$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/c89309af-77fe-3d51-943c-aee233a9045f.roa File: c89309af-77fe-3d51-943c-aee233a9045f.roa (raw, json) Hash identifier: V2cmY4Du37uH8MQX61wZ9CbjKJJ8Y94t6y+hnhA3vfs= Subject key identifier: 46:E1:5C:38:19:31:32:1B:99:C8:81:A3:23:99:8B:37:35:65:90:04 Certificate issuer: /CN=0aa6c86a-9161-4e12-ae02-d04b278fb03f Certificate serial: 010D0C9F4328584F8BD25BCCAC9524436F21E140 Authority key identifier: FE:1A:A9:32:98:CE:BC:BD:16:E0:B0:4E:B7:CC:05:E0:64:25:64:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/c89309af-77fe-3d51-943c-aee233a9045f.roa Signing time: Sun 18 Oct 2026 19:36:39 +0000 ROA not before: Sun 18 Oct 2026 19:36:39 +0000 ROA not after: Sat 16 Jan 2027 20:36:39 +0000 asID: 214432 IP address blocks: 134.49.204.0/24 maxlen: 24 134.49.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:d2:5b:cc:ac:95:24:43:6f:21:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa6c86a-9161-4e12-ae02-d04b278fb03f Validity Not Before: Oct 18 19:36:39 2026 GMT Not After : Jan 16 20:36:39 2027 GMT Subject: CN=af0ec541-4852-473a-8ad4-2bc37059ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:61:bc:81:43:de:e9:39:5c:a1:f0:fd:7c: 30:fc:25:4c:8a:c8:15:e5:d8:dc:b7:dc:ad:ce:b6: 81:fa:f0:47:9a:91:9b:eb:7d:cf:b6:a7:98:c8:44: 20:0d:d4:e6:f2:79:c6:21:4f:15:2b:21:1f:91:f1: fa:5b:9b:9f:e5:01:b7:27:15:44:72:d4:5f:84:38: 86:62:92:80:3f:85:86:3b:50:d5:1a:48:bc:2c:c7: 27:15:52:7d:7e:b9:6f:ae:99:94:58:2a:6a:ac:27: 79:a7:0f:89:3c:71:9f:b0:3f:eb:a4:67:3d:f2:73: 29:08:6e:97:c3:e5:91:be:50:5a:ca:2c:89:00:96: 65:57:27:d8:95:aa:1a:97:e5:4b:ef:d2:00:4c:fc: db:62:58:95:b6:8e:9a:10:5b:1b:7d:b1:36:a2:a7: dd:25:a1:17:79:0f:b7:bf:78:72:5a:0b:da:03:1b: 93:17:29:35:cf:2e:8a:b3:b4:a7:3b:a1:d8:c9:a6: 70:d1:39:6c:e2:de:00:06:a7:73:37:f1:60:90:e3: 17:3c:d7:13:1b:4f:ee:dc:c7:1b:10:c2:0f:b6:cf: 86:9e:80:67:79:3d:77:cb:0b:70:ee:88:e1:66:cc: 60:40:e8:6b:37:f2:37:b6:e4:52:0d:15:de:04:90: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:5C:38:19:31:32:1B:99:C8:81:A3:23:99:8B:37:35:65:90:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/c89309af-77fe-3d51-943c-aee233a9045f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.crl X509v3 Authority Key Identifier: keyid:FE:1A:A9:32:98:CE:BC:BD:16:E0:B0:4E:B7:CC:05:E0:64:25:64:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer sbgp-ipAddrBlock: critical IPv4: 134.49.