$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d76f94e-7e9a-34f5-ae74-d76d73977650.roa File: 2d76f94e-7e9a-34f5-ae74-d76d73977650.roa (raw, json) Hash identifier: qjloMcAY4OYW0YeXjaacg2sVE7qoavGj0gDAiS2guDM= Subject key identifier: 3A:1C:50:4F:6F:40:85:50:AB:9F:5F:AB:74:F7:03:A5:3E:FD:30:6D Certificate issuer: /CN=1a500574-9f04-4e23-9ecf-075f2c02835a Certificate serial: 010D0C9F4328584F726F94CADE939A452D261F00 Authority key identifier: E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d76f94e-7e9a-34f5-ae74-d76d73977650.roa Signing time: Fri 09 Oct 2026 17:22:25 +0000 ROA not before: Fri 09 Oct 2026 17:22:25 +0000 ROA not after: Thu 07 Jan 2027 18:22:25 +0000 asID: 399460 IP address blocks: 142.228.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:6f:94:ca:de:93:9a:45:2d:26:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a500574-9f04-4e23-9ecf-075f2c02835a Validity Not Before: Oct 9 17:22:25 2026 GMT Not After : Jan 7 18:22:25 2027 GMT Subject: CN=417af2d9-04a0-4c6d-949b-57bb175f271f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:de:ac:63:45:af:51:8c:8a:c7:6d:71:b0: ab:b7:01:60:00:1f:62:b8:c8:a1:e2:9f:d8:65:85: f6:71:9a:68:c4:37:3b:7f:3b:65:43:73:af:4d:68: 46:eb:0a:40:02:34:9b:56:9a:72:94:50:92:7d:88: 95:66:2c:87:ba:b0:17:d3:d9:ce:05:91:da:f7:8d: f0:30:42:c1:5e:64:85:b3:eb:65:61:fa:9a:60:e9: db:54:22:ae:4c:25:c2:bb:83:25:7e:a8:97:9b:71: 6b:82:42:5b:7a:9a:06:ed:44:b6:83:5c:b8:2a:18: 2a:dd:7d:2f:3e:08:59:28:9a:0b:7b:e2:49:34:6b: 7a:b0:ee:72:52:a8:a8:e1:cc:fa:1e:e7:0e:cf:a8: 22:85:c8:c7:c2:96:9a:5a:71:7a:c1:74:10:b8:fd: 8b:12:1a:05:3d:22:c7:6c:c8:fc:39:0e:14:96:67: f2:30:3f:32:83:e0:fe:2e:8e:cf:ec:a4:4e:22:37: 54:1a:ef:ba:28:11:3b:b3:a1:9f:d7:1e:e0:c1:35: 41:0e:68:47:fe:96:fd:ce:01:d1:11:7e:69:77:ba: 6f:f1:e3:de:4b:d8:77:9c:4e:55:95:ac:e8:9a:35: 87:9c:4a:51:6d:1d:19:85:5d:2d:3a:f9:27:d3:f9: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1C:50:4F:6F:40:85:50:AB:9F:5F:AB:74:F7:03:A5:3E:FD:30:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/2d76f94e-7e9a-34f5-ae74-d76d73977650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.crl X509v3 Authority Key Identifier: keyid:E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer sbgp-ipAddrBlock: critical IPv4: 142.228.