$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/643466da-6f46-3f1c-8937-1f775cbe8034.roa File: 643466da-6f46-3f1c-8937-1f775cbe8034.roa (raw, json) Hash identifier: Dccf5C7fx9tDqoVEjfiv2YynN31ncXSzPMEiEqzDlLs= Subject key identifier: 2A:34:A4:6D:06:E2:71:BD:78:D6:AA:3D:13:13:4B:31:02:7A:C0:F0 Certificate issuer: /CN=1a500574-9f04-4e23-9ecf-075f2c02835a Certificate serial: 010D0C9F4328584F726F6F7D33EFC2B9DD530880 Authority key identifier: E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/643466da-6f46-3f1c-8937-1f775cbe8034.roa Signing time: Fri 09 Oct 2026 17:22:08 +0000 ROA not before: Fri 09 Oct 2026 17:22:08 +0000 ROA not after: Thu 07 Jan 2027 18:22:08 +0000 asID: 399460 IP address blocks: 142.228.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:6f:6f:7d:33:ef:c2:b9:dd:53:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a500574-9f04-4e23-9ecf-075f2c02835a Validity Not Before: Oct 9 17:22:08 2026 GMT Not After : Jan 7 18:22:08 2027 GMT Subject: CN=718f7c9d-0c47-4c11-bcf7-7fb407a0318c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:1c:5b:d6:36:74:52:f5:05:5e:da:63:21: db:05:69:76:98:42:19:25:57:c2:cf:d0:d2:b9:b9: 3b:0e:1d:30:52:c8:c9:df:8a:0e:07:9a:23:17:7e: b6:3c:fd:2e:63:c6:07:d2:d0:5b:01:19:a3:06:f9: 3f:b1:40:0b:06:5b:18:69:4a:0d:1e:bf:b0:8e:6a: 56:75:d6:ce:ba:db:34:ba:be:2e:ea:8e:a2:81:cf: 93:40:ca:cd:70:92:c4:18:46:32:13:51:22:a5:53: 7f:2c:eb:ce:a4:29:07:34:7a:b2:52:78:db:5b:10: e7:32:70:7d:f1:c4:13:2d:c8:e8:ed:64:35:85:a1: ce:2a:af:88:fb:47:e0:b8:93:bf:5c:67:7d:0a:5a: 81:3b:a4:18:4e:6a:7b:10:42:3a:3a:49:d2:44:8b: 7b:02:55:47:2d:56:d7:fd:8e:2b:4c:1e:da:f1:2a: 94:a2:0c:4c:60:c4:c9:7c:8d:66:f8:f5:c1:0e:63: ad:6f:fa:14:56:e9:8e:63:65:f1:65:63:6b:40:82: fc:a6:4b:c6:77:06:1b:cc:a0:e5:3d:bd:ad:0c:cd: 01:4f:c2:b7:7d:c2:66:1a:23:02:e6:1b:0f:7a:24: 34:40:9c:52:2b:e8:03:6f:13:8b:57:4f:99:05:ed: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:34:A4:6D:06:E2:71:BD:78:D6:AA:3D:13:13:4B:31:02:7A:C0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/643466da-6f46-3f1c-8937-1f775cbe8034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl X509v3 Authority Key Identifier: keyid:E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer sbgp-ipAddrBlock: critical IPv4: 142.228.