$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa File: 290e34cf-89f5-3494-ae58-7a9041d7d975.roa (raw, json) Hash identifier: KMXNJzjClRKV/Xlas9ILdJc3ycMbK8aPBCBo9IMja5A= Subject key identifier: 4E:EE:49:E8:21:43:65:57:83:59:93:3E:F6:45:10:A1:D5:A7:CC:55 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F30525F448D0E7578869B0EC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 63.142.144.0/20 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:5f:44:8d:0e:75:78:86:9b:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=ca5b1cbe-03e7-4a2c-9b70-a6b88eb60926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:93:e2:d9:b3:20:1a:91:a7:ac:4f:6f:42: 51:8a:38:51:41:5c:11:7f:41:e2:1b:4d:aa:2e:da: 51:ec:0a:65:b6:6a:3d:75:30:cf:7a:3f:51:c6:6b: 56:d8:36:1c:05:02:dd:45:2f:84:a2:d1:79:8f:33: 44:8c:56:26:08:55:f1:c3:9b:1a:22:f2:31:92:ae: a1:e9:16:02:34:cd:0b:67:a5:63:c0:07:54:ee:00: 4a:03:e1:74:b7:d2:1d:3a:50:30:78:8c:a4:27:a0: a3:9b:12:24:c0:66:2e:0f:d0:26:e5:73:9a:1b:37: b4:51:da:50:13:ee:03:08:3a:33:65:fd:5e:64:21: c1:0b:f7:43:5a:74:95:5f:70:d0:29:8a:ae:8f:c9: a9:bb:ec:3a:b1:bd:51:12:de:f5:cd:73:6b:e3:18: fc:59:22:64:d1:7c:10:a5:89:6c:fb:48:06:55:c9: 1b:3a:43:be:e9:e9:d5:de:0c:82:da:8c:0e:5e:f9: 1d:03:4d:69:46:9c:5a:da:07:2c:2c:a2:eb:89:7c: b5:3b:f6:ed:f1:d8:13:06:3a:fe:f3:9e:74:6e:b4: 1e:0f:6c:ee:46:54:b8:62:30:bd:0b:cb:10:6a:de: 74:5b:a5:20:01:48:29:ab:2f:ca:4c:3d:bf:c1:d8: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:49:E8:21:43:65:57:83:59:93:3E:F6:45:10:A1:D5:A7:CC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 63.142.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:65:27:88:e6:d7:9f:32:73:0b:0a:fc:3c:1e:f7:fe:49:22: de:1c:4f:2c:09:84:4b:ed:44:be:be:b7:eb:bb:2c:f1:4a:00: 48:70:b0:21:9a:20:6b:35:eb:50:87:7a:df:6c:a7:f8:84:04: 44:70:d0:4b:11:cb:a0:a7:40:9d:fa:07:84:08:e5:e5:01:13: 24:90:ae:d0:27:ef:a2:9f:94:32:7e:ce:9b:a9:12:62:74:91: 75:b6:61:88:92:aa:e8:ee:f0:e0:cf:0c:df:ed:39:53:1b:55: 17:49:a7:56:79:7e:45:c0:0b:d1:59:a1:1c:0b:17:82:06:74: a7:9b:bf:dc:89:50:04:e4:e7:92:a6:73:0b:5b:08:f7:67:67: c3:77:0a:85:38:0b:a6:98:10:08:0c:6f:12:2c:10:4b:6a:0a: e5:a5:05:72:96:98:bc:d0:7f:29:52:3c:18:d9:07:a2:bd:48: 02:fc:ef:36:b5:33:9b:da:55:4a:85:74:e4:40:01:46:6f:82: 41:3b:2d:aa:48:5e:bd:2a:3a:eb:c2:f8:d7:9b:5a:29:81:a8: e5:22:91:e7:88:eb:cc:51:af:19:9e:da:d2:42:a8:ee:e2:c1: 9b:4b:07:df:c0:9a:c7:43:be:7a:6a:c0:b6:76:a5:7a:48:43: 93:c4:2c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUl9EjQ51eIabDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2E1YjFjYmUtMDNlNy00YTJjLTliNzAtYTZiODhlYjYwOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot2T4tmzIBqRp6xPb0JRijhRQVwRf0HiG02q LtpR7Apltmo9dTDPej9RxmtW2DYcBQLdRS+EotF5jzNEjFYmCFXxw5saIvIxkq6h 6RYCNM0LZ6VjwAdU7gBKA+F0t9IdOlAweIykJ6CjmxIkwGYuD9Am5XOaGze0UdpQ E+4DCDozZf1eZCHBC/dDWnSVX3DQKYquj8mpu+w6sb1REt71zXNr4xj8WSJk0XwQ pYls+0gGVckbOkO+6enV3gyC2owOXvkdA01pRpxa2gcsLKLriXy1O/bt8dgTBjr+ 8550brQeD2zuRlS4YjC9C8sQat50W6UgAUgpqy/KTD2/wdhyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7uSeghQ2VXg1mTPvZFEKHVp8xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjkwZTM0Y2YtODlmNS0z NDk0LWFlNTgtN2E5MDQxZDdkOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP46QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVlJ4jm158ycwsK/Dwe9/5JIt4cTywJhEvtRL6+t+u7LPFKAEhwsCGa IGs161CHet9sp/iEBERw0EsRy6CnQJ36B4QI5eUBEySQrtAn76KflDJ+zpupEmJ0 kXW2YYiSquju8ODPDN/tOVMbVRdJp1Z5fkXAC9FZoRwLF4IGdKebv9yJUATk55Km cwtbCPdnZ8N3CoU4C6aYEAgMbxIsEEtqCuWlBXKWmLzQfylSPBjZB6K9SAL87za1 M5vaVUqFdORAAUZvgkE7LapIXr0qOuvC+NebWimBqOUikeeI68xRrxme2tJCqO7i wZtLB9/AmsdDvnpqwLZ2pXpIQ5PELL4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:26 2026 by rpki-client