$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa File: f86d50b4-8dd3-39e0-b952-412aff84b82f.roa (raw, json) Hash identifier: 1mkaq/88f4f5ZlqR51962/VxhR4OXCN76JcuDnC4HLs= Subject key identifier: 69:B8:D5:FB:75:D1:B7:E9:9D:5D:B6:F3:26:71:42:F0:FB:4B:64:DA Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584F20F7A7E6FA9615793C3B85BE Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 162.223.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a7:e6:fa:96:15:79:3c:3b:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=530e655f-8104-4327-ac6a-4a9b43db94e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:ab:3e:71:48:48:c4:a6:06:4d:a5:1c:9e: 85:99:14:4a:f8:48:f2:b0:12:39:c2:28:65:92:2d: e4:56:eb:54:ae:71:fc:0a:59:83:cc:cf:1a:6c:64: 04:ce:09:d5:20:c0:e0:f9:3a:5a:1e:2a:6e:45:36: ef:55:06:22:03:38:f5:db:9b:ea:26:eb:85:41:6a: b1:e8:ba:9c:ad:b3:57:8e:08:eb:70:8a:94:79:1f: db:d2:9a:f8:9d:a4:0e:d4:c9:38:78:65:51:4d:7c: ef:b8:2e:f6:a1:78:60:b9:cd:7a:5b:f5:15:14:86: 96:a1:d9:8d:56:12:a9:99:fd:46:11:f4:a6:c1:e8: 42:96:08:f9:85:50:fc:4a:b9:02:eb:9c:ab:40:59: e2:44:cc:a8:db:00:97:7d:6b:61:ad:31:9a:8a:80: 0d:ea:4b:85:4c:fc:55:f3:a3:db:54:32:55:b4:03: f9:b3:bd:43:39:be:3e:91:52:8b:b6:9d:ff:7f:59: a8:01:54:c3:23:d5:6a:d1:9b:76:1f:91:1f:9e:7e: 5a:4e:e3:11:5b:87:8b:81:75:be:0c:fe:be:42:75: 96:09:4d:6c:64:54:d3:85:f5:9b:f7:4d:4e:46:79: 9d:59:9d:03:1b:6d:a2:a9:31:cf:ed:51:13:07:ba: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B8:D5:FB:75:D1:B7:E9:9D:5D:B6:F3:26:71:42:F0:FB:4B:64:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 162.223.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:01:77:42:8c:cc:18:a0:80:05:39:57:08:50:4d:84:6a:7f: a9:2b:21:cf:fb:b6:bf:2f:a7:1e:84:9e:8c:a1:72:72:6b:f7: a7:f2:aa:83:59:d7:76:26:c9:9c:c2:14:e5:07:e5:f6:d3:aa: 5d:41:f1:77:fe:c9:5a:27:f3:0d:01:ad:6a:95:0a:e0:90:7d: 96:f5:a1:39:5c:a2:7d:84:62:16:7e:c4:a9:b1:1e:81:e3:3e: 10:2e:87:12:55:b9:e2:2a:b4:88:c1:84:08:e0:e5:db:db:a7: 4e:2d:a5:10:fd:fa:04:28:f3:39:2a:dc:14:43:9a:d9:91:2f: 1c:11:ee:90:35:d6:6c:bd:cf:cb:69:65:0a:4b:8b:5f:62:11: d3:2b:b6:4c:52:67:11:f5:36:02:61:d1:e4:19:65:6b:b7:ac: d4:27:1f:d2:94:ba:07:ad:2f:9d:99:26:0d:72:55:f2:a9:9c: c5:5c:c5:b2:4f:ed:67:44:8d:0e:a9:ad:21:6b:15:e8:ef:99: 29:e9:42:2e:f1:85:fb:36:86:ee:76:b4:e6:07:26:7e:ff:31: 35:15:85:44:20:41:e6:c3:ac:29:c4:9c:05:da:60:e7:3b:59: f1:5d:db:c4:ee:88:8f:42:bc:73:89:8f:58:54:48:41:bb:21: 78:eb:d3:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96fm+pYVeTw7hb4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTMwZTY1NWYtODEwNC00MzI3LWFjNmEtNGE5YjQzZGI5NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDWrPnFISMSmBk2lHJ6FmRRK+EjysBI5wihl ki3kVutUrnH8ClmDzM8abGQEzgnVIMDg+TpaHipuRTbvVQYiAzj125vqJuuFQWqx 6LqcrbNXjgjrcIqUeR/b0pr4naQO1Mk4eGVRTXzvuC72oXhguc16W/UVFIaWodmN VhKpmf1GEfSmwehClgj5hVD8SrkC65yrQFniRMyo2wCXfWthrTGaioAN6kuFTPxV 86PbVDJVtAP5s71DOb4+kVKLtp3/f1moAVTDI9Vq0Zt2H5Efnn5aTuMRW4eLgXW+ DP6+QnWWCU1sZFTThfWb901ORnmdWZ0DG22iqTHP7VETB7rWDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm41ft10bfpnV228yZxQvD7S2TaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZjg2ZDUwYjQtOGRkMy0z OWUwLWI5NTItNDEyYWZmODRiODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoBd0KMzBiggAU5VwhQTYRqf6krIc/7tr8vpx6EnoyhcnJr96fyqoNZ 13YmyZzCFOUH5fbTql1B8Xf+yVon8w0BrWqVCuCQfZb1oTlcon2EYhZ+xKmxHoHj PhAuhxJVueIqtIjBhAjg5dvbp04tpRD9+gQo8zkq3BRDmtmRLxwR7pA11my9z8tp ZQpLi19iEdMrtkxSZxH1NgJh0eQZZWu3rNQnH9KUugetL52ZJg1yVfKpnMVcxbJP 7WdEjQ6prSFrFejvmSnpQi7xhfs2hu52tOYHJn7/MTUVhUQgQebDrCnEnAXaYOc7 WfFd28TuiI9CvHOJj1hUSEG7IXjr04U= -----END CERTIFICATE-----Generated at Mon Sep 21 13:39:36 2026 by rpki-client