$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d623a37-828b-3dd5-a569-4a637da05234.roa File: 2d623a37-828b-3dd5-a569-4a637da05234.roa (raw, json) Hash identifier: kgrf4Erp/V3UJGQbsxW8+VIgJVaCvbTTZQX0zSPTerA= Subject key identifier: 7D:B9:0A:49:F7:67:6C:69:E5:D5:A4:F7:48:FC:C9:A5:13:98:35:BE Certificate issuer: /CN=1a500574-9f04-4e23-9ecf-075f2c02835a Certificate serial: 010D0C9F4328584F726F49D0B6BB2D5408D40200 Authority key identifier: E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d623a37-828b-3dd5-a569-4a637da05234.roa Signing time: Fri 09 Oct 2026 17:21:50 +0000 ROA not before: Fri 09 Oct 2026 17:21:50 +0000 ROA not after: Thu 07 Jan 2027 18:21:50 +0000 asID: 399460 IP address blocks: 142.228.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:6f:49:d0:b6:bb:2d:54:08:d4:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a500574-9f04-4e23-9ecf-075f2c02835a Validity Not Before: Oct 9 17:21:50 2026 GMT Not After : Jan 7 18:21:50 2027 GMT Subject: CN=17dec5ae-c0c2-4e50-a100-2af0b44b19af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:4a:7f:a0:9a:81:d8:72:b8:8d:83:78:bd: 54:c8:82:b8:7f:b0:8a:82:d5:de:f8:6e:49:18:c5: b4:83:cf:7c:a5:8e:d6:95:e5:0b:2f:ef:39:82:7f: a9:d1:9a:e9:94:f5:0b:3a:e5:46:ff:37:fe:44:43: 8c:81:4a:aa:e7:53:b6:6f:e1:a8:ee:1a:2c:58:a1: 1d:99:00:2b:55:a0:79:c9:6e:65:72:6a:e1:50:48: 28:d3:9e:5d:64:00:50:1a:ab:43:62:bc:1f:05:82: d2:38:17:51:47:5b:71:d5:78:97:ec:59:e4:e3:85: 72:3f:12:6d:7b:62:55:9b:96:04:fb:97:e4:dc:da: ae:3d:63:e5:40:f1:6e:13:05:ab:a6:99:f6:8c:02: 64:d7:84:38:dd:5e:85:a0:13:56:5d:8b:2e:25:49: 5a:fb:b2:c2:45:29:ac:2b:67:4b:2d:07:e3:1c:f1: e1:81:2e:df:ba:7c:e8:ca:48:d3:3f:eb:94:19:22: 50:c8:c8:6d:71:08:7b:d1:de:05:e3:18:e1:94:b6: 6b:b2:50:5b:cc:94:2b:96:cf:df:a8:e3:2f:9a:fd: 67:fa:b4:4e:d9:5c:70:ce:f0:db:dc:f7:01:96:9e: c0:7d:d6:f1:f5:c8:34:7f:1f:54:16:4f:24:f5:6e: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B9:0A:49:F7:67:6C:69:E5:D5:A4:F7:48:FC:C9:A5:13:98:35:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d623a37-828b-3dd5-a569-4a637da05234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl X509v3 Authority Key Identifier: keyid:E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer sbgp-ipAddrBlock: critical IPv4: 142.228.