$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa File: 4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa (raw, json) Hash identifier: QZEhqpC8MotZZhJAVpqvNdwRZxpOMdZ14/W93Q6QStQ= Subject key identifier: 53:6A:B1:36:19:43:5E:25:42:52:57:54:53:D2:D5:0E:F9:82:CB:4E Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584F3E47E4EB12CC52DCFD81B180 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 40788 IP address blocks: 142.90.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e4:eb:12:cc:52:dc:fd:81:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a8d9a153-43bb-4180-ab9e-d5ba106ecbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:03:88:07:b7:5d:d6:7d:d2:b4:7c:55:49: 13:44:cf:56:b7:32:bc:4f:29:ea:84:01:40:80:99: 74:ad:51:88:13:75:4f:41:3d:7b:39:4c:44:eb:2b: 3b:c6:4a:e7:30:94:2b:5f:f3:58:b9:48:34:2d:50: c3:03:0c:89:7d:c3:f0:fb:05:7f:e6:bd:df:1c:22: 7d:ef:0b:40:13:a6:60:c4:1a:e5:79:f8:c8:b8:5f: df:0b:60:7e:e1:32:63:90:21:42:8a:cc:f8:fe:b1: 9e:9b:06:7c:92:9e:be:d5:e3:34:0e:ad:76:f4:a3: ed:59:cb:00:f0:b6:b0:69:ce:7f:c6:35:9a:a8:49: 14:b9:6f:15:0f:a3:7b:4c:ad:bd:02:a3:48:ef:5d: eb:46:ec:95:2f:4e:80:ac:dd:65:1f:2a:56:86:d7: d0:ad:af:4c:a0:f5:60:1d:de:20:e8:d3:e4:5c:0d: 01:e0:8b:4e:d5:56:3c:85:ae:9f:a4:f2:59:c4:60: 87:4f:95:bc:5e:e0:3b:40:c8:e8:41:66:33:84:45: f6:5a:28:0c:5d:ff:35:6a:88:95:47:6c:58:4f:89: fe:cb:71:61:3a:9f:2b:d2:c1:99:10:ba:8d:04:12: 06:d8:42:41:6d:93:38:2c:f6:d0:14:3d:9f:c4:dd: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:B1:36:19:43:5E:25:42:52:57:54:53:D2:D5:0E:F9:82:CB:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 142.90.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:74:7d:5f:18:f7:7a:58:a6:91:44:d3:8f:6e:c2:58:d6:2c: 7d:a9:c1:79:0f:f9:db:9f:d0:25:ab:cb:e4:72:c2:c0:0c:b3: 8f:73:f2:a4:f9:54:ab:c1:02:51:7f:77:fc:ab:ef:36:88:dc: d2:34:1e:0c:2b:90:ad:d8:73:1a:94:7f:2e:fb:27:6b:7c:da: 1b:93:35:e8:cb:bb:28:a3:52:02:50:41:62:c5:0a:1e:30:32: 8b:2e:16:ac:46:44:c0:11:1e:03:77:f6:d0:9b:c7:48:58:2a: 98:cf:36:bf:d7:56:eb:94:36:95:bf:5d:8b:bd:68:65:0d:02: f1:20:c5:58:f1:ee:08:20:79:de:94:2a:12:95:7a:9d:99:e9: 07:8e:6e:bc:ab:77:38:49:ef:f7:95:5b:62:ad:b7:73:20:bb: 95:be:4b:97:4b:a9:28:f2:d3:14:69:cc:1f:42:43:d9:6a:bf: 0a:97:65:68:c6:66:f4:2c:e8:bd:85:55:c9:18:c9:cf:0b:90: ce:6a:a0:8e:0e:ad:e2:de:d1:9d:5c:1a:94:45:23:9f:1f:eb: b7:43:78:3d:37:97:41:aa:6e:22:0e:06:8a:1b:95:31:17:b9: 2f:e5:ef:27:fa:5a:ed:fb:3e:c5:85:18:d9:f8:05:da:24:79: 36:22:97:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+TrEsxS3P2BsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YThkOWExNTMtNDNiYi00MTgwLWFiOWUtZDViYTEwNmVjYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkucDiAe3XdZ90rR8VUkTRM9WtzK8TynqhAFA gJl0rVGIE3VPQT17OUxE6ys7xkrnMJQrX/NYuUg0LVDDAwyJfcPw+wV/5r3fHCJ9 7wtAE6ZgxBrlefjIuF/fC2B+4TJjkCFCisz4/rGemwZ8kp6+1eM0Dq129KPtWcsA 8Lawac5/xjWaqEkUuW8VD6N7TK29AqNI713rRuyVL06ArN1lHypWhtfQra9MoPVg Hd4g6NPkXA0B4ItO1VY8ha6fpPJZxGCHT5W8XuA7QMjoQWYzhEX2WigMXf81aoiV R2xYT4n+y3FhOp8r0sGZELqNBBIG2EJBbZM4LPbQFD2fxN3wdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNqsTYZQ14lQlJXVFPS1Q75gstOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNGU2NDcyNTMtMmExNy0z ZWIzLWIyNGMtZDJjMmUzYTYwODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjloAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt0fV8Y93pYppFE049uwljWLH2pwXkP+duf0CWry+RywsAMs49z8qT5 VKvBAlF/d/yr7zaI3NI0HgwrkK3YcxqUfy77J2t82huTNejLuyijUgJQQWLFCh4w MosuFqxGRMARHgN39tCbx0hYKpjPNr/XVuuUNpW/XYu9aGUNAvEgxVjx7ggged6U KhKVep2Z6QeObryrdzhJ7/eVW2Ktt3Mgu5W+S5dLqSjy0xRpzB9CQ9lqvwqXZWjG ZvQs6L2FVckYyc8LkM5qoI4OreLe0Z1cGpRFI58f67dDeD03l0GqbiIOBooblTEX uS/l7yf6Wu37PsWFGNn4BdokeTYil8U= -----END CERTIFICATE-----Generated at Thu Sep 24 05:30:00 2026 by rpki-client