$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9d3b65d3-ae42-3001-96f4-8b012f7b8725.roa File: 9d3b65d3-ae42-3001-96f4-8b012f7b8725.roa (raw, json) Hash identifier: Wseu+c0bzBAu2hCFcxa9Spm2zQpsgM+MWYzXUkHmJ8k= Subject key identifier: 92:4C:C7:C3:45:12:38:65:9F:60:69:CD:E2:8F:CE:77:D1:B4:C4:6E Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584F58DFE8F93793EA840DF3F200 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9d3b65d3-ae42-3001-96f4-8b012f7b8725.roa Signing time: Wed 30 Sep 2026 13:37:44 +0000 ROA not before: Wed 30 Sep 2026 13:37:44 +0000 ROA not after: Tue 29 Dec 2026 14:37:44 +0000 asID: 30399 IP address blocks: 149.112.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:df:e8:f9:37:93:ea:84:0d:f3:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Sep 30 13:37:44 2026 GMT Not After : Dec 29 14:37:44 2026 GMT Subject: CN=2e5e54b5-5143-41b8-bac3-ec631e85967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:2a:3a:42:64:d3:76:08:75:70:69:7e:f6: f7:20:75:e9:7a:9b:39:85:7c:3c:e4:96:6a:c0:e0: 5d:54:11:b9:a4:0c:3f:d3:a2:00:fd:90:10:87:36: 2b:4e:7d:f8:ab:d2:35:97:85:41:90:6d:de:5c:07: 52:25:b4:a0:0e:8e:b6:fd:2f:fe:72:44:b0:e8:86: 00:63:d4:78:f9:65:c8:86:24:0d:9d:4c:06:d6:aa: c1:71:af:73:55:2b:6a:3f:f1:38:b2:75:20:73:18: 07:7d:c5:0c:aa:49:18:1f:59:be:3e:69:bc:98:f3: e0:91:8a:c9:4c:0e:40:fd:66:e1:61:8c:e0:67:2a: d1:e4:4a:81:ec:39:22:6b:5d:fe:4d:ac:12:01:04: e5:14:c1:0d:7b:b2:5b:ce:41:dd:97:93:9f:3d:b6: ad:a1:27:bb:9d:49:4f:c4:52:5a:c1:47:47:8f:d5: 6b:b9:35:84:d2:0b:b8:f9:93:1e:bb:d8:4d:ea:8d: 08:57:6b:59:87:8b:1f:9e:69:3f:19:3c:03:a6:2a: 9b:19:ae:5e:3c:61:64:78:45:7e:bb:e7:4d:2c:1c: 9e:c0:36:90:bd:b3:86:4a:7d:dc:92:da:a4:86:55: a3:f4:d3:b3:88:29:f8:ea:6d:0b:f5:51:61:9e:e7: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:C7:C3:45:12:38:65:9F:60:69:CD:E2:8F:CE:77:D1:B4:C4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9d3b65d3-ae42-3001-96f4-8b012f7b8725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 149.112.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:64:a8:3a:40:19:b6:a9:e4:70:18:1b:65:2d:db:0b:96:17: 36:20:d2:f9:6b:50:c6:f6:c4:48:3e:24:d3:e3:83:04:9e:2a: 75:42:7c:11:4b:aa:11:28:d6:77:b4:51:02:83:f3:66:0c:4c: 4d:b4:e5:32:47:1f:26:1c:f0:1e:29:83:b5:c1:75:90:1e:a2: 57:46:61:40:d4:c0:21:7e:92:51:98:31:fc:66:44:7b:db:dd: e1:f6:47:82:2e:82:b3:70:0a:aa:b9:7d:b4:a5:4c:54:be:33: 63:a1:b7:97:e5:d1:65:e0:a6:16:54:f0:db:c4:0f:d1:94:a4: ad:55:3f:1b:d8:41:e4:c1:ec:7e:66:8e:d3:e8:35:f4:35:47: 6d:6f:a5:0d:24:59:ae:a9:9c:26:89:1b:db:b5:74:55:c7:c6: ed:37:89:a2:0c:10:4e:11:c4:ca:fb:b1:e7:64:36:a6:81:5e: 48:6f:db:00:50:98:57:ed:96:91:f6:ea:fd:cf:10:cf:8d:16: 44:40:aa:d0:e3:de:20:78:fb:45:28:07:71:b7:2f:53:6a:2d: 9f:53:bc:19:7e:16:fd:72:8e:d1:b5:b3:b0:e2:06:fd:b9:c9: e1:57:5f:b2:ac:30:68:1d:79:b3:58:cf:fa:07:58:d0:f2:f3: 32:86:09:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Y3+j5N5PqhA3z8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDkzMDEzMzc0NFoXDTI2MTIyOTE0Mzc0NFowLzEtMCsGA1UEAxMk MmU1ZTU0YjUtNTE0My00MWI4LWJhYzMtZWM2MzFlODU5NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlUqOkJk03YIdXBpfvb3IHXpeps5hXw85JZq wOBdVBG5pAw/06IA/ZAQhzYrTn34q9I1l4VBkG3eXAdSJbSgDo62/S/+ckSw6IYA Y9R4+WXIhiQNnUwG1qrBca9zVStqP/E4snUgcxgHfcUMqkkYH1m+Pmm8mPPgkYrJ TA5A/WbhYYzgZyrR5EqB7Dkia13+TawSAQTlFMENe7JbzkHdl5OfPbatoSe7nUlP xFJawUdHj9VruTWE0gu4+ZMeu9hN6o0IV2tZh4sfnmk/GTwDpiqbGa5ePGFkeEV+ u+dNLByewDaQvbOGSn3cktqkhlWj9NOziCn46m0L9VFhnuevgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJMx8NFEjhln2BpzeKPznfRtMRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvOWQzYjY1ZDMtYWU0Mi0z MDAxLTk2ZjQtOGIwMTJmN2I4NzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERkqDpAGbap5HAYG2Ut2wuWFzYg0vlrUMb2xEg+JNPjgwSeKnVCfBFL qhEo1ne0UQKD82YMTE205TJHHyYc8B4pg7XBdZAeoldGYUDUwCF+klGYMfxmRHvb 3eH2R4IugrNwCqq5fbSlTFS+M2Oht5fl0WXgphZU8NvED9GUpK1VPxvYQeTB7H5m jtPoNfQ1R21vpQ0kWa6pnCaJG9u1dFXHxu03iaIMEE4RxMr7sedkNqaBXkhv2wBQ mFftlpH26v3PEM+NFkRAqtDj3iB4+0UoB3G3L1NqLZ9TvBl+Fv1yjtG1s7DiBv25 yeFXX7KsMGgdebNYz/oHWNDy8zKGCdw= -----END CERTIFICATE-----Generated at Sun Oct 4 10:58:44 2026 by rpki-client