$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/4cb64bbf-a01b-3ced-a5cd-8f1dd56d4c11.roa File: 4cb64bbf-a01b-3ced-a5cd-8f1dd56d4c11.roa (raw, json) Hash identifier: kH0GnVR4ZgMBsgsSYQMVGNBsQS8C4y5RSWz/1bNI7pw= Subject key identifier: 39:0B:AD:D5:2A:D1:4A:5A:76:68:D2:86:59:8C:C9:1A:EA:4C:0A:EE Certificate issuer: /CN=d7d016f0-601b-4110-a286-ec5d94b55026 Certificate serial: 010D0C9F4328584F454F7CCB1F5F47F302E3A2B0 Authority key identifier: 1E:DC:73:6B:7A:2F:09:6D:8C:39:34:66:0F:5F:EF:44:D9:F1:CF:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/4cb64bbf-a01b-3ced-a5cd-8f1dd56d4c11.roa Signing time: Wed 23 Sep 2026 13:26:23 +0000 ROA not before: Wed 23 Sep 2026 13:26:23 +0000 ROA not after: Tue 22 Dec 2026 14:26:23 +0000 asID: 394284 IP address blocks: 142.249.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/d7d016f0-601b-4110-a286-ec5d94b55026.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/d7d016f0-601b-4110-a286-ec5d94b55026.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:4f:7c:cb:1f:5f:47:f3:02:e3:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d016f0-601b-4110-a286-ec5d94b55026 Validity Not Before: Sep 23 13:26:23 2026 GMT Not After : Dec 22 14:26:23 2026 GMT Subject: CN=f7f50a17-7524-4e9a-a23c-ffedfb01a875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:10:0a:8b:6e:65:0a:f3:68:b9:75:1a:30: e6:4c:a3:20:33:c9:98:3b:bf:ec:ce:c7:cc:73:41: dc:31:19:13:83:fc:69:ec:2c:71:4d:03:5c:4e:db: ec:b4:ca:de:7f:82:03:65:6c:12:c2:2a:7e:74:24: ca:5f:80:43:5c:24:be:fe:e1:10:97:97:71:79:bd: 0c:d6:e5:90:c1:45:10:dd:92:bb:a4:06:04:f5:03: 85:d3:b4:a3:8f:c3:22:9e:47:29:a3:44:01:30:72: 8a:80:61:29:e0:db:3b:95:6a:2a:d2:86:98:fc:6f: df:c1:88:04:1f:9f:f6:9c:51:52:a8:1e:af:f8:35: 80:bb:02:ac:5f:77:15:57:b8:49:30:00:c0:52:9c: 2e:7e:e5:5f:d0:17:d9:2a:08:92:5e:6d:11:55:1b: 4c:9d:72:a8:64:8d:82:0e:56:77:ed:64:2e:67:c9: 0b:60:76:e7:b7:1b:22:e3:18:57:e8:20:d1:06:9f: 01:da:cc:c8:bb:80:c5:9b:21:d9:8d:d8:60:c7:c0: ff:07:97:ba:33:d4:3e:e2:9f:fb:1f:12:13:a2:23: 9d:e8:51:d1:a8:0b:6e:74:d9:5a:74:7a:f2:88:59: 11:30:a9:91:3a:06:7c:05:64:c4:db:68:2e:0c:fd: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0B:AD:D5:2A:D1:4A:5A:76:68:D2:86:59:8C:C9:1A:EA:4C:0A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/4cb64bbf-a01b-3ced-a5cd-8f1dd56d4c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026/d7d016f0-601b-4110-a286-ec5d94b55026.crl X509v3 Authority Key Identifier: keyid:1E:DC:73:6B:7A:2F:09:6D:8C:39:34:66:0F:5F:EF:44:D9:F1:CF:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d7d016f0-601b-4110-a286-ec5d94b55026.cer sbgp-ipAddrBlock: critical IPv4: 142.249.