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:42:8b:95:cc:51:2e:2b:f3:99:37:66:d0:0f:cb:4a:bd:b0: 05:a1:59:04:49:94:20:3f:5d:df:0e:af:12:55:70:0f:50:82: 84:1b:22:6f:ae:00:c8:27:1c:d9:fa:a5:e2:3c:64:d7:fc:7e: 8c:b7:11:1a:ce:ea:cb:6b:fa:a4:17:45:4d:7b:db:5d:61:59: 48:fb:d4:f6:88:a0:17:fa:c5:14:fe:e1:ae:a4:ee:9a:0f:c3: f8:90:19:f9:1d:66:5a:ce:93:df:7a:b6:ba:b5:56:9e:23:8a: 3c:54:b7:04:36:df:37:10:a1:9f:33:47:61:e2:08:fe:42:8f: 08:6f:bf:68:f9:69:14:1f:19:ba:df:ae:1c:96:72:0e:6e:bb: a0:d7:a3:3a:ea:f5:54:f6:45:ee:c7:b6:b1:0f:b0:c7:b8:ad: f4:e8:98:50:39:64:94:be:65:13:69:6f:6e:ae:7f:18:e5:39: b1:e2:20:f4:58:0d:47:b1:dc:97:15:1d:e8:4f:dc:0c:2d:db: f1:3b:53:64:38:57:fb:8e:d3:fa:20:09:42:c6:f6:64:57:67: 2f:93:60:6d:d4:e4:7b:b2:83:e0:84:82:0e:e2:1f:5e:b1:ec: f8:a9:5f:40:45:d1:0c:15:f4:2f:60:94:a0:de:b8:51:7c:bc: dd:45:fb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yb299M+/Cud1TCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE1MDA1NzQtOWYwNC00ZTIzLTllY2YtMDc1ZjJjMDI4 MzVhMB4XDTI2MTAwOTE3MjIwOFoXDTI3MDEwNzE4MjIwOFowLzEtMCsGA1UEAxMk NzE4ZjdjOWQtMGM0Ny00YzExLWJjZjctN2ZiNDA3YTAzMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+8cW9Y2dFL1BV7aYyHbBWl2mEIZJVfCz9DS ubk7Dh0wUsjJ34oOB5ojF362PP0uY8YH0tBbARmjBvk/sUALBlsYaUoNHr+wjmpW ddbOuts0ur4u6o6igc+TQMrNcJLEGEYyE1EipVN/LOvOpCkHNHqyUnjbWxDnMnB9 8cQTLcjo7WQ1haHOKq+I+0fguJO/XGd9ClqBO6QYTmp7EEI6OknSRIt7AlVHLVbX /Y4rTB7a8SqUogxMYMTJfI1m+PXBDmOtb/oUVumOY2XxZWNrQIL8pkvGdwYbzKDl Pb2tDM0BT8K3fcJmGiMC5hsPeiQ0QJxSK+gDbxOLV0+ZBe2mYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo0pG0G4nG9eNaqPRMTSzECesDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYTUw MDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVmMmMwMjgzNWEvNjQzNDY2ZGEtNmY0Ni0z ZjFjLTg5MzctMWY3NzVjYmU4MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWE1MDA1NzQtOWYwNC00ZTIzLTll Y2YtMDc1ZjJjMDI4MzVhLzFhNTAwNTc0LTlmMDQtNGUyMy05ZWNmLTA3NWYyYzAy ODM1YS5jcmwwHwYDVR0jBBgwFoAU4CbZe7kAGogJ6fD7RAhwhd0umO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYTUwMDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVm MmMwMjgzNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdCi5XMUS4r85k3ZtAPy0q9sAWhWQRJlCA/Xd8OrxJVcA9QgoQbIm+u AMgnHNn6peI8ZNf8foy3ERrO6str+qQXRU17211hWUj71PaIoBf6xRT+4a6k7poP w/iQGfkdZlrOk996trq1Vp4jijxUtwQ23zcQoZ8zR2HiCP5Cjwhvv2j5aRQfGbrf rhyWcg5uu6DXozrq9VT2Re7HtrEPsMe4rfTomFA5ZJS+ZRNpb26ufxjlObHiIPRY DUex3JcVHehP3Awt2/E7U2Q4V/uO0/ogCULG9mRXZy+TYG3U5Huyg+CEgg7iH16x 7PipX0BF0QwV9C9glKDeuFF8vN1F+/o= -----END CERTIFICATE-----Generated at Thu Nov 5 17:02:45 2026 by rpki-client