$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa File: 83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa (raw, json) Hash identifier: y607FFXWjB/2A7RbX8ecBc9ecw6Jl5yB24az/d84yIw= Subject key identifier: AF:A7:8F:5C:E3:1B:27:50:9D:A4:C2:6A:18:6C:57:B5:83:11:8C:51 Certificate issuer: /CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc Certificate serial: 010D0C9F4328584F9BCDBA52070078815551D000 Authority key identifier: 83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3128 IP address blocks: 139.225.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ba:52:07:00:78:81:55:51:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=4559f53e-db4c-469a-a5ff-bb36be603900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:bc:5b:29:4a:ac:24:24:ed:44:cb:4a:f4: 53:ea:a7:cc:66:76:08:6f:48:93:fa:94:e6:3f:ca: 8a:46:34:fb:fe:66:d9:96:e2:c1:fc:9b:5c:67:88: a0:09:8d:f0:b7:23:57:0e:df:07:2d:2f:31:33:75: 98:09:d1:8c:08:63:bd:8e:ea:6d:ab:0a:bb:69:81: be:f8:4b:c8:c2:c1:6c:df:eb:ea:9b:8a:61:6c:0b: af:b8:1e:c3:e7:50:0e:b4:1e:b8:84:48:5d:df:73: 0a:b5:66:5b:50:50:f7:92:58:03:a7:ab:f9:44:f2: 9b:1d:c0:7b:de:56:bf:98:88:8f:59:38:fa:bc:95: 4b:45:46:1f:8a:42:33:9b:67:1c:46:02:60:20:c7: 31:26:0a:29:43:90:0d:91:b3:c7:29:b1:07:ad:c0: 8a:35:3a:b3:2a:45:68:e3:00:2f:44:7c:61:c3:6f: b4:8a:48:7d:69:94:2c:41:05:d8:d4:03:ec:93:b2: 42:c0:e3:9d:6b:a9:2d:b3:07:66:cb:4a:ea:91:41: 9b:59:d0:db:9a:f7:8f:fc:44:1a:b7:14:6d:f7:37: fa:98:2f:d5:8b:32:da:cb:fc:15:20:f7:a6:fb:0d: 9f:36:18:8b:d2:88:33:da:be:0e:e8:35:da:11:e2: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:8F:5C:E3:1B:27:50:9D:A4:C2:6A:18:6C:57:B5:83:11:8C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl X509v3 Authority Key Identifier: keyid:83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer sbgp-ipAddrBlock: critical IPv4: 139.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f7:19:8c:80:0d:1f:e1:13:c0:57:0f:d5:84:a1:de:b2:ca: 71:b1:dc:2e:ee:16:5f:4a:a6:82:2d:a0:a9:a0:7e:f4:0b:76: 13:da:3f:43:ea:fc:61:be:86:5d:3c:2d:e0:e5:dd:55:ae:fc: d0:28:2e:7d:1e:f0:fc:70:2d:77:1c:a0:d9:16:e6:de:73:93: 08:23:bc:6d:e7:ab:45:c6:ee:3f:1e:26:c0:f4:bf:d1:44:96: 9b:84:b2:ac:dc:ef:35:7f:0a:4e:e9:bf:21:8b:51:d3:52:ce: f5:6b:c3:e6:ac:e2:38:07:9c:d6:a2:a3:ee:19:fc:c5:1b:26: 62:a5:86:d2:18:30:81:51:17:94:73:4c:33:b0:7f:ea:53:f4: ac:aa:3f:94:e6:37:82:60:48:55:69:18:19:28:6c:90:45:97: 32:8c:e2:2e:88:eb:2e:f7:93:86:af:77:9a:cc:93:d7:43:9a: 5e:92:bf:dd:2d:e2:7b:4f:9f:d1:18:ec:6e:27:0c:45:79:95: 4c:29:11:a3:37:d8:67:4a:b0:06:23:18:85:c5:a2:a3:e5:db: 50:05:7f:92:16:cb:ca:1c:03:b1:70:7a:8e:55:23:88:c9:72: 9c:85:33:f0:19:b8:c4:6e:dd:c0:d2:5f:6d:a3:31:93:d0:d8: bf:b1:ba:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+bzbpSBwB4gVVR0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4MzRhOGYtM2Y2OS00YjE0LTgwOTAtNmIyZGMwOGVk YWNjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NDU1OWY1M2UtZGI0Yy00NjlhLWE1ZmYtYmIzNmJlNjAzOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVm8WylKrCQk7UTLSvRT6qfMZnYIb0iT+pTm P8qKRjT7/mbZluLB/JtcZ4igCY3wtyNXDt8HLS8xM3WYCdGMCGO9juptqwq7aYG+ +EvIwsFs3+vqm4phbAuvuB7D51AOtB64hEhd33MKtWZbUFD3klgDp6v5RPKbHcB7 3la/mIiPWTj6vJVLRUYfikIzm2ccRgJgIMcxJgopQ5ANkbPHKbEHrcCKNTqzKkVo 4wAvRHxhw2+0ikh9aZQsQQXY1APsk7JCwOOda6ktswdmy0rqkUGbWdDbmveP/EQa txRt9zf6mC/VizLay/wVIPem+w2fNhiL0ogz2r4O6DXaEeIiywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK+nj1zjGydQnaTCahhsV7WDEYxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMzgz NGE4Zi0zZjY5LTRiMTQtODA5MC02YjJkYzA4ZWRhY2MvODMyOTBjOWEtZWUyNi0z MmM2LWEyYzUtNmMyNmU5NWMzMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjM4MzRhOGYtM2Y2OS00YjE0LTgw OTAtNmIyZGMwOGVkYWNjL2IzODM0YThmLTNmNjktNGIxNC04MDkwLTZiMmRjMDhl ZGFjYy5jcmwwHwYDVR0jBBgwFoAUgxfUmiO/2Qenx9mNFt3XGBFeOd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMzgzNGE4Zi0zZjY5LTRiMTQtODA5MC02YjJk YzA4ZWRhY2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi+EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFfcZjIANH+ETwFcP1YSh3rLKcbHcLu4WX0qmgi2gqaB+9At2E9o/Q+r8 Yb6GXTwt4OXdVa780CgufR7w/HAtdxyg2Rbm3nOTCCO8beerRcbuPx4mwPS/0USW m4SyrNzvNX8KTum/IYtR01LO9WvD5qziOAec1qKj7hn8xRsmYqWG0hgwgVEXlHNM M7B/6lP0rKo/lOY3gmBIVWkYGShskEWXMoziLojrLveThq93msyT10OaXpK/3S3i e0+f0RjsbicMRXmVTCkRozfYZ0qwBiMYhcWio+XbUAV/khbLyhwDsXB6jlUjiMly nIUz8Bm4xG7dwNJfbaMxk9DYv7G6Mg== -----END CERTIFICATE-----Generated at Tue Oct 27 12:01:13 2026 by rpki-client