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e4:33:ee:bf:d9:30:40:94:d0:02:a9:3a:2e:90:c5:bb:dd: 5b:ce:65:5e:4a:9a:60:05:92:aa:4e:ea:aa:fd:4f:ff:e7:c0: b0:bb:d0:70:97:33:48:2f:45:3d:18:da:c6:65:76:c0:fe:d4: 76:f8:fb:44:5a:5d:79:a1:34:67:f2:dd:af:83:54:94:13:95: 29:75:2c:34:08:87:cc:ff:b0:0a:6f:cd:14:8b:d6:47:81:08: c1:2b:0c:bf:02:ba:a1:bc:22:fe:50:8f:96:80:3f:2a:f0:4b: cf:79:d5:c0:3e:70:dd:aa:f7:9d:40:b1:4a:4a:14:54:c0:5f: f9:b5:36:32:17:7a:1c:63:5e:48:66:ec:15:d6:2a:91:4c:a1: f8:15:2a:2e:d7:91:30:ae:41:f3:16:6b:fd:f4:6d:74:cc:97: 32:41:eb:ba:32:bd:19:b9:2e:14:67:03:94:e2:29:37:e6:d5: c4:66:24:93:3a:0b:6c:05:7a:12:e9:04:d6:73:a6:da:fd:11: 1e:35:cb:79:e4:d3:93:df:f1:b0:36:0d:da:38:17:ec:6e:73: c4:0d:d8:5c:65:2d:1a:ad:11:c4:60:f7:a6:b8:19:f6:ad:73: 7e:dc:7f:9d:4a:98:a2:bd:30:27:ad:56:1d:7f:cb:31:ae:e4: 8b:b8:d0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yb5TK3pOaRS0mHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE1MDA1NzQtOWYwNC00ZTIzLTllY2YtMDc1ZjJjMDI4 MzVhMB4XDTI2MTAwOTE3MjIyNVoXDTI3MDEwNzE4MjIyNVowLzEtMCsGA1UEAxMk NDE3YWYyZDktMDRhMC00YzZkLTk0OWItNTdiYjE3NWYyNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl7erGNFr1GMisdtcbCrtwFgAB9iuMih4p/Y ZYX2cZpoxDc7fztlQ3OvTWhG6wpAAjSbVppylFCSfYiVZiyHurAX09nOBZHa943w MELBXmSFs+tlYfqaYOnbVCKuTCXCu4MlfqiXm3FrgkJbepoG7US2g1y4Khgq3X0v PghZKJoLe+JJNGt6sO5yUqio4cz6HucOz6gihcjHwpaaWnF6wXQQuP2LEhoFPSLH bMj8OQ4UlmfyMD8yg+D+Lo7P7KROIjdUGu+6KBE7s6Gf1x7gwTVBDmhH/pb9zgHR EX5pd7pv8ePeS9h3nE5VlazomjWHnEpRbR0ZhV0tOvkn0/mLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDocUE9vQIVQq59fq3T3A6U+/TBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYTUw MDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVmMmMwMjgzNWEvMmQ3NmY5NGUtN2U5YS0z NGY1LWFlNzQtZDc2ZDczOTc3NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWE1MDA1NzQtOWYwNC00ZTIzLTll Y2YtMDc1ZjJjMDI4MzVhLzFhNTAwNTc0LTlmMDQtNGUyMy05ZWNmLTA3NWYyYzAy ODM1YS5jcmwwHwYDVR0jBBgwFoAU4CbZe7kAGogJ6fD7RAhwhd0umO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYTUwMDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVm MmMwMjgzNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvkM+6/2TBAlNACqToukMW73VvOZV5KmmAFkqpO6qr9T//nwLC70HCX M0gvRT0Y2sZldsD+1Hb4+0RaXXmhNGfy3a+DVJQTlSl1LDQIh8z/sApvzRSL1keB CMErDL8CuqG8Iv5Qj5aAPyrwS8951cA+cN2q951AsUpKFFTAX/m1NjIXehxjXkhm 7BXWKpFMofgVKi7XkTCuQfMWa/30bXTMlzJB67oyvRm5LhRnA5TiKTfm1cRmJJM6 C2wFehLpBNZzptr9ER41y3nk05Pf8bA2Ddo4F+xuc8QN2FxlLRqtEcRg96a4Gfat c37cf51KmKK9MCetVh1/yzGu5Iu40Lc= -----END CERTIFICATE-----Generated at Wed Nov 4 04:14:38 2026 by rpki-client