$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa File: 8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa (raw, json) Hash identifier: JDXpkSfmFeiBAXYGGTVCLXL9egUs1SghlIcOCHSfHbg= Subject key identifier: 2D:63:88:DC:B4:7C:64:AC:8E:8A:E4:7D:41:37:06:A2:24:DF:CD:32 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584F7A4D9C4D1B4CAB45AB73E440 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3477 IP address blocks: 192.149.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9c:4d:1b:4c:ab:45:ab:73:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bbca15e5-c533-4e10-85c0-f1562edab95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:ca:45:d0:0d:09:8b:bc:1c:c7:3f:f7:f2: 80:d4:14:ae:2f:0e:74:65:be:d5:cd:a8:e0:86:03: 90:ab:07:aa:19:12:90:13:7b:be:68:52:37:c5:59: 4d:22:84:a1:7f:f2:db:7d:7b:19:b5:16:61:ff:2e: 84:cb:65:12:5b:db:36:86:bc:8f:4d:e1:ad:3b:1c: 5a:e1:9b:a7:ea:43:ac:dc:01:25:82:a4:f6:fc:b5: 8a:81:52:a2:6c:45:6f:0a:05:0b:ba:75:7d:35:51: 8e:f8:32:66:ca:14:d3:f4:c1:ab:1e:57:9e:ae:02: c3:9c:a1:7d:39:81:09:b2:c8:65:ba:13:ab:84:a2: 1c:d2:6a:b0:29:e0:29:a0:f4:4d:77:09:d6:f5:15: 8d:46:f7:db:68:c2:27:7f:4f:9c:6a:ea:8c:57:59: eb:73:99:70:4e:60:9a:a6:a7:d4:d9:3a:b5:43:c0: f9:9b:8d:4e:f0:f1:ca:3d:37:50:1e:bb:a3:94:2f: 13:88:84:3d:73:23:0b:9d:a4:ad:e2:f3:ca:e2:74: 08:ee:9a:09:21:f2:31:8e:56:75:76:c9:cb:48:98: 42:2e:dc:f9:ef:b4:be:5b:21:90:d8:e2:cb:48:48: b9:62:75:f3:36:e9:44:a9:44:00:93:95:4a:35:d5: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:63:88:DC:B4:7C:64:AC:8E:8A:E4:7D:41:37:06:A2:24:DF:CD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.149.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:32:ff:d7:a7:d1:34:dc:fa:97:e6:24:ea:6a:48:b9:6c:71: ee:cc:60:c7:0c:8e:c8:f7:00:df:02:8c:c3:60:88:b7:7b:b8: c7:30:ee:b4:87:27:5a:6c:dc:43:46:4c:83:7d:c3:3c:fd:4a: 72:db:ec:26:18:df:12:ad:64:6e:ac:b0:f9:fd:13:c3:25:53: f8:04:e8:b8:1a:a3:65:dc:2e:90:67:a7:e6:51:67:2e:8a:da: 3e:03:89:94:76:8f:e5:73:16:1f:5e:c9:5f:5b:51:2c:94:b6: 00:6a:90:5a:6e:52:f9:c1:31:01:2d:c2:d3:91:ce:41:d0:e9: b4:9f:33:0e:53:5f:55:03:c8:14:c2:c3:53:20:bd:4f:c9:53: 84:c8:4a:2b:02:8c:f4:02:ae:5d:c5:20:6d:74:25:4d:05:a2: 0a:68:d2:a9:07:c4:96:56:43:88:db:f7:55:c2:df:c2:d6:f3: 6d:4e:a3:b7:cd:f3:fa:59:e3:71:2e:4e:c1:06:4d:d3:cc:f0: 4f:84:f3:4e:7d:f4:8b:cb:44:81:31:b1:cd:69:40:1f:e5:1e: 65:cf:b0:54:c8:49:19:a0:ce:a3:da:01:86:81:71:b3:8d:54: b9:2c:b9:9b:1e:2a:26:b1:fb:38:8e:8f:30:a7:33:d1:9c:43: 83:45:30:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZxNG0yrRatz5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmJjYTE1ZTUtYzUzMy00ZTEwLTg1YzAtZjE1NjJlZGFiOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpLKRdANCYu8HMc/9/KA1BSuLw50Zb7Vzajg hgOQqweqGRKQE3u+aFI3xVlNIoShf/LbfXsZtRZh/y6Ey2USW9s2hryPTeGtOxxa 4Zun6kOs3AElgqT2/LWKgVKibEVvCgULunV9NVGO+DJmyhTT9MGrHleergLDnKF9 OYEJsshluhOrhKIc0mqwKeApoPRNdwnW9RWNRvfbaMInf0+cauqMV1nrc5lwTmCa pqfU2Tq1Q8D5m41O8PHKPTdQHrujlC8TiIQ9cyMLnaSt4vPK4nQI7poJIfIxjlZ1 dsnLSJhCLtz577S+WyGQ2OLLSEi5YnXzNulEqUQAk5VKNdWWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1jiNy0fGSsjorkfUE3BqIk380yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvOGFiMTFiOGItOGJlYy0z M2RhLWFiOTgtOWQ3YjRlOGRmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8y/9en0TTc+pfmJOpqSLlsce7MYMcMjsj3AN8CjMNgiLd7uMcw7rSH J1ps3ENGTIN9wzz9SnLb7CYY3xKtZG6ssPn9E8MlU/gE6Lgao2XcLpBnp+ZRZy6K 2j4DiZR2j+VzFh9eyV9bUSyUtgBqkFpuUvnBMQEtwtORzkHQ6bSfMw5TX1UDyBTC w1MgvU/JU4TISisCjPQCrl3FIG10JU0Fogpo0qkHxJZWQ4jb91XC38LW821Oo7fN 8/pZ43EuTsEGTdPM8E+E80599IvLRIExsc1pQB/lHmXPsFTISRmgzqPaAYaBcbON VLksuZseKiax+ziOjzCnM9GcQ4NFMJk= -----END CERTIFICATE-----Generated at Mon Nov 2 09:58:06 2026 by rpki-client