$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/bb5462e2-b3db-322e-aa17-39e7952f9120.roa File: bb5462e2-b3db-322e-aa17-39e7952f9120.roa (raw, json) Hash identifier: FkgxH148naOiMXlraVJS3gWrYhOOsnMuzZ3XMcToU6U= Subject key identifier: 57:AC:F7:25:AF:9F:59:BF:B6:DD:7E:39:16:2F:AB:AE:72:BA:EA:D9 Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584F331D1A2B362D08DD86A92140 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/bb5462e2-b3db-322e-aa17-39e7952f9120.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 4543 IP address blocks: 170.149.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1a:2b:36:2d:08:dd:86:a9:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=d0b9c2fa-8f2e-4d66-a48c-a1b86ff766b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:62:ee:0e:15:79:36:6a:6e:3d:28:f4:36: ff:93:e2:9e:c5:71:d4:73:b1:f4:4d:97:f4:b5:83: 59:95:a6:8d:17:5b:c4:83:cd:b4:23:ef:d8:f0:77: b3:39:b7:63:77:e1:44:c6:d8:5d:84:ef:21:18:b0: db:0c:4a:bd:85:68:48:9b:c5:79:23:08:a3:ad:d1: 78:07:c4:3b:6b:41:1c:d6:53:fb:94:79:0e:31:15: fb:e1:d5:51:4d:68:1f:1d:eb:83:05:25:ff:12:b9: ec:3f:44:24:65:f4:de:30:fb:1b:cd:7c:2a:ad:c7: d3:15:7d:9c:22:eb:77:0e:7d:4a:2b:2a:d8:ab:d3: 29:8f:33:5b:cd:54:ec:0b:74:06:c8:7b:44:7b:a9: b1:67:bd:9b:35:36:28:a4:99:17:a3:e5:74:cf:e2: 81:9b:1a:18:f6:de:86:85:89:57:ab:78:8a:99:83: 9b:38:46:0f:37:9f:e7:89:a8:5c:fe:a3:4a:a8:84: 96:19:7a:a4:06:7d:33:2a:de:55:1d:7a:ad:b5:1b: d4:18:50:dc:80:b0:e0:60:38:74:88:c2:af:f9:6a: f8:bd:f3:92:62:4a:e4:c8:ef:63:f4:ff:80:7f:8f: 51:8f:40:c4:b6:f1:98:1e:53:e8:d8:85:8a:21:d6: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AC:F7:25:AF:9F:59:BF:B6:DD:7E:39:16:2F:AB:AE:72:BA:EA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/bb5462e2-b3db-322e-aa17-39e7952f9120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a1:10:63:e6:be:f5:e1:5f:79:3b:92:ee:de:d2:82:75:6a: f3:13:1a:b9:4b:f2:0a:7c:98:91:40:80:8c:04:29:06:7d:eb: c6:f7:83:3c:82:a5:b5:fd:9b:f7:07:bc:dc:b4:e5:1a:a5:c4: 31:e8:02:9f:c8:26:5d:e7:fd:03:33:04:d9:ec:bd:59:24:20: 95:16:0c:80:32:a5:12:ba:c6:11:be:81:ce:e8:40:28:df:42: 21:4a:2b:5c:bc:68:ed:70:b0:1b:c7:0f:29:05:6b:d1:17:68: 41:7f:4c:4d:01:bf:6a:b4:b6:b8:31:56:20:b7:7a:6a:60:c4: 9a:ea:bd:8b:25:8b:b1:82:e6:8e:ca:a1:d5:91:cc:64:84:71: 70:65:fd:81:77:d6:32:bf:d2:59:2f:fb:90:a7:d8:5b:c7:c8: a1:2a:32:54:5e:71:78:7f:91:7e:45:da:5b:5d:d8:88:85:98: 38:7c:49:bf:44:90:ab:0c:38:5b:ab:b5:7a:bf:c9:3e:25:b3: 35:8f:3f:36:4d:5f:98:de:27:71:a8:e9:ba:dd:e6:d5:2d:4c: 8c:b0:ac:45:16:fb:19:21:fa:fb:c7:39:b4:83:e8:78:fa:29: ec:f1:e7:47:47:cb:0f:d7:d6:11:69:19:dc:aa:90:47:05:b1: 21:74:21:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRorNi0I3YapIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDBiOWMyZmEtOGYyZS00ZDY2LWE0OGMtYTFiODZmZjc2NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfli7g4VeTZqbj0o9Db/k+KexXHUc7H0TZf0 tYNZlaaNF1vEg820I+/Y8HezObdjd+FExthdhO8hGLDbDEq9hWhIm8V5IwijrdF4 B8Q7a0Ec1lP7lHkOMRX74dVRTWgfHeuDBSX/ErnsP0QkZfTeMPsbzXwqrcfTFX2c Iut3Dn1KKyrYq9MpjzNbzVTsC3QGyHtEe6mxZ72bNTYopJkXo+V0z+KBmxoY9t6G hYlXq3iKmYObOEYPN5/niahc/qNKqISWGXqkBn0zKt5VHXqttRvUGFDcgLDgYDh0 iMKv+Wr4vfOSYkrkyO9j9P+Af49Rj0DEtvGYHlPo2IWKIdbDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFes9yWvn1m/tt1+ORYvq65yuurZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvYmI1NDYyZTItYjNkYi0z MjJlLWFhMTctMzllNzk1MmY5MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOhEGPmvvXhX3k7ku7e0oJ1avMTGrlL8gp8mJFAgIwEKQZ968b3gzyC pbX9m/cHvNy05RqlxDHoAp/IJl3n/QMzBNnsvVkkIJUWDIAypRK6xhG+gc7oQCjf QiFKK1y8aO1wsBvHDykFa9EXaEF/TE0Bv2q0trgxViC3empgxJrqvYsli7GC5o7K odWRzGSEcXBl/YF31jK/0lkv+5Cn2FvHyKEqMlRecXh/kX5F2ltd2IiFmDh8Sb9E kKsMOFurtXq/yT4lszWPPzZNX5jeJ3Go6brd5tUtTIywrEUW+xkh+vvHObSD6Hj6 Kezx50dHyw/X1hFpGdyqkEcFsSF0IdI= -----END CERTIFICATE-----Generated at Wed Sep 23 13:25:11 2026 by rpki-client