$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9302124a-2dc0-3130-a249-9d344e09e85e.roa File: 9302124a-2dc0-3130-a249-9d344e09e85e.roa (raw, json) Hash identifier: ykhPpXqmBCcUil1ujq+9mkhYqF9H9PDnMT19bxcR8lc= Subject key identifier: 7A:CC:E8:2D:21:F0:93:02:57:76:09:56:AF:A3:3C:E7:A4:AF:31:D5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498B7FFC2E6E4E8CBB993680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9302124a-2dc0-3130-a249-9d344e09e85e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43009 IP address blocks: 149.5.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:7f:fc:2e:6e:4e:8c:bb:99:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a1ac289-ae9a-485a-aaf5-24809354be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:e9:9a:2f:31:52:a0:78:ef:4e:a6:dd:07: 49:92:c7:3c:2b:7b:fd:11:eb:a3:7f:68:a8:ed:2e: e6:46:dc:9b:3a:56:83:fa:90:44:85:f3:ff:42:12: 56:ed:23:1d:15:83:ee:cf:dc:09:91:f5:26:ee:98: a0:88:ea:44:b8:de:2e:97:5f:f8:69:58:80:c5:db: 0a:4e:f2:da:a9:89:ec:3b:6d:f0:0e:55:58:8f:39: 6f:4a:60:8f:74:38:1c:60:2e:02:2f:c5:c7:80:16: a9:a2:cf:54:11:0b:c0:26:6d:72:27:46:49:34:52: f3:87:b1:1d:08:72:01:cc:87:3e:06:4a:1e:9c:e4: ee:5a:ae:b7:61:0e:1c:88:26:d1:75:84:51:48:16: f7:74:14:cd:68:00:52:18:a0:1f:16:93:d7:33:92: b9:1d:fd:10:b6:8a:45:e5:52:80:5c:f0:bf:fc:05: 45:cc:df:5d:52:db:09:97:13:a1:9d:e0:03:7c:d7: ce:47:41:ad:92:60:24:ee:7a:3e:16:79:4c:bd:e5: 8a:94:8d:f4:69:45:d0:6f:29:8d:df:a3:7c:6f:55: cb:4f:5c:e1:97:54:da:50:d2:95:d3:5a:2c:52:e0: 01:0f:3d:f5:c3:8a:9f:99:a3:4c:e4:3a:2f:05:c1: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:E8:2D:21:F0:93:02:57:76:09:56:AF:A3:3C:E7:A4:AF:31:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9302124a-2dc0-3130-a249-9d344e09e85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.5.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6b:c0:bc:8b:ea:da:95:6f:ce:51:28:92:d1:21:f4:70:c0: a8:11:7e:62:5a:b9:8b:af:bd:20:0a:c8:ba:15:fe:8a:40:0e: f8:14:fd:e0:ee:2b:53:df:aa:ba:cb:f8:69:14:cb:6d:9b:8b: 5b:93:2c:01:d1:76:1b:dc:d2:9e:08:1a:8c:ad:69:94:19:18: ff:7c:04:61:c2:53:59:99:d3:73:9d:94:a4:47:c1:35:30:4f: 33:e1:6f:11:23:73:8f:1e:d7:2f:05:10:ba:a1:26:f4:91:c1: f7:01:33:4c:fe:bc:c2:17:d3:ee:09:dc:6c:11:11:24:5f:e9: ce:59:6d:12:1e:c3:10:86:b7:b8:c8:59:05:ef:43:89:ac:8b: 37:62:b9:67:45:1c:90:15:0f:98:5e:46:93:52:dd:c1:c4:b0: c5:62:96:ce:0f:2a:7e:46:37:7f:13:6b:dd:4c:e8:a5:c5:db: 3b:20:4c:96:1b:c8:bc:8f:10:15:66:3a:6a:1c:48:a9:39:8b: 6d:99:15:70:43:7e:ea:98:a5:96:fd:0c:e8:77:d9:08:3f:93: 46:f3:4b:f2:6b:2d:38:15:95:66:bb:63:a2:48:2f:4a:9b:b9: 11:89:23:8d:0c:eb:b3:bd:3a:b6:b9:9c:bc:70:0d:ea:d9:5d: e4:33:4c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji3/8Lm5OjLuZNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWExYWMyODktYWU5YS00ODVhLWFhZjUtMjQ4MDkzNTRiZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8vpmi8xUqB4706m3QdJksc8K3v9Eeujf2io 7S7mRtybOlaD+pBEhfP/QhJW7SMdFYPuz9wJkfUm7pigiOpEuN4ul1/4aViAxdsK TvLaqYnsO23wDlVYjzlvSmCPdDgcYC4CL8XHgBapos9UEQvAJm1yJ0ZJNFLzh7Ed CHIBzIc+BkoenOTuWq63YQ4ciCbRdYRRSBb3dBTNaABSGKAfFpPXM5K5Hf0QtopF 5VKAXPC//AVFzN9dUtsJlxOhneADfNfOR0GtkmAk7no+FnlMveWKlI30aUXQbymN 36N8b1XLT1zhl1TaUNKV01osUuABDz31w4qfmaNM5DovBcGa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrM6C0h8JMCV3YJVq+jPOekrzHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTMwMjEyNGEtMmRjMC0z MTMwLWEyNDktOWQzNDRlMDllODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlQW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxrwLyL6tqVb85RKJLRIfRwwKgRfmJauYuvvSAKyLoV/opADvgU/eDu K1PfqrrL+GkUy22bi1uTLAHRdhvc0p4IGoytaZQZGP98BGHCU1mZ03OdlKRHwTUw TzPhbxEjc48e1y8FELqhJvSRwfcBM0z+vMIX0+4J3GwRESRf6c5ZbRIewxCGt7jI WQXvQ4msizdiuWdFHJAVD5heRpNS3cHEsMVils4PKn5GN38Ta91M6KXF2zsgTJYb yLyPEBVmOmocSKk5i22ZFXBDfuqYpZb9DOh32Qg/k0bzS/JrLTgVlWa7Y6JIL0qb uRGJI40M67O9Ora5nLxwDerZXeQzTPk= -----END CERTIFICATE-----Generated at Fri Sep 25 18:17:08 2026 by rpki-client