$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa File: a66a2146-8331-38c1-a442-0354dd09e58c.roa (raw, json) Hash identifier: 0feJ3uZyna9389vDHOVSbQzcm0BgIedJOGDoTm2d6X4= Subject key identifier: 67:A3:C8:BB:F7:78:B4:42:53:7A:82:0A:41:9A:AB:C4:C9:AC:A2:31 Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Certificate serial: 010D0C9F4328584F4974C34EDA049E659FEAA900 Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40271 IP address blocks: 149.112.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c3:4e:da:04:9e:65:9f:ea:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1675bd1-344e-4349-ab7e-25947d9818fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:01:bd:d1:5e:00:7a:03:1d:0b:9b:3b:c4: 73:a3:cd:46:68:3d:f5:ef:eb:c6:f9:39:78:e3:ef: 18:9b:be:8b:c4:41:c5:e0:6f:e3:41:34:f9:e7:26: 7b:3e:b6:56:97:ec:bd:1e:58:72:83:74:99:d0:22: 2f:76:f3:e9:cc:20:52:62:e8:11:a6:2b:da:07:a0: 49:c7:4e:ab:3b:5a:b7:c2:b8:a6:e1:bf:0d:58:22: 4c:07:31:15:71:b0:54:b5:00:b2:5d:b5:86:25:d0: c2:24:1a:c6:50:8f:0f:5e:6b:b9:5a:0b:e3:19:14: 26:4e:ce:e2:7f:72:66:bd:5b:e9:85:84:3a:bd:db: ea:b6:2f:60:6e:ad:78:e9:db:18:ac:bc:2a:4e:79: af:68:34:8a:d3:51:34:02:c4:ae:cf:9d:e7:37:52: 29:e7:e7:eb:4e:ef:82:44:20:da:13:29:b2:47:88: 13:a7:fd:5b:ef:06:4a:f7:24:e8:41:0d:e2:c4:69: 0d:dc:83:80:f2:8b:e7:68:e8:96:fa:91:c8:96:9d: 18:c5:54:bd:9f:4f:7e:89:f5:ea:83:7b:49:d1:42: 6f:fa:bc:ae:e3:98:67:91:08:17:65:1b:71:3c:76: 4d:a4:31:4a:e6:d3:8d:bc:c8:00:31:94:d2:ab:14: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A3:C8:BB:F7:78:B4:42:53:7A:82:0A:41:9A:AB:C4:C9:AC:A2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl X509v3 Authority Key Identifier: keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer sbgp-ipAddrBlock: critical IPv4: 149.112.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:24:18:53:4d:33:46:f2:21:12:89:f2:b2:90:0a:55:a8:aa: 93:65:06:0e:8f:3a:64:34:77:93:c5:1a:ff:67:57:fc:f9:8a: 14:56:72:4f:ae:3f:94:9e:58:03:4f:a4:78:eb:c5:8e:3f:69: 7d:6f:86:39:b8:ab:7e:43:ea:a5:8c:48:7a:6d:51:e8:b1:ea: a3:ad:71:79:dd:06:70:56:b4:3a:63:85:18:cd:3e:7e:95:44: a0:8f:33:62:4d:68:87:57:ad:f5:35:dc:38:2a:d4:b2:1d:02: 0d:75:74:f7:40:d9:04:0c:52:93:84:67:6a:1a:00:65:fc:f0: 21:fc:e9:3f:02:dd:17:d1:87:ef:51:da:2b:02:86:f6:48:9f: 18:6b:3d:71:05:65:f2:6c:d9:67:80:15:62:a4:9f:4d:41:23: ce:37:80:9e:6f:9e:c7:ad:63:56:e9:e8:58:ce:e3:1f:c2:76: bc:9c:df:0f:d7:a3:50:42:d0:86:8f:7a:dd:66:b4:21:56:ba: a1:33:d2:80:1b:be:e6:f5:06:e8:8d:54:b2:c4:0e:85:5a:ab: 06:69:4f:dd:bc:da:14:bf:d9:19:82:6e:71:d1:da:db:47:c3: 4f:a7:95:53:83:35:35:8f:16:97:d4:74:19:13:8b:44:b3:a2: c6:f6:8f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMNO2gSeZZ/qqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm NTIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDE2NzViZDEtMzQ0ZS00MzQ5LWFiN2UtMjU5NDdkOTgxOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCcBvdFeAHoDHQubO8Rzo81GaD317+vG+Tl4 4+8Ym76LxEHF4G/jQTT55yZ7PrZWl+y9Hlhyg3SZ0CIvdvPpzCBSYugRpivaB6BJ x06rO1q3wrim4b8NWCJMBzEVcbBUtQCyXbWGJdDCJBrGUI8PXmu5WgvjGRQmTs7i f3JmvVvphYQ6vdvqti9gbq146dsYrLwqTnmvaDSK01E0AsSuz53nN1Ip5+frTu+C RCDaEymyR4gTp/1b7wZK9yToQQ3ixGkN3IOA8ovnaOiW+pHIlp0YxVS9n09+ifXq g3tJ0UJv+ryu45hnkQgXZRtxPHZNpDFK5tONvMgAMZTSqxQU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGejyLv3eLRCU3qCCkGaq8TJrKIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5 ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvYTY2YTIxNDYtODMzMS0z OGMxLWE0NDItMDM1NGRkMDllNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4 OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz MmE3Y2Y1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYkGFNNM0byIRKJ8rKQClWoqpNlBg6POmQ0d5PFGv9nV/z5ihRWck+u P5SeWANPpHjrxY4/aX1vhjm4q35D6qWMSHptUeix6qOtcXndBnBWtDpjhRjNPn6V RKCPM2JNaIdXrfU13Dgq1LIdAg11dPdA2QQMUpOEZ2oaAGX88CH86T8C3RfRh+9R 2isChvZInxhrPXEFZfJs2WeAFWKkn01BI843gJ5vnsetY1bp6FjO4x/Cdryc3w/X o1BC0IaPet1mtCFWuqEz0oAbvub1BuiNVLLEDoVaqwZpT9282hS/2RmCbnHR2ttH w0+nlVODNTWPFpfUdBkTi0Szosb2j0s= -----END CERTIFICATE-----Generated at Mon Sep 28 10:13:46 2026 by rpki-client