: cb:a2:49:ff:e1:9b:d7:2c:0a:1b:03:2d:af:2c:93:36:7b:c6: 1e:93:d4:c0:b2:36:2d:a9:97:98:cc:7c:d7:21:8a:ef:a2:64: 77:e6:0d:f6:1e:a5:16:c0:09:99:06:b3:93:26:3a:71:b1:f7: ee:37:ab:d0:7a:8e:46:84:f7:cb:96:73:b0:45:f5:45:72:02: 59:52:8e:74:83:78:78:3c:f0:89:03:f2:f1:e2:a1:8a:62:ce: e5:ca:8e:36:41:f1:f9:75:c8:38:49:c2:f0:ba:e1:d1:b2:c2: 7f:bc:29:f6:af:9f:c3:4e:50:e9:9e:a0:be:65:be:71:7e:ef: 1b:6e:72:e0:32:31:81:39:a3:65:c8:e6:c2:e2:13:0e:c5:86: f0:16:95:d8:c1:1b:30:d6:ad:98:9c:58:91:b2:0c:e9:25:aa: 54:9c:2f:47:7f:76:63:55:c7:a9:82:42:b0:dd:01:9e:f8:51: f7:c4:5a:1e:2c:a5:3e:f1:ff:53:4b:eb:97:9e:6d:4f:fb:ca: ba:2c:47:d4:21:77:b8:a7:5b:d6:f5:ce:02:91:17:a5:68:c0: 69:80:07:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9FQoQfp0Xb7QW0rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YzAwMzA3MGEtMGJhNC00MmMzLWEzYWUtMmQyOTlhMzg0Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj3v4C7uk8cU7Mr0xapg5ZIqn/eVKaJgvKzL HlcIsYwdCV+f10DPuPOXwKumZtudpotVE8pWy+NizqKcSnkDCIS8a86w80YTn/bI 9GJOkE93/J7cqjiicLXKpGKdtk8Iniy97SRIBShX9KgCDIlzPIOujFG8xg1+6Jap yzVCS9Ex/FE+n+AUx3Wv+SQvmbm3YL1YlyPRz8G79ghwUAoKK/hLtYITWgWn5cRx GCm93BknfMgQ/hYRpabUNJNuDtTwI3xe3fETbNFqh6Tfs5yAFQd3vUjwoPKk9MBS u4Nzp8Azku5bpKZJLT3RdZGzv2au6lNeWbID22S0LKQTZ6J7sQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPsWB9Z2S46IblNeCsh0hYffY7ksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjQ3M2Q2YmEtM2ZiOS0z NTgyLThjY2MtM2MxOTU1NGNmZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotrgAwQD pJiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIDJvBBV1bEV7cQ1KcrXm1vuzEjJoN5UZ0fzEaI/zs+LTZU6 j8uiSf/hm9csChsDLa8skzZ7xh6T1MCyNi2pl5jMfNchiu+iZHfmDfYepRbACZkG s5MmOnGx9+43q9B6jkaE98uWc7BF9UVyAllSjnSDeHg88IkD8vHioYpizuXKjjZB 8fl1yDhJwvC64dGywn+8Kfavn8NOUOmeoL5lvnF+7xtucuAyMYE5o2XI5sLiEw7F hvAWldjBGzDWrZicWJGyDOklqlScL0d/dmNVx6mCQrDdAZ74UffEWh4spT7x/1NL 65eebU/7yrosR9Qhd7inW9b1zgKRF6VowGmABw8= -----END CERTIFICATE-----Generated at Thu Sep 24 22:31:56 2026 by rpki-client