$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa File: a9d478a0-dd28-3241-80ee-f78ae660038e.roa (raw, json) Hash identifier: L2QzkMGVtFHbBf/vyf8kV/qF5V2rr2pebCyVl3nT7b4= Subject key identifier: CA:03:22:D4:86:42:99:F2:64:99:B3:36:3A:6C:99:A5:D2:BD:71:BD Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Certificate serial: 010D0C9F4328584FB3A684E67AF562FF1D3BCC40 Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 32121 IP address blocks: 142.152.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:84:e6:7a:f5:62:ff:1d:3b:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=b5cc038e-0b64-4572-9423-b3a8b2311028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:ae:3d:10:e8:63:58:60:3f:28:77:ff:e5: 96:19:28:19:e1:a1:ab:20:c1:a0:63:aa:67:9d:12: ea:7e:ad:f9:41:d6:01:43:ef:0c:e6:22:ba:52:62: 28:ff:2f:e1:9a:42:0c:79:70:e4:07:d7:87:cf:4b: d5:30:0a:98:11:96:ba:9b:69:e2:76:73:f2:53:12: 4c:99:0c:af:5e:54:90:b0:3a:8d:de:c4:8a:89:c3: fd:26:79:bf:c3:d9:79:dc:fa:df:92:fd:7b:d9:36: c0:47:7e:b5:dc:83:a2:f6:0d:93:b9:08:d3:bb:db: e2:01:39:c4:8d:a8:6f:53:2d:79:12:c0:38:c2:ac: e4:38:15:36:c0:46:69:12:65:3f:4f:6f:01:6d:94: 45:c6:e4:af:f7:fe:63:23:44:c5:fe:c2:9c:cf:ca: bc:67:b9:38:b6:4d:77:39:45:a1:76:4c:24:b6:f4: bc:4d:5a:14:1a:41:93:eb:1d:a6:53:9e:47:9b:44: 7a:2c:0d:3e:0b:97:6c:db:f6:05:c0:1d:f5:7f:5e: d8:74:75:53:12:0c:47:45:1b:c2:87:51:ae:a9:14: c9:a5:84:39:01:22:78:04:ba:58:5e:b3:29:eb:e4: 3b:40:33:6e:d1:76:bb:f7:a0:e9:d1:5d:48:74:03: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:03:22:D4:86:42:99:F2:64:99:B3:36:3A:6C:99:A5:D2:BD:71:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl X509v3 Authority Key Identifier: keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer sbgp-ipAddrBlock: critical IPv4: 142.152.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3e:13:2a:58:28:bf:5d:81:e3:0f:09:30:f3:37:2a:ce:d8: 61:d4:7e:7d:e9:31:15:e1:1b:bc:5a:62:8f:0e:97:f6:26:9d: a0:f4:ac:d0:0d:3b:64:b4:9c:36:6d:8b:1a:6d:f8:97:7a:5c: bf:f4:c0:5e:60:af:87:47:d2:8a:83:83:25:0c:f0:7b:df:79: 43:3b:9f:91:7c:84:42:dd:ab:aa:b1:fe:28:c9:ca:a0:20:e5: 49:4b:57:44:f9:6a:35:1f:8e:0e:db:bd:77:1e:1c:5d:2f:2f: ec:0d:da:77:18:55:3b:3b:59:6d:08:4a:70:7a:76:44:14:58: 4a:49:84:94:14:bb:06:ae:4c:f9:54:c6:d1:b1:84:1b:b2:c6: 74:ca:71:9d:55:06:d5:2d:e5:e9:7a:16:90:37:6b:a0:18:2d: c3:bc:49:f0:b2:b6:93:5f:04:69:97:cf:97:ae:2b:42:a1:b5: 56:74:bc:1f:cb:66:47:28:ce:22:c0:6d:b5:32:a8:35:fd:0b: 48:1e:e3:9b:df:71:76:fe:a5:df:6d:82:42:82:89:1d:8a:f2: cf:36:09:25:be:b0:90:d1:4e:3f:34:07:b0:ca:a9:2e:d6:4d: 3a:b6:4a:e4:75:5a:0a:1c:35:22:b1:b0:30:f5:25:e7:72:66: ed:73:64:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpoTmevVi/x07zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3 ZjRkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YjVjYzAzOGUtMGI2NC00NTcyLTk0MjMtYjNhOGIyMzExMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneeuPRDoY1hgPyh3/+WWGSgZ4aGrIMGgY6pn nRLqfq35QdYBQ+8M5iK6UmIo/y/hmkIMeXDkB9eHz0vVMAqYEZa6m2nidnPyUxJM mQyvXlSQsDqN3sSKicP9Jnm/w9l53Prfkv172TbAR3613IOi9g2TuQjTu9viATnE jahvUy15EsA4wqzkOBU2wEZpEmU/T28BbZRFxuSv9/5jI0TF/sKcz8q8Z7k4tk13 OUWhdkwktvS8TVoUGkGT6x2mU55Hm0R6LA0+C5ds2/YFwB31f17YdHVTEgxHRRvC h1GuqRTJpYQ5ASJ4BLpYXrMp6+Q7QDNu0Xa796Dp0V1IdAPkPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoDItSGQpnyZJmzNjpsmaXSvXG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvYTlkNDc4YTAtZGQyOC0z MjQxLTgwZWUtZjc4YWU2NjAwMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2 MTZjMzdmNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpg+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU+EypYKL9dgeMPCTDzNyrO2GHUfn3pMRXhG7xaYo8Ol/YmnaD0rNAN O2S0nDZtixpt+Jd6XL/0wF5gr4dH0oqDgyUM8HvfeUM7n5F8hELdq6qx/ijJyqAg 5UlLV0T5ajUfjg7bvXceHF0vL+wN2ncYVTs7WW0ISnB6dkQUWEpJhJQUuwauTPlU xtGxhBuyxnTKcZ1VBtUt5el6FpA3a6AYLcO8SfCytpNfBGmXz5euK0KhtVZ0vB/L ZkcoziLAbbUyqDX9C0ge45vfcXb+pd9tgkKCiR2K8s82CSW+sJDRTj80B7DKqS7W TTq2SuR1WgocNSKxsDD1JedyZu1zZNU= -----END CERTIFICATE-----Generated at Thu Nov 5 06:19:47 2026 by rpki-client