$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa File: d97fe973-812f-3261-88cc-3d44e14e1f31.roa (raw, json) Hash identifier: uePE3g99NU5uAgJYbtFvS05kE36U1QAA04JMvi3P0aM= Subject key identifier: 53:4F:7C:58:88:F4:C7:F7:69:F4:33:57:AA:01:23:5D:5E:E5:E0:21 Certificate issuer: /CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca Certificate serial: 010D0C9F4328584F49892BF97D64D99AE2EC2280 Authority key identifier: CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62581 IP address blocks: 148.59.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:2b:f9:7d:64:d9:9a:e2:ec:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=70bf1b0d-ba5e-4d44-b676-adb7885670b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:44:36:32:35:de:26:7b:13:30:db:af:6f: b2:ad:bb:64:fa:86:1b:6c:8b:94:08:c7:e0:f1:85: ff:39:26:50:77:bc:0d:ad:ba:e3:83:7b:bf:01:fb: 04:18:74:f5:81:9a:6b:13:07:2a:4e:35:2b:f2:89: 9d:f5:fd:79:14:1e:67:a3:3d:5b:97:64:89:e3:a9: c7:46:6b:75:ad:37:af:64:70:96:29:97:83:5a:c4: c7:bb:e1:35:8b:94:f4:7e:33:08:e6:14:49:0d:41: eb:54:05:12:d4:52:8d:5b:97:d8:51:e6:9a:75:12: 5c:82:63:2f:73:f7:8b:74:46:66:c6:c2:d5:06:e6: f3:65:03:53:0e:a9:10:89:4d:ca:14:1b:d6:c6:3c: de:46:43:9e:5d:8c:a8:37:a6:fa:51:40:1e:03:2d: a1:93:c4:2f:64:67:1e:07:40:42:e3:55:e2:cb:aa: 19:40:71:c0:24:33:da:c0:2d:d6:61:36:22:81:cc: b6:08:02:ff:b4:db:cd:3d:03:ca:a7:dc:7a:ed:1a: 59:3b:73:19:94:73:a8:16:1b:f8:d8:eb:59:5a:23: a8:33:df:ef:60:90:a7:99:2d:e8:d5:39:19:3b:63: 24:ba:07:0d:92:10:8a:16:1f:1e:a4:8c:fb:df:48: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4F:7C:58:88:F4:C7:F7:69:F4:33:57:AA:01:23:5D:5E:E5:E0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl X509v3 Authority Key Identifier: keyid:CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer sbgp-ipAddrBlock: critical IPv4: 148.59.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6f:d0:22:7a:83:b3:a1:7a:0c:6e:8e:bd:3b:a2:ef:f5:d7: fb:32:84:57:2d:02:4c:a6:3e:13:43:e8:3d:73:d8:c7:28:65: f8:e6:e1:18:63:ca:d0:13:43:e2:27:4a:64:f8:29:ba:14:be: b4:34:8b:c5:f7:b6:41:23:de:6c:5f:0e:57:1c:4b:71:d8:d0: 62:8f:44:0f:4f:33:bc:3a:00:54:9a:37:f3:65:5d:88:94:a8: 71:de:e2:af:bd:1f:df:1f:2b:5c:50:92:8d:1f:1c:f6:cf:13: 1c:c8:19:bb:25:9f:2a:f1:8c:73:64:eb:cd:b0:06:ef:65:f1: 88:ba:27:2a:51:42:1d:e0:9c:5d:2d:2d:71:9c:1c:33:ec:93: 0c:27:d4:09:26:d6:23:79:5f:5d:21:84:b8:68:0a:d1:b1:9e: c8:21:1b:aa:37:20:76:28:d1:eb:23:b8:27:94:47:df:24:f4: ab:98:9c:1c:3b:49:11:6d:4a:57:0c:33:6d:d0:c1:bc:61:57: 14:fe:f1:6e:e0:a7:e0:00:67:c6:94:03:95:e4:2f:e8:4e:2d: 60:b1:40:03:f2:49:c1:01:24:1f:49:43:dc:db:77:af:a6:6f: a6:2c:2e:d2:02:c7:07:78:15:85:76:11:1d:00:21:6a:71:6f: 72:5d:bc:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiSv5fWTZmuLsIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5ODc2ZDEtNmY2NC00NmQ4LWI5ZmQtNWNmZmJjOTg0 OGNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzBiZjFiMGQtYmE1ZS00ZDQ0LWI2NzYtYWRiNzg4NTY3MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz5ENjI13iZ7EzDbr2+yrbtk+oYbbIuUCMfg 8YX/OSZQd7wNrbrjg3u/AfsEGHT1gZprEwcqTjUr8omd9f15FB5noz1bl2SJ46nH Rmt1rTevZHCWKZeDWsTHu+E1i5T0fjMI5hRJDUHrVAUS1FKNW5fYUeaadRJcgmMv c/eLdEZmxsLVBubzZQNTDqkQiU3KFBvWxjzeRkOeXYyoN6b6UUAeAy2hk8QvZGce B0BC41Xiy6oZQHHAJDPawC3WYTYigcy2CAL/tNvNPQPKp9x67RpZO3MZlHOoFhv4 2OtZWiOoM9/vYJCnmS3o1TkZO2MkugcNkhCKFh8epIz730jy1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNPfFiI9Mf3afQzV6oBI11e5eAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yODk4 NzZkMS02ZjY0LTQ2ZDgtYjlmZC01Y2ZmYmM5ODQ4Y2EvZDk3ZmU5NzMtODEyZi0z MjYxLTg4Y2MtM2Q0NGUxNGUxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjg5ODc2ZDEtNmY2NC00NmQ4LWI5 ZmQtNWNmZmJjOTg0OGNhLzI4OTg3NmQxLTZmNjQtNDZkOC1iOWZkLTVjZmZiYzk4 NDhjYS5jcmwwHwYDVR0jBBgwFoAUz35ZLkvuzDsr5+r+k9gsSglVo6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yODk4NzZkMS02ZjY0LTQ2ZDgtYjlmZC01Y2Zm YmM5ODQ4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9v0CJ6g7Ohegxujr07ou/11/syhFctAkymPhND6D1z2McoZfjm4Rhj ytATQ+InSmT4KboUvrQ0i8X3tkEj3mxfDlccS3HY0GKPRA9PM7w6AFSaN/NlXYiU qHHe4q+9H98fK1xQko0fHPbPExzIGbslnyrxjHNk682wBu9l8Yi6JypRQh3gnF0t LXGcHDPskwwn1Akm1iN5X10hhLhoCtGxnsghG6o3IHYo0esjuCeUR98k9KuYnBw7 SRFtSlcMM23QwbxhVxT+8W7gp+AAZ8aUA5XkL+hOLWCxQAPyScEBJB9JQ9zbd6+m b6YsLtICxwd4FYV2ER0AIWpxb3JdvFM= -----END CERTIFICATE-----Generated at Mon Oct 12 22:21:29 2026 by rpki-client