$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/4b5bd3fe-e3f6-3adf-9b9d-0330162f252f.roa File: 4b5bd3fe-e3f6-3adf-9b9d-0330162f252f.roa (raw, json) Hash identifier: Q+EAbkpWJelF4ZT1+OFu69aFvSbaXsI09dBYS81ANMs= Subject key identifier: 74:21:D7:FE:A3:D3:88:EF:75:64:7A:74:03:E2:0C:2D:10:E1:B2:42 Certificate issuer: /CN=43e785dc-86ca-484a-82a1-cc222898ac2f Certificate serial: 010D0C9F4328584F5BF25D8EECF381B4B2ED0480 Authority key identifier: B1:0B:04:11:7D:03:CF:62:96:FE:41:8A:79:B6:D1:49:15:EF:1E:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/4b5bd3fe-e3f6-3adf-9b9d-0330162f252f.roa Signing time: Thu 01 Oct 2026 16:02:21 +0000 ROA not before: Thu 01 Oct 2026 16:02:21 +0000 ROA not after: Wed 30 Dec 2026 16:53:17 +0000 asID: 393769 IP address blocks: 128.254.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/43e785dc-86ca-484a-82a1-cc222898ac2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/43e785dc-86ca-484a-82a1-cc222898ac2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:f2:5d:8e:ec:f3:81:b4:b2:ed:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e785dc-86ca-484a-82a1-cc222898ac2f Validity Not Before: Oct 1 16:02:21 2026 GMT Not After : Dec 30 16:53:17 2026 GMT Subject: CN=64891ae6-eeb3-49db-9471-04d6f9392069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:56:8e:20:f5:c4:d0:40:a5:fb:66:12:29: 25:be:8b:b8:7f:6c:07:f4:01:80:b9:e6:78:87:f0: 47:8a:95:32:cc:60:3d:fb:30:14:bd:9a:39:3b:96: f1:45:a2:64:28:ba:09:dd:28:3e:44:18:ba:55:67: 5a:f8:ba:00:b5:c3:7b:af:af:1f:04:13:56:d3:a7: fa:78:83:42:3e:43:00:30:4b:25:80:fe:29:35:9d: be:c5:dd:87:9d:85:1d:80:1d:23:21:79:1d:f4:66: 0e:96:00:31:8d:02:5e:9b:56:89:d9:b8:3a:dd:c8: be:f0:01:39:e7:0a:92:6e:b0:46:f2:f1:fa:fd:e4: 92:13:9e:f7:d2:19:bf:30:39:9f:c8:e5:51:28:51: 07:4b:d4:16:5b:ce:5f:28:43:f8:92:2a:ca:4b:28: 09:69:9b:be:7a:56:8c:8b:eb:8b:8b:3f:39:d2:3b: e4:e8:fb:4b:7f:0c:60:7f:73:60:71:88:03:7c:37: b0:fb:4d:8a:94:fc:eb:3b:11:25:c3:11:b7:fe:51: 03:bd:53:ac:87:ba:74:7f:fe:ac:1a:b2:fc:de:f5: a0:c7:f8:23:30:a7:04:e0:b3:8d:4d:a3:60:e0:1e: 86:4b:99:f3:65:d2:42:43:f0:0e:77:49:6a:e9:b7: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:21:D7:FE:A3:D3:88:EF:75:64:7A:74:03:E2:0C:2D:10:E1:B2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/4b5bd3fe-e3f6-3adf-9b9d-0330162f252f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f/43e785dc-86ca-484a-82a1-cc222898ac2f.crl X509v3 Authority Key Identifier: keyid:B1:0B:04:11:7D:03:CF:62:96:FE:41:8A:79:B6:D1:49:15:EF:1E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e785dc-86ca-484a-82a1-cc222898ac2f.cer sbgp-ipAddrBlock: critical IPv4: 128.254.