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1b:29:90:3a:af:98:99:a1:90:38:63:27:39:15:6c:1c:dc: 6d:78:ff:a2:47:04:1e:74:c1:90:c9:aa:28:dd:a1:b5:e5:46: f5:cf:8d:7c:1f:7a:71:6d:e4:28:69:34:cf:60:e6:d8:27:1f: 82:2b:d7:6e:6b:22:19:d1:3b:ce:52:23:dc:9b:5f:32:ad:01: c2:05:ea:e9:79:8f:9e:c2:cf:5c:34:23:3a:07:65:6b:3e:57: 10:30:c4:2d:88:42:0b:21:6e:21:3a:5f:18:6d:95:e8:08:33: 1a:d6:f5:3d:5b:d6:34:f4:1e:d0:da:a9:83:84:3f:51:54:17: 08:fd:c4:57:6e:a6:9f:d5:e1:9c:49:30:46:69:fb:d3:f0:93: 01:b0:a7:eb:e6:d1:a8:60:8d:4d:51:3a:a1:18:7c:a0:19:52: 23:0f:70:13:1f:ae:72:90:5b:de:df:96:cb:c2:ba:2a:17:de: 42:28:26:6d:e1:5a:c3:e0:30:3a:b5:46:74:58:1a:cf:9a:0e: 37:40:fa:ab:7a:25:b4:be:1a:e1:70:44:c6:bc:2d:ff:5d:be: 8e:60:23:10:74:c5:65:40:3b:7f:a8:db:69:78:bc:e2:52:99: 9e:ca:18:2d:59:41:7b:fc:26:04:ad:70:0f:e2:31:06:6e:fa: 4d:42:2f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+L0lvMrJUkQ28h4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNmM4NmEtOTE2MS00ZTEyLWFlMDItZDA0YjI3OGZi MDNmMB4XDTI2MTAxODE5MzYzOVoXDTI3MDExNjIwMzYzOVowLzEtMCsGA1UEAxMk YWYwZWM1NDEtNDg1Mi00NzNhLThhZDQtMmJjMzcwNTllZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha9hvIFD3uk5XKHw/Xww/CVMisgV5djct9yt zraB+vBHmpGb633PtqeYyEQgDdTm8nnGIU8VKyEfkfH6W5uf5QG3JxVEctRfhDiG YpKAP4WGO1DVGki8LMcnFVJ9frlvrpmUWCpqrCd5pw+JPHGfsD/rpGc98nMpCG6X w+WRvlBayiyJAJZlVyfYlaoal+VL79IATPzbYliVto6aEFsbfbE2oqfdJaEXeQ+3 v3hyWgvaAxuTFyk1zy6Ks7SnO6HYyaZw0Tls4t4ABqdzN/FgkOMXPNcTG0/u3Mcb EMIPts+GnoBneT13ywtw7ojhZsxgQOhrN/I3tuRSDRXeBJAP0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbhXDgZMTIbmciBoyOZizc1ZZAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8wYWE2 Yzg2YS05MTYxLTRlMTItYWUwMi1kMDRiMjc4ZmIwM2YvYzg5MzA5YWYtNzdmZS0z ZDUxLTk0M2MtYWVlMjMzYTkwNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMGFhNmM4NmEtOTE2MS00ZTEyLWFl MDItZDA0YjI3OGZiMDNmLzBhYTZjODZhLTkxNjEtNGUxMi1hZTAyLWQwNGIyNzhm YjAzZi5jcmwwHwYDVR0jBBgwFoAU/hqpMpjOvL0W4LBOt8wF4GQlZFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8wYWE2Yzg2YS05MTYxLTRlMTItYWUwMi1kMDRi Mjc4ZmIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhjHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4bKZA6r5iZoZA4Yyc5FWwc3G14/6JHBB50wZDJqijdobXlRvXPjXwf enFt5ChpNM9g5tgnH4Ir125rIhnRO85SI9ybXzKtAcIF6ul5j57Cz1w0IzoHZWs+ VxAwxC2IQgshbiE6XxhtlegIMxrW9T1b1jT0HtDaqYOEP1FUFwj9xFdupp/V4ZxJ MEZp+9PwkwGwp+vm0ahgjU1ROqEYfKAZUiMPcBMfrnKQW97flsvCuioX3kIoJm3h WsPgMDq1RnRYGs+aDjdA+qt6JbS+GuFwRMa8Lf9dvo5gIxB0xWVAO3+o22l4vOJS mZ7KGC1ZQXv8JgStcA/iMQZu+k1CL6g= -----END CERTIFICATE-----Generated at Sun Oct 25 20:06:09 2026 by rpki-client