$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/021b477b-6121-3fc6-a37a-c2b8bfd74c50.roa File: 021b477b-6121-3fc6-a37a-c2b8bfd74c50.roa (raw, json) Hash identifier: w1W4jJLTJ5z1jPv1CV4LZD7jLgnJUDxj3C+7TYVU8aE= Subject key identifier: 89:17:D1:0D:5A:76:2A:10:5A:E1:B7:D2:B6:71:A0:A5:AB:7D:78:62 Certificate issuer: /CN=957b19d8-1bea-4d13-ba76-247760e893bd Certificate serial: 010D0C9F4328584FA18F67FEDA0614353EF2FE80 Authority key identifier: 2F:69:06:7F:1A:2C:E5:B0:D3:AA:62:87:EB:0C:7C:47:EA:D1:F2:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/021b477b-6121-3fc6-a37a-c2b8bfd74c50.roa Signing time: Mon 26 Oct 2026 14:29:32 +0000 ROA not before: Mon 26 Oct 2026 14:29:32 +0000 ROA not after: Sun 24 Jan 2027 15:29:32 +0000 asID: 399115 IP address blocks: 147.185.90.0/23 maxlen: 23 2606:6f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/957b19d8-1bea-4d13-ba76-247760e893bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/957b19d8-1bea-4d13-ba76-247760e893bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:8f:67:fe:da:06:14:35:3e:f2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957b19d8-1bea-4d13-ba76-247760e893bd Validity Not Before: Oct 26 14:29:32 2026 GMT Not After : Jan 24 15:29:32 2027 GMT Subject: CN=54550973-ee1a-4f17-87c8-a270f508e75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:64:37:42:73:87:eb:6f:1c:d7:ff:86:51: 5a:bd:84:c0:32:31:6c:60:2d:97:f1:6a:65:4c:7a: fa:e5:15:a0:57:61:a5:32:c9:fe:03:21:bc:32:01: 04:17:f8:07:cb:ec:87:b5:2a:8a:87:98:88:c2:d4: 82:aa:f4:af:dd:58:5c:b5:6c:9d:ec:ee:2b:9e:bb: e5:63:bd:af:29:29:37:44:4e:c0:df:0c:69:8f:36: fb:a2:4e:ba:16:e5:92:9c:b1:5d:e8:7b:05:dc:4b: 40:b5:36:53:66:55:95:a0:68:e2:72:fc:08:03:ef: 9b:bf:1d:f2:46:a3:0d:10:9a:3a:a2:51:1c:ec:db: 21:8c:4d:77:51:99:f8:71:0f:2b:93:c3:dc:82:f3: 8d:cb:ce:1b:dc:97:c0:bc:03:64:cf:08:bb:6a:60: 2a:f3:80:df:63:71:9e:42:37:89:b6:dc:d6:b6:0c: 50:3c:28:e3:84:25:39:27:4e:a2:57:2e:05:f9:21: d9:90:ef:58:fb:ea:c4:79:10:da:ec:85:90:c3:7b: f8:6a:df:0e:5d:3f:1c:02:19:3c:b8:bd:23:f9:4d: ae:ad:97:31:03:d9:bc:d5:05:3f:bf:41:46:df:ba: 36:b4:c4:49:4b:46:31:1d:59:08:61:f7:9d:9f:b8: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:D1:0D:5A:76:2A:10:5A:E1:B7:D2:B6:71:A0:A5:AB:7D:78:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/021b477b-6121-3fc6-a37a-c2b8bfd74c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd/957b19d8-1bea-4d13-ba76-247760e893bd.crl X509v3 Authority Key Identifier: keyid:2F:69:06:7F:1A:2C:E5:B0:D3:AA:62:87:EB:0C:7C:47:EA:D1:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/957b19d8-1bea-4d13-ba76-247760e893bd.cer sbgp-ipAddrBlock: critical IPv4: 