$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/d42bc9c8-86b5-35ec-91c7-1cb71a6d1d62.roa File: d42bc9c8-86b5-35ec-91c7-1cb71a6d1d62.roa (raw, json) Hash identifier: 0LFf0DbZ9a/rdBV9X6Fxz5Quuchsg2gljTJCCXS9W9Q= Subject key identifier: 47:05:60:64:52:6E:3E:9A:71:0C:F1:7B:E1:78:8D:26:B1:73:47:07 Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584F0038B781833E0A348F04B700 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/d42bc9c8-86b5-35ec-91c7-1cb71a6d1d62.roa Signing time: Sat 29 Aug 2026 19:29:44 +0000 ROA not before: Sat 29 Aug 2026 19:29:44 +0000 ROA not after: Fri 27 Nov 2026 20:29:44 +0000 asID: 402590 IP address blocks: 149.112.200.0/24 maxlen: 24 2001:505:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:38:b7:81:83:3e:0a:34:8f:04:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Aug 29 19:29:44 2026 GMT Not After : Nov 27 20:29:44 2026 GMT Subject: CN=1c65b699-d3e3-4c4f-9880-7ae6a1081d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:ef:f1:94:f4:20:5c:9c:f6:73:25:48:56: 27:bf:33:79:af:e6:37:35:a6:30:8c:18:68:7a:ac: c5:3d:f3:9c:3a:74:42:0d:ee:ce:d4:7a:54:ca:61: c5:da:66:5f:90:aa:94:83:aa:01:76:43:60:35:12: 24:15:a3:8d:6b:72:0b:84:60:9c:55:b2:9d:fd:56: b8:a0:e8:d8:4d:eb:ce:ce:fd:9d:3a:fb:de:63:3c: df:6a:43:04:0b:7e:1f:a8:02:8f:49:d0:20:6f:c5: 99:e3:94:0a:53:44:24:ee:1f:36:0a:56:64:24:b8: 6e:7c:00:43:c0:27:3a:d6:5e:d9:34:b5:a7:14:bf: 34:64:fe:de:4f:51:5b:ce:99:dd:e0:cc:f5:0c:eb: fa:ce:c1:b6:7d:cc:c7:0e:28:cb:2f:62:26:14:27: eb:f7:4c:ee:23:3e:e9:19:c1:0e:2a:a6:42:a8:d7: 6c:f8:9a:5e:e5:84:a3:eb:f6:51:f3:75:ff:02:b9: e4:34:94:5c:42:61:f0:d6:d4:a4:18:8e:f9:35:94: 89:c4:20:58:b8:b5:54:3f:56:1a:e7:94:ef:f6:31: 76:08:a5:10:db:d5:c5:0e:19:18:87:3c:df:9f:2c: 8a:98:83:ba:b3:b1:75:a4:08:05:3d:57:b9:4c:49: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:60:64:52:6E:3E:9A:71:0C:F1:7B:E1:78:8D:26:B1:73:47:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/d42bc9c8-86b5-35ec-91c7-1cb71a6d1d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv4: 149.112.200.0/24 IPv6: 2001:505:152::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:01:4f:ef:53:0c:1f:23:36:6c:5f:72:5b:77:87:21:5a:30: 6a:72:77:fc:29:1a:ab:1a:3f:90:91:d9:d3:13:e1:35:ea:27: d0:19:94:0e:26:5a:a4:fa:fb:5c:89:36:58:c3:c9:73:a4:38: 0c:93:91:8c:d9:43:28:8e:9c:9e:e6:fd:e1:61:77:d3:14:81: 92:fb:08:61:d7:29:7d:41:2e:7d:21:eb:d1:b2:84:b6:31:03: 76:9e:79:e3:45:d5:45:01:76:d1:be:3a:2f:0b:69:a3:fe:ed: 1c:85:70:e3:8e:e6:94:11:91:ad:6f:43:b0:26:ec:8f:76:e3: d3:72:cd:94:d8:a4:46:24:b6:10:40:21:97:3b:91:b2:94:ab: 0d:b4:97:06:7b:e2:b7:58:c8:9d:21:0d:61:2a:f0:64:b3:37: 7e:0a:0f:22:7f:b3:f0:2b:e0:c8:ce:c5:ee:33:53:51:02:67: 76:d0:51:78:bf:46:a7:8a:fc:64:23:e9:23:30:fd:f7:74:87: ae:fa:ac:0a:a3:56:c9:7a:1b:22:35:fb:79:13:1b:15:fb:c0: 08:8e:5b:d3:62:e1:3e:33:4e:95:cb:01:16:6a:a4:7d:50:b6: 63:e2:80:c5:cb:80:98:93:b4:f2:93:5f:f4:69:45:b6:f2:91: 9e:5b:7b:99 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8AOLeBgz4KNI8EtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI2MDgyOTE5Mjk0NFoXDTI2MTEyNzIwMjk0NFowLzEtMCsGA1UEAxMk MWM2NWI2OTktZDNlMy00YzRmLTk4ODAtN2FlNmExMDgxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWvv8ZT0IFyc9nMlSFYnvzN5r+Y3NaYwjBho eqzFPfOcOnRCDe7O1HpUymHF2mZfkKqUg6oBdkNgNRIkFaONa3ILhGCcVbKd/Va4 oOjYTevOzv2dOvveYzzfakMEC34fqAKPSdAgb8WZ45QKU0Qk7h82ClZkJLhufABD wCc61l7ZNLWnFL80ZP7eT1Fbzpnd4Mz1DOv6zsG2fczHDijLL2ImFCfr90zuIz7p GcEOKqZCqNds+Jpe5YSj6/ZR83X/ArnkNJRcQmHw1tSkGI75NZSJxCBYuLVUP1Ya 55Tv9jF2CKUQ29XFDhkYhzzfnyyKmIO6s7F1pAgFPVe5TEkfBQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEcFYGRSbj6acQzxe+F4jSaxc0cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvZDQyYmM5YzgtODZiNS0z NWVjLTkxYzctMWNiNzFhNmQxZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXDIMA8E AgACMAkDBwAgAQUFAVIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoAFP71MMHyM2bF9yW3eHIVowanJ3/Cka qxo/kJHZ0xPhNeon0BmUDiZapPr7XIk2WMPJc6Q4DJORjNlDKI6cnub94WF30xSB kvsIYdcpfUEufSHr0bKEtjEDdp5540XVRQF20b46Lwtpo/7tHIVw447mlBGRrW9D sCbsj3bj03LNlNikRiS2EEAhlzuRspSrDbSXBnvit1jInSENYSrwZLM3fgoPIn+z 8CvgyM7F7jNTUQJndtBReL9Gp4r8ZCPpIzD993SHrvqsCqNWyXobIjX7eRMbFfvA CI5b02LhPjNOlcsBFmqkfVC2Y+KAxcuAmJO08pNf9GlFtvKRnlt7mQ== -----END CERTIFICATE-----Generated at Sat Sep 19 13:21:11 2026 by rpki-client