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b0:34:55:40:59:15:60:81:74:28:c7:ea:ff:f6:fb:67:93: 8b:c8:ec:b8:61:4e:a3:23:79:59:63:99:da:b4:5f:ce:95:5d: 81:55:7b:a3:24:25:b6:cd:bd:34:bc:7e:d9:24:ad:b2:42:54: 35:6c:01:de:8b:95:94:5b:e8:1a:ea:37:45:ba:b0:d8:15:2f: 1e:12:ae:1c:24:4e:dc:90:ee:c0:73:56:bb:5a:0b:38:9f:ce: d7:1a:d5:7a:f1:5e:79:e4:80:4b:70:f4:4b:28:4a:a2:74:46: 7f:ba:45:63:d6:59:c0:fa:32:72:2b:52:8c:c0:99:f2:13:0a: ee:1a:3c:e9:14:52:dc:fd:86:0b:ee:ae:b5:91:41:18:8d:05: 78:e1:c4:5c:9d:bd:5b:fa:e0:be:51:74:54:ac:30:7d:ca:0e: 8b:ca:0c:37:b3:31:1a:8a:89:94:a0:03:fd:5a:c4:f1:a3:d4: 41:a4:7a:5a:20:fd:4a:78:84:8d:76:73:42:cc:f3:52:71:32: 98:6d:05:31:16:1e:cc:da:27:89:31:7f:57:e9:84:0e:0f:a4: 0b:61:0d:84:f2:a1:8b:84:93:29:96:e2:ab:9d:07:78:b0:2e: 66:32:f9:89:af:e3:06:4f:fc:96:b7:0c:b9:ef:43:4c:57:ee: 0d:d1:84:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yb0nQtrstVAjUAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE1MDA1NzQtOWYwNC00ZTIzLTllY2YtMDc1ZjJjMDI4 MzVhMB4XDTI2MTAwOTE3MjE1MFoXDTI3MDEwNzE4MjE1MFowLzEtMCsGA1UEAxMk MTdkZWM1YWUtYzBjMi00ZTUwLWExMDAtMmFmMGI0NGIxOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPVKf6CagdhyuI2DeL1UyIK4f7CKgtXe+G5J GMW0g898pY7WleULL+85gn+p0ZrplPULOuVG/zf+REOMgUqq51O2b+Go7hosWKEd mQArVaB5yW5lcmrhUEgo055dZABQGqtDYrwfBYLSOBdRR1tx1XiX7Fnk44VyPxJt e2JVm5YE+5fk3NquPWPlQPFuEwWrppn2jAJk14Q43V6FoBNWXYsuJUla+7LCRSms K2dLLQfjHPHhgS7funzoykjTP+uUGSJQyMhtcQh70d4F4xjhlLZrslBbzJQrls/f qOMvmv1n+rRO2VxwzvDb3PcBlp7Afdbx9cg0fx9UFk8k9W6tCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH25Ckn3Z2xp5dWk90j8yaUTmDW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYTUw MDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVmMmMwMjgzNWEvMmQ2MjNhMzctODI4Yi0z ZGQ1LWE1NjktNGE2MzdkYTA1MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWE1MDA1NzQtOWYwNC00ZTIzLTll Y2YtMDc1ZjJjMDI4MzVhLzFhNTAwNTc0LTlmMDQtNGUyMy05ZWNmLTA3NWYyYzAy ODM1YS5jcmwwHwYDVR0jBBgwFoAU4CbZe7kAGogJ6fD7RAhwhd0umO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYTUwMDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVm MmMwMjgzNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIewNFVAWRVggXQox+r/9vtnk4vI7LhhTqMjeVljmdq0X86VXYFVe6Mk JbbNvTS8ftkkrbJCVDVsAd6LlZRb6BrqN0W6sNgVLx4SrhwkTtyQ7sBzVrtaCzif ztca1XrxXnnkgEtw9EsoSqJ0Rn+6RWPWWcD6MnIrUozAmfITCu4aPOkUUtz9hgvu rrWRQRiNBXjhxFydvVv64L5RdFSsMH3KDovKDDezMRqKiZSgA/1axPGj1EGkelog /Up4hI12c0LM81JxMphtBTEWHszaJ4kxf1fphA4PpAthDYTyoYuEkymW4qudB3iw LmYy+Ymv4wZP/Ja3DLnvQ0xX7g3RhK0= -----END CERTIFICATE-----Generated at Wed Nov 4 14:26:15 2026 by rpki-client