147.185.90.0/23 IPv6: 2606:6f40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b7:3c:f6:16:8b:67:2e:90:40:97:f0:4f:98:2a:b8:3c:80: 5c:7c:e6:a6:62:48:ee:c3:b3:5e:76:9e:01:b9:4e:d7:a6:73: a2:66:2f:0c:b8:0b:3c:e3:f0:20:3e:ff:a2:84:c5:6f:73:52: d2:21:76:ba:b2:88:bc:dc:b0:1d:02:53:80:d2:92:17:fd:36: eb:a8:cd:97:d4:e6:e4:1e:36:dc:80:a3:dc:6c:37:d8:43:cb: 8d:75:3e:d7:fd:f8:a8:95:45:b5:e8:3e:bd:f8:ae:5e:31:26: cd:5f:8d:5b:c9:ab:12:81:1f:1c:2b:5d:3a:bd:05:37:b1:05: d2:3a:26:6d:29:8d:48:34:f7:4e:f9:7c:80:41:89:86:18:8a: 90:c0:03:29:7e:f3:f1:9c:64:2b:90:f3:ba:ca:b2:ff:41:c8: 4f:dc:17:c9:ca:f3:34:69:a7:15:b7:cf:00:89:e9:ed:ac:fd: 9f:a0:e2:89:be:e6:02:3d:d9:c9:09:54:84:11:6c:07:ab:82: 7f:a3:64:9d:21:ad:74:75:ff:d9:31:fc:84:f8:65:2d:2e:85: 48:32:1d:a8:b3:2f:f1:7f:e2:68:16:04:74:f6:bd:62:96:81: 0e:20:b4:b5:bc:b9:c3:36:fb:10:42:25:2e:d8:7a:41:65:ed: f4:5f:2d:70 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE+hj2f+2gYUNT7y/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3YjE5ZDgtMWJlYS00ZDEzLWJhNzYtMjQ3NzYwZTg5 M2JkMB4XDTI2MTAyNjE0MjkzMloXDTI3MDEyNDE1MjkzMlowLzEtMCsGA1UEAxMk NTQ1NTA5NzMtZWUxYS00ZjE3LTg3YzgtYTI3MGY1MDhlNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BRkN0Jzh+tvHNf/hlFavYTAMjFsYC2X8Wpl THr65RWgV2GlMsn+AyG8MgEEF/gHy+yHtSqKh5iIwtSCqvSv3VhctWyd7O4rnrvl Y72vKSk3RE7A3wxpjzb7ok66FuWSnLFd6HsF3EtAtTZTZlWVoGjicvwIA++bvx3y RqMNEJo6olEc7NshjE13UZn4cQ8rk8PcgvONy84b3JfAvANkzwi7amAq84DfY3Ge QjeJttzWtgxQPCjjhCU5J06iVy4F+SHZkO9Y++rEeRDa7IWQw3v4at8OXT8cAhk8 uL0j+U2urZcxA9m81QU/v0FG37o2tMRJS0YxHVkIYfedn7g5FQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIkX0Q1adioQWuG30rZxoKWrfXhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NTdi MTlkOC0xYmVhLTRkMTMtYmE3Ni0yNDc3NjBlODkzYmQvMDIxYjQ3N2ItNjEyMS0z ZmM2LWEzN2EtYzJiOGJmZDc0YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTU3YjE5ZDgtMWJlYS00ZDEzLWJh NzYtMjQ3NzYwZTg5M2JkLzk1N2IxOWQ4LTFiZWEtNGQxMy1iYTc2LTI0Nzc2MGU4 OTNiZC5jcmwwHwYDVR0jBBgwFoAUL2kGfxos5bDTqmKH6wx8R+rR8lowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85NTdiMTlkOC0xYmVhLTRkMTMtYmE3Ni0yNDc3 NjBlODkzYmQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBk7laMA0E AgACMAcDBQAmBm9AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADy3PPYWi2cukECX8E+YKrg8gFx85qZiSO7D s152ngG5Ttemc6JmLwy4Czzj8CA+/6KExW9zUtIhdrqyiLzcsB0CU4DSkhf9Nuuo zZfU5uQeNtyAo9xsN9hDy411Ptf9+KiVRbXoPr34rl4xJs1fjVvJqxKBHxwrXTq9 BTexBdI6Jm0pjUg09075fIBBiYYYipDAAyl+8/GcZCuQ87rKsv9ByE/cF8nK8zRp pxW3zwCJ6e2s/Z+g4om+5gI92ckJVIQRbAergn+jZJ0hrXR1/9kx/IT4ZS0uhUgy HaizL/F/4mgWBHT2vWKWgQ4gtLW8ucM2+xBCJS7YekFl7fRfLXA= -----END CERTIFICATE-----Generated at Wed Nov 4 14:26:48 2026 by rpki-client