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:08:31:24:64:4e:e2:bf:15:9b:7e:28:32:00:63:a2:29:36: d2:9d:bf:44:38:74:90:28:98:5e:ed:a1:8e:78:d4:b3:69:66: 0b:e8:02:35:56:4b:25:22:20:9b:f3:3b:d4:10:a1:50:ee:df: ef:24:01:49:e4:b8:d6:f6:d9:a9:7c:9d:80:e2:c9:a5:a3:d6: 9a:ca:05:d3:9c:22:4f:33:c5:df:f7:dc:bb:16:9d:fe:13:af: 34:fe:4e:b5:aa:9c:8c:32:ef:35:12:c3:aa:60:6d:a0:8f:15: 5a:2a:bf:dd:85:58:64:86:6e:0d:2d:d8:12:0b:c2:df:cd:26: 72:7a:bd:f2:f2:69:bf:38:a4:e4:58:3a:65:20:4c:0f:c3:e4: c8:1a:cc:a0:26:2f:5a:2d:ec:96:0d:0b:50:fd:33:40:65:49: 9a:cc:33:91:0e:21:57:d9:ad:24:ae:f3:95:df:9c:c7:e3:20: 2f:4f:45:28:33:a8:1f:10:67:90:6e:ec:2d:a1:53:c6:ac:10: 9c:85:f6:91:58:1c:da:e2:e1:9a:a9:88:53:a9:f6:c2:f3:0d: 73:b9:3c:69:d7:e2:cc:a9:83:35:3f:f4:33:d7:02:9c:e7:dd: a6:c9:b9:cd:71:cd:5c:d9:e1:ee:3a:35:15:ef:62:82:b9:f2: 0f:6e:df:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9b8l2O7POBtLLtBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNlNzg1ZGMtODZjYS00ODRhLTgyYTEtY2MyMjI4OThh YzJmMB4XDTI2MTAwMTE2MDIyMVoXDTI2MTIzMDE2NTMxN1owLzEtMCsGA1UEAxMk NjQ4OTFhZTYtZWViMy00OWRiLTk0NzEtMDRkNmY5MzkyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n9WjiD1xNBApftmEiklvou4f2wH9AGAueZ4 h/BHipUyzGA9+zAUvZo5O5bxRaJkKLoJ3Sg+RBi6VWda+LoAtcN7r68fBBNW06f6 eINCPkMAMEslgP4pNZ2+xd2HnYUdgB0jIXkd9GYOlgAxjQJem1aJ2bg63ci+8AE5 5wqSbrBG8vH6/eSSE5730hm/MDmfyOVRKFEHS9QWW85fKEP4kirKSygJaZu+elaM i+uLiz850jvk6PtLfwxgf3NgcYgDfDew+02KlPzrOxElwxG3/lEDvVOsh7p0f/6s GrL83vWgx/gjMKcE4LONTaNg4B6GS5nzZdJCQ/AOd0lq6bfCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQh1/6j04jvdWR6dAPiDC0Q4bJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80M2U3 ODVkYy04NmNhLTQ4NGEtODJhMS1jYzIyMjg5OGFjMmYvNGI1YmQzZmUtZTNmNi0z YWRmLTliOWQtMDMzMDE2MmYyNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDNlNzg1ZGMtODZjYS00ODRhLTgy YTEtY2MyMjI4OThhYzJmLzQzZTc4NWRjLTg2Y2EtNDg0YS04MmExLWNjMjIyODk4 YWMyZi5jcmwwHwYDVR0jBBgwFoAUsQsEEX0Dz2KW/kGKebbRSRXvHqcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80M2U3ODVkYy04NmNhLTQ4NGEtODJhMS1jYzIy Mjg5OGFjMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4IMSRkTuK/FZt+KDIAY6IpNtKdv0Q4dJAomF7toY541LNpZgvoAjVW SyUiIJvzO9QQoVDu3+8kAUnkuNb22al8nYDiyaWj1prKBdOcIk8zxd/33LsWnf4T rzT+TrWqnIwy7zUSw6pgbaCPFVoqv92FWGSGbg0t2BILwt/NJnJ6vfLyab84pORY OmUgTA/D5MgazKAmL1ot7JYNC1D9M0BlSZrMM5EOIVfZrSSu85XfnMfjIC9PRSgz qB8QZ5Bu7C2hU8asEJyF9pFYHNri4ZqpiFOp9sLzDXO5PGnX4sypgzU/9DPXApzn 3abJuc1xzVzZ4e46NRXvYoK58g9u37g= -----END CERTIFICATE-----Generated at Mon Nov 2 14:27:58 2026 by rpki-client