$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/424f8fdd-c1b5-3f72-b20d-22a1e89d55d4.roa File: 424f8fdd-c1b5-3f72-b20d-22a1e89d55d4.roa (raw, json) Hash identifier: x9kyCd1JnmuDe3nudJshQIOFIb4yy/qjvfe1fEVA5IU= Subject key identifier: 20:07:83:AE:E5:A0:48:67:F9:3A:57:07:5F:FA:90:AE:37:23:7E:77 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F4988319F92C38325CEB905E0 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/424f8fdd-c1b5-3f72-b20d-22a1e89d55d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400662 IP address blocks: 150.253.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:31:9f:92:c3:83:25:ce:b9:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57e3a17e-77df-48dc-b718-af33f44013f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:ea:f7:bc:40:07:2d:54:0e:c6:6c:09:0f: 00:b8:6d:e5:a6:2a:f1:9c:65:15:60:e3:aa:3b:19: 71:03:6b:96:88:84:0d:25:cd:7c:66:fc:6d:ab:e7: 75:5c:34:d2:66:56:a8:be:22:f5:81:65:57:f9:51: 84:a9:03:70:b8:6a:8f:54:16:2a:00:78:79:6f:c4: e0:55:ae:1c:a7:a1:2a:0e:a2:73:b1:3d:b3:ab:d8: 1b:64:a0:c6:dc:4a:ad:9f:09:47:2d:75:1a:f5:64: f7:49:8b:ca:20:af:1a:77:b9:e5:c5:70:c1:0a:ff: 3a:a9:3e:22:a1:f5:67:98:5f:6b:ee:f1:2e:b9:8f: eb:28:b6:bd:e0:0f:b8:92:15:09:f0:f4:c6:86:5a: a7:4f:0b:1a:e5:54:55:5b:1f:b4:42:5c:cc:c4:b4: 18:52:78:fa:a5:39:7e:f9:9d:14:77:c6:0d:15:21: 49:3c:47:73:84:b6:8e:c4:c6:73:3b:f8:d1:c4:e3: 05:ee:c4:7a:57:b7:a8:fc:c2:d6:64:93:63:3c:04: f5:a7:28:6e:df:84:9f:56:44:f1:d5:01:14:5f:7a: 91:74:c0:93:53:97:0d:bd:f6:57:47:8a:f6:eb:42: 31:61:5e:2b:a9:da:7e:0e:35:98:49:da:1a:05:75: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:83:AE:E5:A0:48:67:F9:3A:57:07:5F:FA:90:AE:37:23:7E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/424f8fdd-c1b5-3f72-b20d-22a1e89d55d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 150.253.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bd:9b:1d:16:93:68:01:f8:73:4e:17:78:9f:60:8a:a0:90: e1:75:4a:68:cf:9c:32:ff:7f:a8:0f:4d:b0:4d:7f:2b:55:5f: e3:f6:ba:af:71:03:47:89:42:59:25:9d:40:4e:b9:b9:5b:7a: db:41:29:41:e0:3e:e9:3a:ba:54:41:f6:f3:3f:1f:35:db:ae: 1b:b3:94:6a:8b:27:18:c2:9e:e1:f5:d8:d8:8e:db:9b:10:6d: aa:f8:c7:8f:77:97:aa:6a:c3:65:c4:ce:f6:eb:3a:1b:68:f4: 48:11:e9:a8:42:ce:d3:68:3a:cb:90:dc:4c:52:99:a7:05:ec: c2:2d:1d:42:82:9d:2e:13:47:55:90:85:3e:6b:2d:34:4a:7d: 1d:48:58:de:37:cf:ac:57:4d:16:65:3a:74:16:7e:d8:89:30: 17:03:27:05:10:ff:7b:c1:c7:9f:2a:8f:44:fb:01:9c:32:a2: 0a:b1:ee:af:06:06:7a:4f:00:27:05:cf:e9:f1:7f:04:09:6c: 55:c8:96:0b:03:88:3f:5e:f5:3a:da:df:f3:d1:41:fc:02:81: e6:06:52:b0:c7:f8:88:1d:8a:d6:44:f0:27:4b:fe:59:f4:56: 4d:dc:97:b8:bd:01:24:47:5a:63:74:3a:cb:52:bb:34:03:21: c8:83:04:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiDGfksODJc65BeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdlM2ExN2UtNzdkZi00OGRjLWI3MTgtYWYzM2Y0NDAxM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1bq97xABy1UDsZsCQ8AuG3lpirxnGUVYOOq OxlxA2uWiIQNJc18Zvxtq+d1XDTSZlaoviL1gWVX+VGEqQNwuGqPVBYqAHh5b8Tg Va4cp6EqDqJzsT2zq9gbZKDG3EqtnwlHLXUa9WT3SYvKIK8ad7nlxXDBCv86qT4i ofVnmF9r7vEuuY/rKLa94A+4khUJ8PTGhlqnTwsa5VRVWx+0QlzMxLQYUnj6pTl+ +Z0Ud8YNFSFJPEdzhLaOxMZzO/jRxOMF7sR6V7eo/MLWZJNjPAT1pyhu34SfVkTx 1QEUX3qRdMCTU5cNvfZXR4r260IxYV4rqdp+DjWYSdoaBXWRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAHg67loEhn+TpXB1/6kK43I353MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNDI0ZjhmZGQtYzFiNS0z ZjcyLWIyMGQtMjJhMWU4OWQ1NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm9mx0Wk2gB+HNOF3ifYIqgkOF1SmjPnDL/f6gPTbBNfytVX+P2uq9x A0eJQlklnUBOublbettBKUHgPuk6ulRB9vM/HzXbrhuzlGqLJxjCnuH12NiO25sQ bar4x493l6pqw2XEzvbrOhto9EgR6ahCztNoOsuQ3ExSmacF7MItHUKCnS4TR1WQ hT5rLTRKfR1IWN43z6xXTRZlOnQWftiJMBcDJwUQ/3vBx58qj0T7AZwyogqx7q8G BnpPACcFz+nxfwQJbFXIlgsDiD9e9Tra3/PRQfwCgeYGUrDH+IgditZE8CdL/ln0 Vk3cl7i9ASRHWmN0OstSuzQDIciDBGw= -----END CERTIFICATE-----Generated at Sat Sep 26 23:43:15 2026 by rpki-client