$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: nRFjuuAVWEOWbp2f9CUhlqiZOeCSbhptJh7V3jLibMI= Subject key identifier: 58:F9:6D:15:49:CD:D6:6D:D2:8B:02:F1:1D:52:8D:13:A5:7E:84:16 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584F82ADC54185A4A92EA052EE80 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c5:41:85:a4:a9:2e:a0:52:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=1c68303b-39e3-4464-9fa1-c47551b1f514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:2e:02:24:ef:83:59:4c:fe:15:20:61:a2: ef:16:a5:7d:ea:93:c0:cd:13:4f:bc:3b:6a:fd:62: 55:54:96:ad:24:5a:23:78:4f:88:3c:9a:00:cc:3d: d9:70:06:c4:73:d6:91:8c:e3:6f:e8:5d:a9:19:e3: e4:e0:36:25:2a:43:b3:90:48:a4:39:32:1d:9e:f8: e2:64:26:10:76:2f:4f:7d:86:c3:92:c4:81:a0:ff: cd:4c:ee:5f:bb:1f:88:3a:65:82:b4:48:1b:f2:e2: e3:9d:9e:33:8b:37:55:3b:6d:65:cc:52:db:21:28: b4:56:e1:43:28:76:96:2b:2d:c6:5d:46:d6:5a:4f: 14:12:0e:87:65:04:4c:56:5a:2f:84:2e:41:b4:14: a1:8d:d2:b6:95:51:c4:50:46:2e:11:41:b8:3f:36: c6:59:38:4d:1c:7c:50:bc:06:60:a9:07:e7:6c:b3: 4a:06:7e:f8:99:f0:b9:c7:d3:d3:43:b4:bd:f6:7d: 59:6b:fd:c1:a8:e5:6d:bb:e0:94:d6:c3:ba:af:1d: 9d:ae:5c:34:f1:13:31:55:be:0c:6b:c4:34:3b:79: 41:42:a6:1f:0a:4f:22:50:4e:a7:69:03:b8:14:0c: ad:43:14:0b:76:15:d0:2a:5a:83:8e:3d:fa:97:b8: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F9:6D:15:49:CD:D6:6D:D2:8B:02:F1:1D:52:8D:13:A5:7E:84:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3d:f6:b3:5a:de:9b:9d:32:da:20:a2:ef:38:67:3f:9e:da: b6:d4:62:b0:5d:f7:fc:6a:6f:48:a2:af:b6:37:f6:e7:84:71: 81:55:a7:e9:45:8c:e6:5a:ac:50:d2:de:a8:8c:6f:ba:a4:81: 6c:7b:4d:c1:2b:78:67:31:a5:90:c4:e8:9f:b5:42:e3:f2:3c: ba:7e:7d:6a:3d:a6:33:d6:ad:7e:4c:f5:7a:8a:76:e3:34:bb: 16:70:84:34:eb:10:94:7a:fb:1a:e0:ac:dd:4d:f0:c6:d1:07: 0e:27:12:99:36:1b:90:a3:ca:eb:69:dc:4d:a9:09:f9:2c:94: 06:f2:bd:31:51:78:3d:35:4c:7c:8c:9f:83:15:78:e7:59:26: 96:fc:8f:42:fc:03:94:09:b5:25:3a:71:dc:87:9e:bd:32:6c: c5:30:45:11:e6:7f:40:0e:d4:6e:38:54:70:e8:64:0c:d7:2f: 28:4f:96:6d:fb:ab:c8:b3:00:b9:60:da:f6:5c:9a:f6:b7:d2: fd:b1:ff:8a:3a:0d:37:67:ab:e4:f1:73:17:8b:d6:b3:a4:dc: 36:3e:2f:f5:a7:16:29:7b:a3:ce:de:d5:47:c6:1f:f7:9e:8b: 5a:90:42:47:ad:21:00:3e:90:f0:1e:f5:47:21:bd:47:1c:21: 29:fe:d5:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcVBhaSpLqBS7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MWM2ODMwM2ItMzllMy00NDY0LTlmYTEtYzQ3NTUxYjFmNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtQuAiTvg1lM/hUgYaLvFqV96pPAzRNPvDtq /WJVVJatJFojeE+IPJoAzD3ZcAbEc9aRjONv6F2pGePk4DYlKkOzkEikOTIdnvji ZCYQdi9PfYbDksSBoP/NTO5fux+IOmWCtEgb8uLjnZ4zizdVO21lzFLbISi0VuFD KHaWKy3GXUbWWk8UEg6HZQRMVlovhC5BtBShjdK2lVHEUEYuEUG4PzbGWThNHHxQ vAZgqQfnbLNKBn74mfC5x9PTQ7S99n1Za/3BqOVtu+CU1sO6rx2drlw08RMxVb4M a8Q0O3lBQqYfCk8iUE6naQO4FAytQxQLdhXQKlqDjj36l7jX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj5bRVJzdZt0osC8R1SjROlfoQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ499rNa3pudMtogou84Zz+e2rbUYrBd9/xqb0iir7Y39ueEcYFVp+lF jOZarFDS3qiMb7qkgWx7TcEreGcxpZDE6J+1QuPyPLp+fWo9pjPWrX5M9XqKduM0 uxZwhDTrEJR6+xrgrN1N8MbRBw4nEpk2G5Cjyutp3E2pCfkslAbyvTFReD01THyM n4MVeOdZJpb8j0L8A5QJtSU6cdyHnr0ybMUwRRHmf0AO1G44VHDoZAzXLyhPlm37 q8izALlg2vZcmva30v2x/4o6DTdnq+TxcxeL1rOk3DY+L/WnFil7o87e1UfGH/ee i1qQQketIQA+kPAe9UchvUccISn+1dY= -----END CERTIFICATE-----Generated at Tue Oct 27 22:42:39 2026 by rpki-client