$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa File: 1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json) Hash identifier: Go8zrXEDL8CYCo3EpSMbPPwy4IQF3sDVAZeCeUwmiMw= Subject key identifier: 62:A2:71:49:D1:E6:18:37:58:8B:B0:9D:6F:F4:EC:6F:35:8F:DE:B5 Certificate issuer: /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec Certificate serial: 010D0C9F4328584F4973D457525274CCFFC02780 Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20169 IP address blocks: 149.112.51.0/24 maxlen: 24 2001:504:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d4:57:52:52:74:cc:ff:c0:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd216213-f4fa-45c8-91cb-d8e6bfd3ff7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:17:89:13:76:4f:f7:04:8c:2c:4c:f2:83: e3:31:c3:f8:a9:32:db:92:b7:e6:55:7b:56:36:bc: 0d:94:8b:ca:85:a2:bd:02:20:71:68:6e:eb:e2:db: ba:77:44:39:a5:58:75:e3:b8:74:ba:fe:75:57:06: 95:dc:d3:a6:a3:a7:f0:be:70:8a:7c:e0:9e:77:ee: 24:7d:3f:32:39:63:43:66:7f:74:e2:54:cc:ed:82: 8a:8a:33:bc:a4:a7:c6:9e:eb:a3:a7:07:b6:12:c2: 70:f9:ef:a5:85:b8:62:e6:66:f4:a5:43:11:69:34: cb:a0:a2:20:44:f9:b1:da:5a:c4:81:55:53:55:d0: 40:18:7a:51:d5:b0:91:0a:c1:f1:21:e7:4b:c4:51: 99:77:33:af:e1:7b:2f:e1:a3:0b:a3:0e:9d:25:67: 6f:ef:b3:cc:6a:ad:9e:41:ec:a2:e3:f2:2b:1c:20: 87:3e:13:d2:d9:75:09:f5:88:31:a4:67:9f:4f:56: de:ad:c0:ef:b0:f7:2e:c8:a5:55:87:e1:3c:5a:59: 7d:b8:4a:99:91:92:69:2d:1d:43:d7:e2:46:c9:85: c6:10:b7:f2:45:00:93:66:b2:82:40:39:7b:b0:08: 91:fa:ce:e9:4f:f9:bd:b1:09:60:42:b8:bf:66:b4: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:71:49:D1:E6:18:37:58:8B:B0:9D:6F:F4:EC:6F:35:8F:DE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl X509v3 Authority Key Identifier: keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer sbgp-ipAddrBlock: critical IPv4: 149.112.51.0/24 IPv6: 2001:504:128::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5b:51:da:0e:a0:aa:9b:76:0a:b2:7d:b1:65:27:0c:82:45: b2:af:74:0a:eb:fa:70:f7:25:ef:0d:dd:5b:57:f3:99:ae:45: 9f:05:d0:07:71:1e:fd:00:dc:43:2e:0b:26:ed:03:7e:59:c0: dc:b4:48:fa:ed:ca:af:32:ae:f0:fc:4f:e1:c9:ca:44:20:6e: a7:4c:04:18:c6:86:6d:a9:61:2b:5c:3f:85:1b:5c:9b:72:bd: 2e:a0:8d:44:4f:f9:d4:b2:79:67:4e:2d:7b:a0:11:90:43:f1: fa:ea:5c:d2:7b:e5:e3:dc:78:52:9c:0d:3a:20:d1:9d:c7:a4: 27:82:62:e6:80:35:b9:c2:a3:06:9e:60:8c:9f:de:11:e3:2c: 48:6a:09:89:82:3c:f0:5d:00:db:9c:0f:de:7d:fd:96:09:ae: ed:7a:94:db:3c:ef:57:b2:15:14:5b:51:d4:7d:42:b6:70:dd: d6:ba:fd:d8:6b:c1:73:5a:e6:b6:1d:cd:e6:f6:ba:98:e1:f9: 77:52:bd:73:95:9f:88:8e:c1:21:ad:cc:a1:21:0a:cb:77:f6: 20:47:f9:48:28:33:2c:67:82:80:96:4d:a3:23:f8:bb:47:bd: 32:d6:2b:c9:79:3e:c2:fe:f9:ea:73:94:bf:0b:52:b7:33:ad: 53:a1:23:50 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9Jc9RXUlJ0zP/AJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkN2E1ZDYtMjQzMy00NGY1LTk0ZjQtOTVjNjRhOTJi MmVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQyMTYyMTMtZjRmYS00NWM4LTkxY2ItZDhlNmJmZDNmZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWAXiRN2T/cEjCxM8oPjMcP4qTLbkrfmVXtW NrwNlIvKhaK9AiBxaG7r4tu6d0Q5pVh147h0uv51VwaV3NOmo6fwvnCKfOCed+4k fT8yOWNDZn904lTM7YKKijO8pKfGnuujpwe2EsJw+e+lhbhi5mb0pUMRaTTLoKIg RPmx2lrEgVVTVdBAGHpR1bCRCsHxIedLxFGZdzOv4Xsv4aMLow6dJWdv77PMaq2e Qeyi4/IrHCCHPhPS2XUJ9YgxpGefT1bercDvsPcuyKVVh+E8Wll9uEqZkZJpLR1D 1+JGyYXGELfyRQCTZrKCQDl7sAiR+s7pT/m9sQlgQri/ZrTdmQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGKicUnR5hg3WIuwnW/07G81j961MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3 YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2NGE5MmIyZWMvMWVjZTljN2QtYjA0Yi0z OTI2LTk3MzEtYjcwNmMyNmI0MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGZkN2E1ZDYtMjQzMy00NGY1LTk0 ZjQtOTVjNjRhOTJiMmVjLzhmZDdhNWQ2LTI0MzMtNDRmNS05NGY0LTk1YzY0YTky YjJlYy5jcmwwHwYDVR0jBBgwFoAUarS6LZvSkwi9cNpHj8Hyl84ZzrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2 NGE5MmIyZWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAzMA8E AgACMAkDBwAgAQUEASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdltR2g6gqpt2CrJ9sWUnDIJFsq90Cuv6 cPcl7w3dW1fzma5FnwXQB3Ee/QDcQy4LJu0DflnA3LRI+u3KrzKu8PxP4cnKRCBu p0wEGMaGbalhK1w/hRtcm3K9LqCNRE/51LJ5Z04te6ARkEPx+upc0nvl49x4UpwN OiDRncekJ4Ji5oA1ucKjBp5gjJ/eEeMsSGoJiYI88F0A25wP3n39lgmu7XqU2zzv V7IVFFtR1H1CtnDd1rr92GvBc1rmth3N5va6mOH5d1K9c5WfiI7BIa3MoSEKy3f2 IEf5SCgzLGeCgJZNoyP4u0e9MtYryXk+wv756nOUvwtStzOtU6EjUA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:28:04 2026 by rpki-client