$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa File: bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa (raw, json) Hash identifier: c5GpwY0PYQBbJCYotKiW1Q0Ek88BNMYGZW7/08Us05U= Subject key identifier: CB:67:0A:00:F4:8E:9E:8B:01:16:A1:F5:D4:48:C6:DC:77:16:AC:1B Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584F6C5832794A170864A3FEB500 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 153371 IP address blocks: 142.249.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:32:79:4a:17:08:64:a3:fe:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=bad87f5d-a09f-41e6-87b4-b644ad797bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:85:2c:17:4f:37:53:9a:11:fa:e9:01:c7: ab:be:5f:53:81:10:7a:36:a3:34:c2:d0:9c:6b:fb: 82:e5:5a:5d:c9:8f:1e:bc:cc:b0:f1:30:7f:a3:a0: 81:94:0a:0a:4a:42:69:03:e2:3c:84:4e:ad:a3:3d: 5f:da:6e:75:44:99:a4:b4:23:55:b4:ac:b4:ad:1a: e2:23:8f:0e:32:65:02:10:e8:92:93:03:d5:00:7a: 72:58:2f:03:82:1b:67:0a:bb:c8:71:1d:8d:8c:53: 1e:13:fa:75:bf:f8:50:e7:47:1a:8c:e8:f3:e6:4b: 5c:e5:83:98:65:d2:26:4b:52:f5:e9:fc:b5:54:3d: ea:fe:0e:ec:99:50:89:b3:6c:36:0c:8e:b9:22:e1: 46:04:eb:db:35:28:0a:70:6b:8b:cc:07:d3:96:43: 82:b9:db:06:7f:6f:6c:95:8a:38:04:71:50:08:80: a7:7a:91:48:bb:1c:eb:5a:16:e7:8d:2f:89:e1:a2: cf:8f:5d:5b:1c:bf:f1:f7:a9:44:2a:75:b7:7e:e1: f2:6b:4b:22:f7:ff:b3:5b:b1:c2:81:c5:19:54:8b: a2:c3:67:98:36:e9:59:e8:a4:5a:93:5f:7b:ff:d3: de:a4:da:1e:e6:1a:df:31:3d:d8:ee:8b:0d:d4:46: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:0A:00:F4:8E:9E:8B:01:16:A1:F5:D4:48:C6:DC:77:16:AC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 142.249.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b5:77:4e:37:ac:e4:84:a5:ab:b2:1b:90:83:4a:8e:4e:d2: 30:97:14:fc:68:ef:9a:45:25:9f:d3:61:de:99:4e:8f:2a:f5: 3a:cb:fe:db:97:0e:d4:d7:22:24:8b:c8:5e:63:78:76:c9:37: 87:c0:35:33:25:93:49:a5:86:ea:22:db:15:06:29:a0:90:10: 96:a8:25:13:c4:ac:47:80:58:a3:ea:b4:aa:c7:46:1b:58:3b: 57:80:3c:f5:3f:17:f5:bd:f1:61:29:69:de:10:c9:48:3c:cb: 33:67:a5:81:c8:79:dc:15:f3:98:9e:17:e1:90:e8:af:e9:20: 3f:e4:11:d5:83:d1:8f:cc:24:b7:f9:9b:a7:0e:fc:39:28:d4: 50:1e:91:96:85:ca:e7:0b:64:d5:78:40:2c:b3:ba:d8:19:67: 3e:73:8b:e4:13:1c:ba:5a:f6:64:59:a9:13:b6:50:d6:8c:d9: ee:59:b9:ea:bb:e7:ca:89:bc:24:bc:cd:cd:49:b7:86:6e:2d: d9:97:b9:76:b2:2b:36:3e:fe:15:1a:6b:79:af:a7:12:8a:61: 15:ed:03:13:f8:92:f2:d9:53:d3:c2:68:c4:0a:d3:bf:6c:45: 7f:5e:95:a0:fc:1c:34:be:9e:d0:4e:76:d7:1a:ae:ce:e5:76: 72:eb:1a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDJ5ShcIZKP+tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YmFkODdmNWQtYTA5Zi00MWU2LTg3YjQtYjY0NGFkNzk3YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWyFLBdPN1OaEfrpAcervl9TgRB6NqM0wtCc a/uC5VpdyY8evMyw8TB/o6CBlAoKSkJpA+I8hE6toz1f2m51RJmktCNVtKy0rRri I48OMmUCEOiSkwPVAHpyWC8DghtnCrvIcR2NjFMeE/p1v/hQ50cajOjz5ktc5YOY ZdImS1L16fy1VD3q/g7smVCJs2w2DI65IuFGBOvbNSgKcGuLzAfTlkOCudsGf29s lYo4BHFQCICnepFIuxzrWhbnjS+J4aLPj11bHL/x96lEKnW3fuHya0si9/+zW7HC gcUZVIuiw2eYNulZ6KRak197/9PepNoe5hrfMT3Y7osN1EYsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtnCgD0jp6LARah9dRIxtx3FqwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvYmNmM2VkNmYtODhhNi0z ZDhhLWFmZDEtYjdlNzVmZjU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi1d043rOSEpauyG5CDSo5O0jCXFPxo75pFJZ/TYd6ZTo8q9TrL/tuX DtTXIiSLyF5jeHbJN4fANTMlk0mlhuoi2xUGKaCQEJaoJRPErEeAWKPqtKrHRhtY O1eAPPU/F/W98WEpad4QyUg8yzNnpYHIedwV85ieF+GQ6K/pID/kEdWD0Y/MJLf5 m6cO/Dko1FAekZaFyucLZNV4QCyzutgZZz5zi+QTHLpa9mRZqRO2UNaM2e5Zueq7 58qJvCS8zc1Jt4ZuLdmXuXayKzY+/hUaa3mvpxKKYRXtAxP4kvLZU9PCaMQK079s RX9elaD8HDS+ntBOdtcars7ldnLrGoI= -----END CERTIFICATE-----Generated at Sun Oct 25 10:26:27 2026 by rpki-client