$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa File: b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa (raw, json) Hash identifier: vlGQ9qLltvlpnFFWC1qR64CebPl58sDqLGCJFp6l49c= Subject key identifier: BF:D8:6C:C0:99:A7:CC:83:4D:B5:45:CA:1A:07:A0:A7:E9:51:68:B7 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584F7A4D9798034A2EC30207E020 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 53658 IP address blocks: 142.0.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:97:98:03:4a:2e:c3:02:07:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bb85c771-016e-4af2-9f71-d789922b5a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:74:4e:05:f5:96:97:0f:d2:c6:88:cc:e9: 68:cd:df:73:87:30:c5:63:07:51:f5:12:c2:73:38: 30:a5:6f:b6:dc:8f:18:b9:0c:40:7d:c3:fb:59:9e: 60:77:88:70:d7:4d:2a:26:f5:c1:28:48:04:7a:d4: b7:6c:b3:a0:67:d4:d0:fa:61:12:55:ec:bd:ce:61: 1d:60:2c:78:6e:cf:51:c7:f0:fd:74:4c:dc:74:bf: b8:36:31:7d:82:94:1b:6d:01:77:87:45:95:b3:47: 08:67:32:a5:ff:fe:ca:2a:4c:90:6d:89:ff:ad:bb: 79:83:9a:69:97:7c:ef:d1:99:10:5e:96:81:03:b2: d1:a5:54:d2:b0:13:44:a5:f2:1a:03:0f:4f:61:1d: be:e9:41:93:7e:e1:98:96:ce:e6:f4:d5:85:bb:56: 69:08:55:47:b7:47:91:c1:e8:2e:de:1b:fe:8b:ad: 48:cb:44:ad:b9:3a:e5:c2:96:18:ab:ca:30:50:cf: 36:9f:92:9f:dc:98:3b:f5:9f:ed:64:b8:54:dd:80: 85:24:1c:d7:fe:72:2a:a7:06:c6:8e:77:35:00:64: 12:2a:20:a4:de:c1:4d:1d:d8:74:f9:b5:32:de:ce: a2:3b:0e:e9:93:f5:25:f7:d4:da:2f:f9:cc:03:e1: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:6C:C0:99:A7:CC:83:4D:B5:45:CA:1A:07:A0:A7:E9:51:68:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:63:b2:76:8a:9e:87:d4:db:d0:18:7e:41:ce:d5:c7:3a:a2: 9a:c4:d8:8d:c6:ed:d7:55:b6:05:4f:3d:19:4e:af:ab:ec:4f: d8:cd:0a:a8:21:49:bb:c0:34:dc:69:bf:90:06:92:d3:59:d1: a1:8b:7c:c9:8b:32:59:fb:ce:d6:02:28:de:05:07:cd:76:83: eb:60:5c:14:ac:e2:20:03:44:59:a9:e1:dd:fb:0f:a7:41:4b: 77:19:fe:24:87:d3:08:85:76:4e:d6:50:cb:24:48:58:b2:85: 2b:1f:68:9f:db:63:df:ad:28:a3:b6:da:aa:cc:4c:85:96:03: d4:bf:dd:41:21:a8:0a:65:bf:04:90:f7:cc:58:67:c9:ef:35: 58:e0:d7:7c:be:e4:13:c5:f4:3c:74:73:07:11:1d:b1:39:19: 56:04:de:4a:b2:00:db:79:e4:1b:39:31:5b:ef:37:a5:57:da: 4a:58:47:e3:37:7b:29:f4:d8:eb:0c:7a:7d:08:22:e9:90:80: 7c:5a:32:fa:9c:5b:5d:5c:0e:eb:b2:47:3c:69:3c:f1:c4:74: e3:56:82:86:20:5b:17:7b:5c:a6:c2:8c:2e:31:d4:3c:98:9c: 6e:f7:4e:0e:d2:56:42:a3:2a:fd:11:0f:0a:ee:39:2c:56:ca: de:e9:82:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZeYA0ouwwIH4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmI4NWM3NzEtMDE2ZS00YWYyLTlmNzEtZDc4OTkyMmI1YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kp0TgX1lpcP0saIzOlozd9zhzDFYwdR9RLC czgwpW+23I8YuQxAfcP7WZ5gd4hw100qJvXBKEgEetS3bLOgZ9TQ+mESVey9zmEd YCx4bs9Rx/D9dEzcdL+4NjF9gpQbbQF3h0WVs0cIZzKl//7KKkyQbYn/rbt5g5pp l3zv0ZkQXpaBA7LRpVTSsBNEpfIaAw9PYR2+6UGTfuGYls7m9NWFu1ZpCFVHt0eR wegu3hv+i61Iy0StuTrlwpYYq8owUM82n5Kf3Jg79Z/tZLhU3YCFJBzX/nIqpwbG jnc1AGQSKiCk3sFNHdh0+bUy3s6iOw7pk/Ul99TaL/nMA+HHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/YbMCZp8yDTbVFyhoHoKfpUWi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYjVhZjUzYzUtYTFjNC0z ZGE4LTk5YzUtZjU1ODJhZDBmZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBjsnaKnofU29AYfkHO1cc6oprE2I3G7ddVtgVPPRlOr6vsT9jNCqgh SbvANNxpv5AGktNZ0aGLfMmLMln7ztYCKN4FB812g+tgXBSs4iADRFmp4d37D6dB S3cZ/iSH0wiFdk7WUMskSFiyhSsfaJ/bY9+tKKO22qrMTIWWA9S/3UEhqAplvwSQ 98xYZ8nvNVjg13y+5BPF9Dx0cwcRHbE5GVYE3kqyANt55Bs5MVvvN6VX2kpYR+M3 eyn02OsMen0IIumQgHxaMvqcW11cDuuyRzxpPPHEdONWgoYgWxd7XKbCjC4x1DyY nG73Tg7SVkKjKv0RDwruOSxWyt7pgsI= -----END CERTIFICATE-----Generated at Tue Oct 13 16:15:02 2026 by rpki-client