$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7fd9f84a-1a78-3e62-9a96-65dd49c951cc.roa File: 7fd9f84a-1a78-3e62-9a96-65dd49c951cc.roa (raw, json) Hash identifier: lSgRSIIyDoa6wCgiJ7usFqN7wv7g3S7UKML5pOR/1gQ= Subject key identifier: 53:66:64:56:EE:26:7E:C5:48:3B:37:43:8B:BE:2F:55:CB:3F:29:71 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584F4112A024AA144FD6E8E19BC0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7fd9f84a-1a78-3e62-9a96-65dd49c951cc.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 401909 IP address blocks: 162.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a0:24:aa:14:4f:d6:e8:e1:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=1b9c03a0-ffe9-4d74-8b03-218e8ae68313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:15:11:a6:36:5a:2d:a4:42:bf:16:1d:ef: a5:b3:6b:7d:b0:39:79:7a:8b:43:96:5e:39:41:ae: ac:52:1d:84:cc:c2:3a:34:1c:11:fa:40:ce:ce:7e: d0:35:88:78:87:2c:16:4e:a0:38:fb:e1:78:1c:d7: 85:d7:6b:b8:fb:d5:5d:0e:7f:7c:37:aa:d3:e2:55: c3:13:ef:6a:ee:4f:3e:f1:99:e3:a6:21:55:ee:80: 5e:da:63:f9:c2:bf:81:23:7a:68:89:1d:6d:a2:91: fb:1e:52:b2:b1:a2:42:52:d8:85:da:a1:14:93:66: 87:bc:91:9e:dc:b7:b4:9f:33:93:1a:9f:41:e4:06: fe:b9:d0:ca:7f:dd:26:c1:99:71:8c:f4:b2:af:2f: ac:d8:d8:00:85:50:02:eb:9c:b1:ec:d9:18:29:35: d7:fd:75:85:7f:35:59:a7:0a:34:e0:64:90:77:ec: 22:5a:bb:a8:6c:4c:f1:5e:a6:63:56:61:55:cc:e0: 3a:b3:63:d1:ad:35:73:2a:d7:46:77:af:34:11:d0: 44:a0:28:60:69:16:46:2c:76:af:03:10:e9:56:38: 3d:c2:39:6f:2e:93:39:49:3a:9e:e1:4e:7d:a5:fb: 3e:65:e0:13:02:4c:9d:f1:6b:ae:c4:9c:5e:5d:2f: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:64:56:EE:26:7E:C5:48:3B:37:43:8B:BE:2F:55:CB:3F:29:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7fd9f84a-1a78-3e62-9a96-65dd49c951cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 162.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:72:c3:90:86:67:6a:80:64:5e:61:0e:5b:94:b5:76:d2:91: 9d:b7:d6:bf:0f:7f:ff:a2:19:a5:82:61:7e:86:16:e3:e0:3b: de:ef:04:9c:3b:a9:be:39:54:1c:81:ab:60:13:67:07:d7:73: d7:89:d4:9d:3c:d7:f1:88:2e:89:ad:2b:c1:64:86:a0:06:3c: f6:22:8c:59:86:e9:46:e7:3f:2e:6d:66:27:00:32:49:f1:7f: e8:66:c8:61:1d:9f:c1:24:10:ab:bd:24:1b:51:4f:d0:f9:76: 96:f7:4a:3a:ae:bf:41:5a:9b:7c:51:83:e5:62:6b:7f:ac:5b: 43:78:5d:6f:46:89:0e:6b:a6:4f:4d:46:4f:dd:70:94:2e:c0: 0d:18:6f:73:de:d3:ca:86:ab:0f:8b:72:7d:4b:af:1c:50:2f: ca:83:30:3c:c7:1d:86:db:f5:14:2d:a2:ca:fc:81:8d:af:9b: b1:8b:88:5f:ee:92:ee:42:3d:cc:df:6f:44:b5:e6:f8:e0:80: 42:c8:ce:c0:46:eb:ba:d4:8c:d1:29:b2:bf:53:b7:e8:86:41: 21:e3:e4:6e:6b:9d:95:a6:63:cd:b5:b4:5b:9b:d9:58:92:b0: c3:79:3d:c0:2f:69:8b:10:6a:aa:63:78:85:3f:80:7a:0b:5d: 0d:42:8b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqAkqhRP1ujhm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWI5YzAzYTAtZmZlOS00ZDc0LThiMDMtMjE4ZThhZTY4MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw8VEaY2Wi2kQr8WHe+ls2t9sDl5eotDll45 Qa6sUh2EzMI6NBwR+kDOzn7QNYh4hywWTqA4++F4HNeF12u4+9VdDn98N6rT4lXD E+9q7k8+8ZnjpiFV7oBe2mP5wr+BI3poiR1topH7HlKysaJCUtiF2qEUk2aHvJGe 3Le0nzOTGp9B5Ab+udDKf90mwZlxjPSyry+s2NgAhVAC65yx7NkYKTXX/XWFfzVZ pwo04GSQd+wiWruobEzxXqZjVmFVzOA6s2PRrTVzKtdGd680EdBEoChgaRZGLHav AxDpVjg9wjlvLpM5STqe4U59pfs+ZeATAkyd8WuuxJxeXS8howIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNmZFbuJn7FSDs3Q4u+L1XLPylxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvN2ZkOWY4NGEtMWE3OC0z ZTYyLTlhOTYtNjVkZDQ5Yzk1MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9yw5CGZ2qAZF5hDluUtXbSkZ231r8Pf/+iGaWCYX6GFuPgO97vBJw7 qb45VByBq2ATZwfXc9eJ1J081/GILomtK8FkhqAGPPYijFmG6UbnPy5tZicAMknx f+hmyGEdn8EkEKu9JBtRT9D5dpb3Sjquv0Fam3xRg+Via3+sW0N4XW9GiQ5rpk9N Rk/dcJQuwA0Yb3Pe08qGqw+Lcn1LrxxQL8qDMDzHHYbb9RQtosr8gY2vm7GLiF/u ku5CPczfb0S15vjggELIzsBG67rUjNEpsr9Tt+iGQSHj5G5rnZWmY821tFub2ViS sMN5PcAvaYsQaqpjeIU/gHoLXQ1Ci50= -----END CERTIFICATE-----Generated at Sat Sep 26 06:55:46 2026 by rpki-client