$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa File: 3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa (raw, json) Hash identifier: Ley5HBkAAwWKo5ohydF9EnCxg1YGZVkwVnuMXjYFato= Subject key identifier: 43:54:A7:99:E8:9A:F9:98:95:2B:16:EE:3F:EE:13:59:D2:41:AC:AE Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584F71ED89B77D6C248218F02780 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 46408 IP address blocks: 162.212.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:89:b7:7d:6c:24:82:18:f0:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=1925168b-c01f-49e3-aaa9-c1886610d5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:d9:79:e2:58:f5:28:ea:b1:e9:90:d0:35: 5c:08:48:0f:35:dc:7a:9e:bd:ea:fb:59:87:3e:90: 67:55:cd:be:0d:32:b6:2c:b0:17:e1:66:20:4e:23: 50:1b:fc:63:06:69:0d:00:58:e8:c3:e4:87:92:ca: 14:05:68:de:80:dc:96:5e:23:e4:6a:8b:6c:ae:34: 14:f8:b7:3c:2b:4b:bf:7d:db:f7:6e:0f:b2:f2:2a: f3:04:fe:7e:34:28:b4:20:8f:f1:1d:d1:cb:82:5d: 41:92:f3:d8:a1:96:9b:bf:db:95:7e:1f:d7:69:e8: 4a:6e:87:42:31:ef:d6:95:7d:3a:7d:2a:e6:6d:1f: 49:a3:92:a3:78:45:a2:00:af:33:85:8e:cf:33:5c: a5:20:e4:59:23:79:5d:ed:d2:33:0d:f7:b8:46:79: 0b:31:75:fe:ee:38:97:d5:5e:d0:75:bc:7c:6d:46: 17:b3:e2:3e:73:2c:5e:08:71:f9:ec:6b:12:57:e8: 8c:7c:c7:b7:e8:79:70:c1:87:dd:0b:51:d0:0d:be: 81:ea:ff:59:a3:3c:c5:5b:cd:5b:bd:93:77:e7:0c: 67:63:56:f0:b9:52:35:bc:cf:c8:73:45:31:b5:cb: 0d:84:07:5f:a3:09:99:49:f1:59:28:da:45:12:40: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:A7:99:E8:9A:F9:98:95:2B:16:EE:3F:EE:13:59:D2:41:AC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 162.212.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3c:86:55:e8:55:11:81:eb:cd:d3:55:45:64:42:f2:65:18: d7:5f:ed:a9:c5:7b:4a:30:d7:07:7a:6f:e9:f7:2e:5a:ef:14: 15:42:ae:4a:3b:e7:dc:61:e6:cb:85:21:d5:e7:1f:96:75:f2: df:31:b4:ce:c1:c6:6f:57:e2:25:36:71:ea:3f:8c:5e:66:88: 04:48:5e:a5:ca:d0:3a:20:73:1d:4b:50:a3:d6:e3:4b:a8:8e: fc:41:03:68:9c:45:9a:8d:91:f7:8c:77:71:79:e3:c7:f4:9d: 19:aa:6e:1c:67:a5:09:e8:5b:a1:bd:b6:db:54:43:ae:48:0a: 0b:03:d3:ea:42:51:4d:4f:56:35:d5:8c:fc:dd:95:c2:97:1b: 0c:16:23:2b:08:3b:c8:cf:46:6b:3c:4d:fc:20:da:8b:fa:8f: 83:9a:d3:9b:de:ad:66:17:13:65:43:e6:7d:96:ec:5e:46:76: f2:e0:10:11:24:49:86:25:e7:29:94:c0:44:4c:7c:21:a0:aa: 77:6d:a9:07:82:07:e5:7c:95:41:de:44:02:18:04:49:6b:16: 64:66:3a:29:07:f5:d6:76:4e:d6:5a:1b:06:0f:31:3c:ba:b4: 63:01:0f:90:32:60:6d:62:31:6f:d6:2d:49:b2:95:93:23:d5: 49:26:6f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Ym3fWwkghjwJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MTkyNTE2OGItYzAxZi00OWUzLWFhYTktYzE4ODY2MTBkNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqHZeeJY9SjqsemQ0DVcCEgPNdx6nr3q+1mH PpBnVc2+DTK2LLAX4WYgTiNQG/xjBmkNAFjow+SHksoUBWjegNyWXiPkaotsrjQU +Lc8K0u/fdv3bg+y8irzBP5+NCi0II/xHdHLgl1BkvPYoZabv9uVfh/XaehKbodC Me/WlX06fSrmbR9Jo5KjeEWiAK8zhY7PM1ylIORZI3ld7dIzDfe4RnkLMXX+7jiX 1V7Qdbx8bUYXs+I+cyxeCHH57GsSV+iMfMe36HlwwYfdC1HQDb6B6v9ZozzFW81b vZN35wxnY1bwuVI1vM/Ic0UxtcsNhAdfowmZSfFZKNpFEkAUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENUp5nomvmYlSsW7j/uE1nSQayuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvM2ExZDBlMjctMWFkNS0z MDU2LWFkOTYtYWNlZTQ5OTM2ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs8hlXoVRGB683TVUVkQvJlGNdf7anFe0ow1wd6b+n3LlrvFBVCrko7 59xh5suFIdXnH5Z18t8xtM7Bxm9X4iU2ceo/jF5miARIXqXK0Dogcx1LUKPW40uo jvxBA2icRZqNkfeMd3F548f0nRmqbhxnpQnoW6G9tttUQ65ICgsD0+pCUU1PVjXV jPzdlcKXGwwWIysIO8jPRms8Tfwg2ov6j4Oa05verWYXE2VD5n2W7F5GdvLgEBEk SYYl5ymUwERMfCGgqndtqQeCB+V8lUHeRAIYBElrFmRmOikH9dZ2TtZaGwYPMTy6 tGMBD5AyYG1iMW/WLUmylZMj1Ukmb1I= -----END CERTIFICATE-----Generated at Thu Oct 15 03:34:21 2026 by rpki-client