$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa File: 9350ef68-af73-3548-8377-c2969548bbe2.roa (raw, json) Hash identifier: GcUCtn/0nwAsO4bfV9YKuW0yJOUvt7wrrfqwp2oMHVA= Subject key identifier: 09:D3:37:8F:94:15:FF:19:26:90:8A:5C:7B:88:00:D6:77:AA:D1:38 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584F31B7CE72136E73514469CB40 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 22223 IP address blocks: 139.60.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:ce:72:13:6e:73:51:44:69:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=d1866425-7378-48ba-9f44-a604ad9786b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:0a:12:06:9e:f6:78:63:fe:08:09:4c:12: 4a:46:5e:a1:1f:57:71:c1:24:a0:ee:d4:7c:bb:fd: e6:03:1f:59:1b:bd:12:01:ee:bf:ff:1e:b9:5e:83: 6a:ab:85:89:97:9b:cf:13:c7:4d:18:81:a9:da:44: 8c:8d:d7:52:a7:08:d4:54:ac:01:cd:9b:e4:b8:0a: d6:92:ab:2d:55:ea:33:6a:d6:ec:eb:a5:51:9b:e6: 5b:5f:cd:01:6d:0d:ff:32:b5:d2:6a:69:95:27:d6: 97:25:89:d2:7b:a0:40:4b:2c:fe:fc:f5:81:e3:5f: 81:54:2a:48:df:84:5e:69:67:33:d7:76:ef:d5:30: 93:ff:c8:bf:9c:30:83:13:33:99:70:7d:5c:4f:58: b1:07:13:78:7b:00:72:ed:5e:05:31:de:64:01:36: 8c:de:67:66:6f:cf:0a:bd:1b:b9:35:d4:4a:a6:cd: 40:60:2c:f0:44:f8:6a:e6:76:78:eb:c6:07:11:ff: 6a:ce:d4:88:9a:02:6c:b1:56:5c:90:b4:53:6f:b0: 45:c0:94:d8:a4:f5:a5:f0:e2:52:63:e6:7e:1f:bd: cb:c5:0c:cf:eb:49:3e:da:c3:84:2a:30:7b:fe:04: c6:f7:37:b9:79:38:82:b0:7c:57:1a:61:2f:b7:40: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:37:8F:94:15:FF:19:26:90:8A:5C:7B:88:00:D6:77:AA:D1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 139.60.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:86:33:eb:06:35:b8:e3:76:ca:38:7a:32:49:69:38:93:de: 72:09:17:b4:36:dd:60:49:e6:ca:6f:91:22:8f:97:76:24:cb: 5e:82:7e:19:50:26:4c:e6:2a:89:2d:1a:05:0e:f5:86:31:c1: 71:2a:50:cb:54:c4:b3:2b:e1:87:a4:3c:52:3f:2b:2e:6a:d9: 53:47:19:29:d6:e6:21:e3:87:f2:23:45:f0:a8:29:30:0a:a1: 65:77:4a:8f:97:99:88:c7:9a:dd:cd:cf:78:d1:0b:55:48:68: 6b:3b:6c:cf:a7:c0:af:57:21:0f:96:43:d1:7d:a9:cf:b8:a9: 2f:87:e4:ec:41:04:46:28:c9:92:26:de:3b:fa:f3:a7:7d:e5: 86:31:69:9b:41:c8:e8:71:d9:b2:b6:08:1d:77:c7:69:2a:67: 66:93:97:b7:16:e6:cf:da:ff:6e:0b:bd:24:f1:38:d7:9c:81: b7:4f:37:c1:c6:17:4b:a5:c2:95:6c:29:42:de:3d:93:eb:68: 87:f5:40:e6:38:cf:3a:fd:95:21:4d:03:f4:10:f0:02:a7:5b: e9:06:ac:0e:b8:e8:f6:e2:76:4f:11:d9:cd:bf:b3:a3:6d:70: d9:1c:a8:be:95:c9:e7:16:2b:f3:0d:ea:8d:b1:c2:96:ef:c9: a5:82:4c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt85yE25zUURpy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDE4NjY0MjUtNzM3OC00OGJhLTlmNDQtYTYwNGFkOTc4NmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB0KEgae9nhj/ggJTBJKRl6hH1dxwSSg7tR8 u/3mAx9ZG70SAe6//x65XoNqq4WJl5vPE8dNGIGp2kSMjddSpwjUVKwBzZvkuArW kqstVeozatbs66VRm+ZbX80BbQ3/MrXSammVJ9aXJYnSe6BASyz+/PWB41+BVCpI 34ReaWcz13bv1TCT/8i/nDCDEzOZcH1cT1ixBxN4ewBy7V4FMd5kATaM3mdmb88K vRu5NdRKps1AYCzwRPhq5nZ468YHEf9qztSImgJssVZckLRTb7BFwJTYpPWl8OJS Y+Z+H73LxQzP60k+2sOEKjB7/gTG9ze5eTiCsHxXGmEvt0Aa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnTN4+UFf8ZJpCKXHuIANZ3qtE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvOTM1MGVmNjgtYWY3My0z NTQ4LTgzNzctYzI5Njk1NDhiYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuGM+sGNbjjdso4ejJJaTiT3nIJF7Q23WBJ5spvkSKPl3Yky16CfhlQ JkzmKoktGgUO9YYxwXEqUMtUxLMr4YekPFI/Ky5q2VNHGSnW5iHjh/IjRfCoKTAK oWV3So+XmYjHmt3Nz3jRC1VIaGs7bM+nwK9XIQ+WQ9F9qc+4qS+H5OxBBEYoyZIm 3jv686d95YYxaZtByOhx2bK2CB13x2kqZ2aTl7cW5s/a/24LvSTxONecgbdPN8HG F0ulwpVsKULePZPraIf1QOY4zzr9lSFNA/QQ8AKnW+kGrA646Pbidk8R2c2/s6Nt cNkcqL6VyecWK/MN6o2xwpbvyaWCTAU= -----END CERTIFICATE-----Generated at Wed Sep 23 10:23:37 2026 by rpki-client