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b0:12:fd:84:4d:1a:d3:c2:fa:23:19:cd:ca:d0:ee:a8:1d: 2d:8b:14:97:58:a7:c0:09:49:7c:4d:07:b2:45:09:87:29:fa: 57:08:5f:84:cf:4b:a6:9e:03:3f:f9:c5:f9:06:7a:77:45:ae: 78:ce:45:72:f6:d0:77:b9:81:ac:d8:c3:b9:1c:75:40:d3:7d: 0f:c6:3f:83:33:10:73:a7:48:3d:72:ba:63:c6:5c:5c:db:35: e3:16:a3:e4:9d:3f:8a:1a:5c:91:39:83:86:15:3c:77:82:e8: 0e:59:67:30:a8:36:14:b0:0b:12:bd:62:b9:85:68:d1:cd:73: fd:03:66:a2:2b:8e:17:01:c7:32:23:3c:4f:9b:17:d2:a1:1b: 83:24:b9:68:39:a0:29:f1:fa:5d:b5:f4:e6:ee:9a:e4:ac:d4: 2a:5a:c2:b1:4b:6a:d8:6c:81:f5:19:72:c9:cd:41:81:d8:8b: 10:d5:bd:fd:8b:28:fa:20:3d:9c:a7:3b:4a:24:7f:10:3a:7a: c2:b1:09:31:3d:c0:7e:3a:94:03:19:93:ea:7e:37:23:73:fa: 6a:68:eb:d4:ac:b8:cc:f7:16:ae:b2:16:60:94:af:a1:35:3e: 4b:f6:46:c8:26:88:79:73:74:8d:59:fa:a4:34:47:ec:df:fa: 9a:67:e5:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FT3zLH19H8wLjorAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkMDE2ZjAtNjAxYi00MTEwLWEyODYtZWM1ZDk0YjU1 MDI2MB4XDTI2MDkyMzEzMjYyM1oXDTI2MTIyMjE0MjYyM1owLzEtMCsGA1UEAxMk ZjdmNTBhMTctNzUyNC00ZTlhLWEyM2MtZmZlZGZiMDFhODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFcQCotuZQrzaLl1GjDmTKMgM8mYO7/szsfM c0HcMRkTg/xp7CxxTQNcTtvstMref4IDZWwSwip+dCTKX4BDXCS+/uEQl5dxeb0M 1uWQwUUQ3ZK7pAYE9QOF07Sjj8Minkcpo0QBMHKKgGEp4Ns7lWoq0oaY/G/fwYgE H5/2nFFSqB6v+DWAuwKsX3cVV7hJMADAUpwufuVf0BfZKgiSXm0RVRtMnXKoZI2C DlZ37WQuZ8kLYHbntxsi4xhX6CDRBp8B2szIu4DFmyHZjdhgx8D/B5e6M9Q+4p/7 HxIToiOd6FHRqAtudNladHryiFkRMKmROgZ8BWTE22guDP1iWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkLrdUq0UpadmjShlmMyRrqTAruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9kN2Qw MTZmMC02MDFiLTQxMTAtYTI4Ni1lYzVkOTRiNTUwMjYvNGNiNjRiYmYtYTAxYi0z Y2VkLWE1Y2QtOGYxZGQ1NmQ0YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZDdkMDE2ZjAtNjAxYi00MTEwLWEy ODYtZWM1ZDk0YjU1MDI2L2Q3ZDAxNmYwLTYwMWItNDExMC1hMjg2LWVjNWQ5NGI1 NTAyNi5jcmwwHwYDVR0jBBgwFoAUHtxza3ovCW2MOTRmD1/vRNnxz2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9kN2QwMTZmMC02MDFiLTQxMTAtYTI4Ni1lYzVk OTRiNTUwMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2wEv2ETRrTwvojGc3K0O6oHS2LFJdYp8AJSXxNB7JFCYcp+lcIX4TP S6aeAz/5xfkGendFrnjORXL20He5gazYw7kcdUDTfQ/GP4MzEHOnSD1yumPGXFzb NeMWo+SdP4oaXJE5g4YVPHeC6A5ZZzCoNhSwCxK9YrmFaNHNc/0DZqIrjhcBxzIj PE+bF9KhG4MkuWg5oCnx+l219ObumuSs1CpawrFLathsgfUZcsnNQYHYixDVvf2L KPogPZynO0okfxA6esKxCTE9wH46lAMZk+p+NyNz+mpo69SsuMz3Fq6yFmCUr6E1 Pkv2RsgmiHlzdI1Z+qQ0R+zf+ppn5dU= -----END CERTIFICATE-----Generated at Sat Sep 26 15:15:30 2026 by rpki-client