$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa File: b649b1d0-5d8d-301d-a8c5-4412afe89287.roa (raw, json) Hash identifier: fKTz9ZfgRGUucPfmmcJFixsTa8xkyy+0TAcpzWuBmWM= Subject key identifier: 05:DC:4C:92:D6:A9:4E:79:EA:F0:A0:E5:C5:37:ED:1E:03:E8:D3:76 Certificate issuer: /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Certificate serial: 010D0C9F4328584F655E6B7B5DD708AC1433DD80 Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 174 IP address blocks: 142.248.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:6b:7b:5d:d7:08:ac:14:33:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ded4523b-7723-40b5-87d3-08e9fd3e0855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:14:ea:20:7d:7e:7e:57:54:38:45:97:4d: a6:0b:e0:27:33:7d:e2:c8:80:b4:25:d3:e7:46:a0: c7:ff:49:11:c8:74:b2:6f:26:88:c6:aa:16:9f:2f: d2:78:08:b8:75:94:30:57:c5:5a:b9:fc:7b:53:c9: de:31:e1:3f:2c:da:d9:85:6b:73:40:98:94:b3:2a: b7:5a:a6:10:e9:92:79:24:26:27:09:df:9f:3f:e9: 44:4c:96:1f:65:f4:15:c9:8e:b3:4c:b1:9a:53:4f: 0c:b5:22:32:7b:93:a6:ef:fe:79:4d:98:69:a5:c3: 39:c0:f5:c4:82:8e:77:ee:4c:e2:18:32:6b:36:59: 41:00:b6:22:89:99:4c:8e:dc:ff:f8:2f:c2:cf:d3: 15:92:68:8c:ee:d4:34:1a:54:5d:85:ff:27:ac:70: 0d:ac:ba:89:56:38:e9:bd:38:e2:92:f1:10:15:0b: bf:64:ef:9b:9d:2d:2d:e3:35:d0:67:55:60:a7:be: 86:9e:93:ce:6b:0c:ed:2e:a8:49:75:34:f6:e1:21: ac:10:4d:93:10:da:d9:8b:00:97:ce:92:16:3e:88: d2:a4:15:08:b0:8d:20:ae:59:4e:32:77:0c:cc:58: 30:c9:65:0c:7f:0f:ce:1e:be:af:9b:a4:2b:c5:17: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DC:4C:92:D6:A9:4E:79:EA:F0:A0:E5:C5:37:ED:1E:03:E8:D3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl X509v3 Authority Key Identifier: keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:fb:e7:4c:de:75:e2:84:c9:c0:ab:20:c6:e4:45:3d:66:fd: 40:23:83:5b:07:d7:68:73:43:b9:54:51:8a:eb:db:19:36:ad: 58:5c:ec:16:be:8a:fa:c5:74:a5:d2:e7:81:83:df:d2:cb:a3: b5:f6:0b:b0:ae:5b:9f:cc:5c:f5:a2:18:e9:7b:30:f1:05:fb: b1:49:8b:d8:a2:11:f6:ce:35:9c:27:ea:e9:a7:39:48:dc:a0: 8f:3c:af:bf:53:28:44:fa:28:6f:06:d1:c4:11:10:c5:c2:ad: a9:30:e7:eb:cf:c1:4b:c2:26:b6:11:dc:a6:7c:56:a6:61:9d: 93:f4:0e:47:d1:1e:9e:07:a1:3f:89:e3:ab:a4:b4:2f:36:ee: 89:08:23:ae:ff:5a:65:2f:e9:a0:2e:2b:11:b8:9f:1e:3d:13: 47:65:e7:db:b1:ef:d3:04:51:cc:8b:57:13:d1:22:64:d9:3e: 8b:61:21:46:70:8f:54:0b:06:c1:c4:58:a5:df:32:58:53:9a: d9:55:e7:19:6b:f0:a4:f4:0e:eb:89:1d:bc:3e:c4:be:d6:83: 5d:4e:08:50:44:95:60:eb:6c:1a:89:37:7d:0f:60:53:5b:33: ce:e0:fb:5e:eb:ee:3d:7a:85:92:d6:86:16:1c:e8:78:38:a2: 75:34:7f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmt7XdcIrBQz3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl OTlkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZGVkNDUyM2ItNzcyMy00MGI1LTg3ZDMtMDhlOWZkM2UwODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEU6iB9fn5XVDhFl02mC+AnM33iyIC0JdPn RqDH/0kRyHSybyaIxqoWny/SeAi4dZQwV8Vaufx7U8neMeE/LNrZhWtzQJiUsyq3 WqYQ6ZJ5JCYnCd+fP+lETJYfZfQVyY6zTLGaU08MtSIye5Om7/55TZhppcM5wPXE go537kziGDJrNllBALYiiZlMjtz/+C/Cz9MVkmiM7tQ0GlRdhf8nrHANrLqJVjjp vTjikvEQFQu/ZO+bnS0t4zXQZ1Vgp76GnpPOawztLqhJdTT24SGsEE2TENrZiwCX zpIWPojSpBUIsI0grllOMncMzFgwyWUMfw/OHr6vm6QrxRcYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXcTJLWqU556vCg5cU37R4D6NN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1 MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvYjY0OWIxZDAtNWQ4ZC0z MDFkLWE4YzUtNDQxMmFmZTg5Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk M2IxY2U5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP750zedeKEycCrIMbkRT1m/UAjg1sH12hzQ7lUUYrr2xk2rVhc7Ba+ ivrFdKXS54GD39LLo7X2C7CuW5/MXPWiGOl7MPEF+7FJi9iiEfbONZwn6umnOUjc oI88r79TKET6KG8G0cQREMXCrakw5+vPwUvCJrYR3KZ8VqZhnZP0DkfRHp4HoT+J 46uktC827okII67/WmUv6aAuKxG4nx49E0dl59ux79MEUcyLVxPRImTZPothIUZw j1QLBsHEWKXfMlhTmtlV5xlr8KT0DuuJHbw+xL7Wg11OCFBElWDrbBqJN30PYFNb M87g+17r7j16hZLWhhYc6Hg4onU0f8I= -----END CERTIFICATE-----Generated at Wed Oct 14 10:04:33 2026 by rpki-client