$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa File: 78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json) Hash identifier: c/f7OPh1C/BYOc+QNZmvJFR8yuLgPuhq6JISgDojE70= Subject key identifier: 5F:E9:E0:04:B2:FA:19:AB:DE:5C:CC:9C:D2:D2:0D:C7:72:91:C1:7C Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584FAB28CAA90B9D585B13C1BF00 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 2914 IP address blocks: 142.147.128.0/22 maxlen: 22 142.147.132.0/23 maxlen: 23 142.147.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:ca:a9:0b:9d:58:5b:13:c1:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=bcfdae67-cb75-47a4-85e2-f50d9dfa6cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:33:24:01:ae:1d:2d:a8:a5:a5:92:57:f4: 01:4c:1a:55:92:86:c0:9e:ff:9c:3c:a9:9f:63:bd: 94:76:9f:3f:de:2b:aa:cc:43:3c:0e:55:ad:cf:63: ed:cc:35:0d:99:83:21:f3:fa:fa:6c:d7:6b:7f:b5: af:a2:78:ed:6b:a2:da:a9:02:af:e4:a7:ce:a3:2f: 6a:f7:5e:2d:5c:53:7f:d6:f6:22:ae:dd:9d:9e:e0: ef:b2:c5:c6:78:f5:65:2b:7b:9b:9d:47:c2:18:61: 7d:8f:1f:78:f2:4f:84:ac:82:67:58:d2:4b:a2:f3: 96:ac:c3:29:4c:25:29:de:07:a3:f1:d2:4a:b2:e7: 6e:ca:89:9e:16:ad:69:60:7d:38:8d:b0:73:37:cd: a9:5a:ab:e3:01:57:a3:5c:1f:6b:96:bc:1d:bf:d7: 1d:fa:fd:85:a7:2d:ce:61:cc:a3:cc:ef:c1:5c:86: 87:35:93:86:e9:2e:f7:b3:e4:c0:bb:bf:de:54:21: 1a:4a:75:21:82:f8:e5:d2:0c:95:4f:94:75:07:fa: 18:64:3c:a9:41:84:01:79:45:d5:f3:9f:a1:11:09: b3:43:76:73:55:c3:9f:32:c4:72:0b:4d:ba:9b:05: ab:47:b2:2c:33:8f:da:85:e4:e5:22:51:19:fd:63: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E9:E0:04:B2:FA:19:AB:DE:5C:CC:9C:D2:D2:0D:C7:72:91:C1:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.128.0-142.147.133.255 142.147.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3d:7d:b8:af:a5:40:49:b0:c4:77:2c:bd:d0:e3:55:62:50: 47:e9:84:73:fa:af:c4:bb:62:2c:41:7f:e4:e7:0d:3e:be:86: 58:47:00:9c:5f:bf:42:68:df:1e:76:73:62:a4:c4:3f:66:69: 48:55:5a:38:4f:2b:62:35:23:58:17:5f:ba:a2:3d:7e:86:76: 14:53:e8:f1:64:c1:53:43:81:82:f5:91:34:a0:cb:d5:e8:cd: 0d:18:21:44:29:69:e5:23:ac:19:be:47:22:da:f4:08:a7:e9: 3c:5a:8a:0c:34:92:d0:5d:87:a3:55:75:51:f7:88:bf:88:42: 28:3e:8b:05:46:41:e7:45:ea:3f:ca:2c:f4:d2:c8:3f:35:96: 26:d5:35:eb:ee:1e:0c:5e:6e:06:d1:dd:e1:6a:45:7e:4b:4b: 16:21:f7:e6:40:ed:95:e9:56:58:0e:4e:9b:36:55:67:fb:80: 59:f2:5a:37:85:09:08:e8:96:cd:68:55:24:ee:0b:ba:fb:0d: b5:87:0e:71:57:fa:ab:c3:d0:5d:09:aa:72:96:40:ee:27:3a: c9:8c:1e:f2:f6:b3:4d:65:d3:4a:2a:49:03:b4:67:c1:1c:ff: 12:c4:87:c2:a4:50:74:cc:88:d9:5c:83:8f:91:5e:53:51:32: f7:1e:38:8e -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE+rKMqpC51YWxPBvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YmNmZGFlNjctY2I3NS00N2E0LTg1ZTItZjUwZDlkZmE2Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH4zJAGuHS2opaWSV/QBTBpVkobAnv+cPKmf Y72Udp8/3iuqzEM8DlWtz2PtzDUNmYMh8/r6bNdrf7Wvonjta6LaqQKv5KfOoy9q 914tXFN/1vYirt2dnuDvssXGePVlK3ubnUfCGGF9jx948k+ErIJnWNJLovOWrMMp TCUp3gej8dJKsuduyomeFq1pYH04jbBzN82pWqvjAVejXB9rlrwdv9cd+v2Fpy3O YcyjzO/BXIaHNZOG6S73s+TAu7/eVCEaSnUhgvjl0gyVT5R1B/oYZDypQYQBeUXV 85+hEQmzQ3ZzVcOfMsRyC026mwWrR7IsM4/aheTlIlEZ/WMcHQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFF/p4ASy+hmr3lzMnNLSDcdykcF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvNzhiM2Q3NzAtNWZhYS0z ODhhLWE2MjgtNTEyYWIyY2VhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAeOk4AD BAGOk4QDBAOOk/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEATj19uK+lQEmwxHcsvdDjVWJQR+mEc/qvxLti LEF/5OcNPr6GWEcAnF+/QmjfHnZzYqTEP2ZpSFVaOE8rYjUjWBdfuqI9foZ2FFPo 8WTBU0OBgvWRNKDL1ejNDRghRClp5SOsGb5HItr0CKfpPFqKDDSS0F2Ho1V1UfeI v4hCKD6LBUZB50XqP8os9NLIPzWWJtU16+4eDF5uBtHd4WpFfktLFiH35kDtlelW WA5OmzZVZ/uAWfJaN4UJCOiWzWhVJO4LuvsNtYcOcVf6q8PQXQmqcpZA7ic6yYwe 8vazTWXTSipJA7RnwRz/EsSHwqRQdMyI2VyDj5FeU1Ey9x44jg== -----END CERTIFICATE-----Generated at Tue Nov 10 15:21:06 2026 by rpki-client