$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa File: d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa (raw, json) Hash identifier: Z5anf3UZU08zn0p3el6JsrgaZKc7ck2g3s6kLoWPy5U= Subject key identifier: 4C:BF:9B:E6:A3:C0:E9:CE:1D:4C:3E:B4:DE:67:37:DC:AC:9C:50:88 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F3CE29A3487EFD576C965B000 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 30103 IP address blocks: 149.137.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9a:34:87:ef:d5:76:c9:65:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=1d796d71-a6b3-4a93-b698-d593741b83e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:6c:f5:1c:85:e9:e9:bc:d2:3d:f5:47:09: d5:6a:33:2e:01:15:dd:bb:1e:f7:39:2a:8e:31:79: 17:57:22:63:10:6b:c5:c1:51:26:be:45:55:42:8f: 5d:c8:7d:f0:19:c1:ce:54:fd:f3:c1:9b:23:7f:3d: f6:69:24:01:f7:2f:06:0f:73:e0:73:2f:c7:15:6a: 63:1d:95:ea:04:b9:f3:27:dd:88:f6:d5:ab:85:62: f6:78:c0:05:c1:ff:4e:07:6a:34:4c:69:e5:8d:04: f4:17:24:51:8d:d6:87:e0:09:fd:7f:1b:a6:cb:1a: 16:69:90:ef:be:1b:d9:0e:37:53:29:97:8a:94:b4: af:05:67:89:7f:c5:98:b5:75:6b:6f:9a:9c:c7:8e: 3a:b1:6c:26:82:a2:a5:b8:46:e2:76:26:45:a4:0a: d0:b1:94:2c:40:e2:77:4c:c9:c6:ff:9d:60:c8:f0: 1d:bc:3e:64:17:76:aa:dc:a5:9e:2c:34:05:22:54: 3a:7c:9b:34:50:4e:a7:c6:ef:7f:25:6f:51:ad:b1: 96:e7:af:92:a9:fb:82:94:67:aa:5f:ae:82:09:c7: f5:19:3d:ed:c3:6b:7c:ae:75:bd:83:74:0f:00:32: c2:bf:c4:5a:ea:0f:d6:85:14:ab:62:e1:93:71:91: f1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BF:9B:E6:A3:C0:E9:CE:1D:4C:3E:B4:DE:67:37:DC:AC:9C:50:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8d:0b:8a:10:bb:88:c2:32:90:7e:12:4c:49:92:d1:b0:10: 07:e3:a5:f2:b7:43:f0:ea:f4:bf:87:f9:cf:53:2c:60:0a:8e: a4:82:b1:36:8c:9c:df:38:49:c5:6b:3e:d8:03:6a:9b:7f:f9: 56:ac:dd:c0:82:30:20:ec:17:d6:32:63:e0:85:75:95:c4:b8: d1:a9:eb:1b:64:27:33:a5:74:e7:de:f6:6b:e5:a6:fe:7e:6f: d9:d8:30:da:24:29:29:0c:35:53:8d:4d:6a:72:8f:03:da:a4: 7d:87:80:e7:0b:11:3e:fc:14:20:ca:1f:27:9a:c6:ff:f6:0e: b0:66:03:00:a1:9c:cd:bd:e7:67:cc:91:a8:49:fb:a9:61:25: 17:09:fc:83:03:e5:20:19:40:2e:95:3b:2a:05:a4:61:38:aa: b4:22:1b:5f:69:2c:3d:1a:d1:0f:34:99:66:41:7e:8c:5d:c3: e4:a0:e3:a2:6a:5c:b5:81:e6:80:25:20:80:7b:cd:ba:51:9f: ec:b2:28:66:ad:f3:42:d7:d3:a9:d6:55:80:6d:9f:64:16:19: ce:f7:ab:b5:9e:b3:20:43:6b:35:07:2f:fa:59:8e:f7:6c:7b: 39:ce:96:40:41:e4:ba:15:54:74:2c:0e:63:0b:61:ec:2f:e2: ea:2b:bc:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884po0h+/VdsllsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MWQ3OTZkNzEtYTZiMy00YTkzLWI2OTgtZDU5Mzc0MWI4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlds9RyF6em80j31RwnVajMuARXdux73OSqO MXkXVyJjEGvFwVEmvkVVQo9dyH3wGcHOVP3zwZsjfz32aSQB9y8GD3Pgcy/HFWpj HZXqBLnzJ92I9tWrhWL2eMAFwf9OB2o0TGnljQT0FyRRjdaH4An9fxumyxoWaZDv vhvZDjdTKZeKlLSvBWeJf8WYtXVrb5qcx446sWwmgqKluEbidiZFpArQsZQsQOJ3 TMnG/51gyPAdvD5kF3aq3KWeLDQFIlQ6fJs0UE6nxu9/JW9RrbGW56+SqfuClGeq X66CCcf1GT3tw2t8rnW9g3QPADLCv8Ra6g/WhRSrYuGTcZHxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy/m+ajwOnOHUw+tN5nN9ysnFCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDg4ZjIzMGMtZTVkNC0z NGY4LWI5YWEtN2Y1ZGZjNmM1MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqNC4oQu4jCMpB+EkxJktGwEAfjpfK3Q/Dq9L+H+c9TLGAKjqSCsTaM nN84ScVrPtgDapt/+Vas3cCCMCDsF9YyY+CFdZXEuNGp6xtkJzOldOfe9mvlpv5+ b9nYMNokKSkMNVONTWpyjwPapH2HgOcLET78FCDKHyeaxv/2DrBmAwChnM2952fM kahJ+6lhJRcJ/IMD5SAZQC6VOyoFpGE4qrQiG19pLD0a0Q80mWZBfoxdw+Sg46Jq XLWB5oAlIIB7zbpRn+yyKGat80LX06nWVYBtn2QWGc73q7WesyBDazUHL/pZjvds eznOlkBB5LoVVHQsDmMLYewv4uorvNk= -----END CERTIFICATE-----Generated at Tue Sep 22 09:17:54 2026 by rpki-client