$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa File: e82bbb73-20a9-3169-a22a-a9011b5a8001.roa (raw, json) Hash identifier: cfgN/GQXzPCLxw4CHjS+KRZf6NIdyobT9Plpdx+Ie/g= Subject key identifier: 66:C0:1A:82:99:9C:C3:C0:4A:D0:1F:58:6C:2C:07:E2:3E:A5:BD:64 Certificate issuer: /CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Certificate serial: 010D0C9F4328584F35E7C21448EADD053B3E3E80 Authority key identifier: 48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 812 IP address blocks: 142.146.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c2:14:48:ea:dd:05:3b:3e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=8facd9fc-c174-4ed3-b8f4-d0d3fdb78c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:74:83:cd:99:08:e2:9b:52:8c:33:d9:b0: ca:ee:f8:06:67:c9:ac:6c:86:12:ab:6d:34:c3:fa: cc:dd:85:63:cc:24:41:b6:c9:e8:25:c2:37:e5:e3: ee:e6:bb:09:37:fc:ae:da:ff:ab:d1:5c:f3:71:13: 42:0d:83:de:93:63:db:01:a8:e3:b9:e4:8f:b6:76: fb:0a:11:3e:90:27:08:38:97:77:35:4d:c3:5d:8e: bb:e7:66:c5:f2:16:86:9a:c4:55:26:8b:0b:45:f7: 31:c2:3f:7f:9f:83:ce:85:32:37:93:59:49:e6:b7: 99:c6:11:bf:8e:17:8e:f0:99:b3:4d:d0:25:af:ba: f6:07:45:89:40:21:15:13:8f:1b:a8:8b:c5:4e:80: ca:66:15:ba:55:9e:d7:32:de:3b:8b:24:22:fd:4e: 42:c7:45:8f:82:17:d6:90:9e:fc:c5:98:53:ff:d8: ef:64:c4:ba:d4:11:e2:98:eb:19:d0:97:3c:82:b9: 0d:1d:51:4e:b6:f6:15:a9:3c:8a:3f:e0:e9:a8:dd: dd:3b:28:b0:2c:03:e2:bd:72:19:04:e3:2a:91:06: be:0d:83:92:ff:0b:32:8f:74:7b:6b:03:3c:68:3d: 50:77:d0:2c:33:0c:da:55:64:ee:40:a3:d7:f9:46: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:1A:82:99:9C:C3:C0:4A:D0:1F:58:6C:2C:07:E2:3E:A5:BD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl X509v3 Authority Key Identifier: keyid:48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer sbgp-ipAddrBlock: critical IPv4: 142.146.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ab:0e:04:f7:bc:72:99:fe:08:58:9d:dc:d1:16:a0:74:af: 73:bf:3c:5d:e6:7c:ce:36:c6:cb:9f:17:b7:13:df:ec:15:a3: 85:04:ca:3b:48:85:64:4b:46:9d:29:61:e3:3b:18:f1:e8:18: 39:8a:db:1f:ac:61:23:ba:91:ac:16:50:ba:78:83:d7:b5:9a: fe:16:44:34:5c:be:7a:01:66:37:e1:2a:fa:5f:a6:3e:47:14: a7:c9:7a:14:f9:f9:9d:50:4e:76:50:a8:98:85:40:95:1c:9c: 0e:7a:19:fb:2b:f1:c1:87:2f:6f:69:42:dd:5c:2a:1b:40:c6: 39:f2:01:7b:36:57:6d:b1:8d:0f:3f:8a:e9:c8:e7:f8:0c:a4: ae:1b:f5:a9:86:13:20:05:ce:e6:5b:a4:45:8e:25:7f:3f:63: 6b:c3:64:fe:e4:ec:da:9f:49:91:0e:8e:c8:6f:ae:2f:32:66: f8:18:30:ac:8f:13:93:f4:ec:ad:31:d3:e3:bb:cf:45:0a:25: c7:1b:20:e8:3f:ce:6f:44:1b:72:b3:64:9d:42:79:ac:fe:7c: 7f:4c:91:79:59:7c:23:aa:67:e2:e5:cf:36:39:bd:83:a1:9d: 3d:b8:51:92:92:4a:fc:b8:b5:32:aa:83:1d:9e:c0:eb:86:f9: d2:f4:ee:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158IUSOrdBTs+PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0OWJlODYtYjVhNC00ODE0LTlmOTUtOWE3ZjcxZGUx ZDUwMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk OGZhY2Q5ZmMtYzE3NC00ZWQzLWI4ZjQtZDBkM2ZkYjc4YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pp0g82ZCOKbUowz2bDK7vgGZ8msbIYSq200 w/rM3YVjzCRBtsnoJcI35ePu5rsJN/yu2v+r0VzzcRNCDYPek2PbAajjueSPtnb7 ChE+kCcIOJd3NU3DXY6752bF8haGmsRVJosLRfcxwj9/n4POhTI3k1lJ5reZxhG/ jheO8JmzTdAlr7r2B0WJQCEVE48bqIvFToDKZhW6VZ7XMt47iyQi/U5Cx0WPghfW kJ78xZhT/9jvZMS61BHimOsZ0Jc8grkNHVFOtvYVqTyKP+DpqN3dOyiwLAPivXIZ BOMqkQa+DYOS/wsyj3R7awM8aD1Qd9AsMwzaVWTuQKPX+UYJUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbAGoKZnMPAStAfWGwsB+I+pb1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5 YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdmNzFkZTFkNTAvZTgyYmJiNzMtMjBhOS0z MTY5LWEyMmEtYTkwMTFiNWE4MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDY0OWJlODYtYjVhNC00ODE0LTlm OTUtOWE3ZjcxZGUxZDUwLzA2NDliZTg2LWI1YTQtNDgxNC05Zjk1LTlhN2Y3MWRl MWQ1MC5jcmwwHwYDVR0jBBgwFoAUSAfOlHEcrgT+0aHpdfpxGbzr56swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdm NzFkZTFkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKrDgT3vHKZ/ghYndzRFqB0r3O/PF3mfM42xsufF7cT3+wVo4UEyjtI hWRLRp0pYeM7GPHoGDmK2x+sYSO6kawWULp4g9e1mv4WRDRcvnoBZjfhKvpfpj5H FKfJehT5+Z1QTnZQqJiFQJUcnA56Gfsr8cGHL29pQt1cKhtAxjnyAXs2V22xjQ8/ iunI5/gMpK4b9amGEyAFzuZbpEWOJX8/Y2vDZP7k7NqfSZEOjshvri8yZvgYMKyP E5P07K0x0+O7z0UKJccbIOg/zm9EG3KzZJ1Ceaz+fH9MkXlZfCOqZ+LlzzY5vYOh nT24UZKSSvy4tTKqgx2ewOuG+dL07uI= -----END CERTIFICATE-----Generated at Sun Sep 20 20:37:18 2026 by rpki-client