$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa File: 42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa (raw, json) Hash identifier: lcwqZvKqT8otU+CzJo2ByfXa1Kf+zZpbDkFOYQqRiAM= Subject key identifier: 6A:D3:E3:C7:79:A2:C8:F9:68:E0:47:5E:D4:7E:32:03:1D:D9:84:B9 Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F4328584F655D700F2C9C35CA10F972C0 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 14007 IP address blocks: 192.149.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:70:0f:2c:9c:35:ca:10:f9:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=7d8a4e87-dd86-4e7b-9204-3e0cb79d5707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:1a:97:18:64:96:66:17:ab:c1:db:ea:a5: d7:8f:0a:3b:87:3f:6e:24:cc:f9:14:11:f4:b5:1f: e7:b6:de:25:26:24:b8:4a:1d:c3:fa:1c:c4:3b:eb: 70:46:71:31:1a:59:56:90:0f:cc:77:06:d3:13:ba: 66:23:16:13:4f:0b:a7:b7:ff:74:4b:ee:6e:05:4f: 32:ac:fa:49:29:d6:7c:b9:35:79:a4:62:99:45:a6: cb:84:aa:59:0b:aa:62:81:05:13:b1:f7:e2:a3:74: e0:ec:16:71:f6:64:35:ee:03:e9:f3:54:db:bd:cd: 0c:92:56:8d:9c:65:6d:73:26:85:04:a5:ab:f0:e2: bb:4c:16:e4:43:8a:05:8c:d3:8b:85:06:b5:3a:a2: 29:94:99:5a:42:2a:a4:fe:52:9b:ad:44:46:11:14: 55:99:3b:73:0f:c7:1e:79:7a:1c:8e:82:e1:df:89: b1:27:f7:0b:41:cb:e9:b8:d6:28:18:c6:3f:ba:61: 91:10:b3:5b:1f:d8:cf:48:ca:b5:90:90:a9:7a:c8: 25:66:1f:76:ed:42:d1:a5:5f:ba:90:16:5a:0f:66: d1:c1:5d:08:2f:8a:49:22:c2:5a:66:43:b4:58:52: f2:16:29:a2:3f:fe:aa:78:b0:ea:b4:fb:9d:c4:dd: 2d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:E3:C7:79:A2:C8:F9:68:E0:47:5E:D4:7E:32:03:1D:D9:84:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv4: 192.149.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1c:31:d6:1a:d3:01:3e:30:f6:56:e3:62:17:66:d6:0e:fc: 1f:d7:bc:47:62:6c:2a:dc:ca:d3:da:4d:20:8a:2e:06:8d:f7: 1d:49:e6:7b:d7:f4:37:d4:37:71:d3:fc:ce:ec:93:21:1a:3b: 57:79:3d:c9:e5:1c:89:f5:73:bb:d2:a4:2e:0c:89:1c:4f:85: 38:09:82:fe:70:59:8f:e2:23:9a:a7:ac:1c:d6:4d:c8:12:07: 39:3b:18:0a:d2:ab:4c:1f:45:a4:03:4f:7f:cc:6b:8f:f8:4a: 49:71:f5:12:64:3a:ce:76:d0:22:e8:48:62:0d:79:2b:fd:60: dd:8e:c0:ae:7c:8c:16:f6:ea:72:e3:ae:c4:e4:d9:86:c8:a0: 76:a0:0f:d6:65:17:5e:2c:47:3d:4b:2c:bf:ea:75:ff:65:c3: 5b:e1:25:84:ed:12:dc:58:da:a2:d1:25:7c:75:54:e6:9b:dd: f6:6a:9d:03:7b:42:4a:9f:f9:7e:0a:e4:61:09:f4:d9:fb:e9: 04:28:71:2a:fa:77:21:9a:40:f7:08:c1:a6:63:24:80:89:7d: 98:a0:f2:64:ab:23:b7:74:51:4b:06:fc:04:27:3d:59:f1:64: c9:56:80:df:94:ad:56:b0:30:cf:f1:8f:74:c0:b6:68:b7:56: 5f:c6:e4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXAPLJw1yhD5csAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk N2Q4YTRlODctZGQ4Ni00ZTdiLTkyMDQtM2UwY2I3OWQ1NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv94alxhklmYXq8Hb6qXXjwo7hz9uJMz5FBH0 tR/ntt4lJiS4Sh3D+hzEO+twRnExGllWkA/MdwbTE7pmIxYTTwunt/90S+5uBU8y rPpJKdZ8uTV5pGKZRabLhKpZC6pigQUTsffio3Tg7BZx9mQ17gPp81Tbvc0MklaN nGVtcyaFBKWr8OK7TBbkQ4oFjNOLhQa1OqIplJlaQiqk/lKbrURGERRVmTtzD8ce eXocjoLh34mxJ/cLQcvpuNYoGMY/umGRELNbH9jPSMq1kJCpesglZh927ULRpV+6 kBZaD2bRwV0IL4pJIsJaZkO0WFLyFimiP/6qeLDqtPudxN0tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrT48d5osj5aOBHXtR+MgMd2YS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvNDJjOTZlZDktODg1NS0z N2M0LThiMGUtOGYxYTEwY2Y2ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0cMdYa0wE+MPZW42IXZtYO/B/XvEdibCrcytPaTSCKLgaN9x1J5nvX 9DfUN3HT/M7skyEaO1d5PcnlHIn1c7vSpC4MiRxPhTgJgv5wWY/iI5qnrBzWTcgS Bzk7GArSq0wfRaQDT3/Ma4/4Sklx9RJkOs520CLoSGINeSv9YN2OwK58jBb26nLj rsTk2YbIoHagD9ZlF14sRz1LLL/qdf9lw1vhJYTtEtxY2qLRJXx1VOab3fZqnQN7 Qkqf+X4K5GEJ9Nn76QQocSr6dyGaQPcIwaZjJICJfZig8mSrI7d0UUsG/AQnPVnx ZMlWgN+UrVawMM/xj3TAtmi3Vl/G5DM= -----END CERTIFICATE-----Generated at Tue Oct 13 16:16:45 2026 by rpki-client