$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa File: 021eac85-cded-3afb-a08b-7bd0564b7758.roa (raw, json) Hash identifier: hJkBqOmsmXqcEFcMOB2vqfHIk4xmkVdD2H6EqwkY9to= Subject key identifier: B9:DE:0D:63:95:31:3D:46:25:9A:70:61:17:39:78:BA:73:BB:D8:C0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA278C516619358E3CA24F580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa Signing time: Mon 26 Oct 2026 22:19:44 +0000 ROA not before: Mon 26 Oct 2026 22:19:44 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 204708 IP address blocks: 154.6.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:78:c5:16:61:93:58:e3:ca:24:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 22:19:44 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=5262aa66-e860-41d9-89a4-fa6107799b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:20:4d:0a:cc:49:86:e9:5c:9f:c8:be:5f: 58:72:a2:ca:8f:02:dd:66:12:2f:55:93:bb:df:33: b1:59:17:28:e5:46:08:fa:31:18:fa:ce:23:4f:b0: 09:cf:fa:f4:ce:66:30:12:32:5f:52:47:86:f0:07: d2:18:12:c8:ae:42:b4:5b:c3:50:f1:db:7b:83:9a: 81:26:93:be:5f:13:34:d6:a1:6c:71:0f:d0:b8:73: c3:fa:97:e0:8f:96:11:07:71:5d:e9:ed:7b:6b:e6: 61:cc:6d:29:70:9f:65:57:27:49:49:5c:e1:aa:81: d6:4c:f3:e3:eb:9c:0a:da:6a:18:b2:5f:ac:21:b0: a0:7b:d6:46:93:98:5d:44:6f:47:c0:a0:b8:cd:a1: d8:f3:7a:83:c1:e8:5e:9f:86:0c:d8:89:66:71:18: d6:33:5d:b3:62:91:f5:dd:67:34:0a:7e:a4:4d:49: e4:a6:49:86:fd:f9:ee:f8:76:19:69:dc:61:f1:23: c9:20:25:6f:7c:e5:09:d5:1a:88:35:00:9e:9a:a8: 42:40:99:28:44:64:aa:ba:dc:26:13:73:63:b8:22: f5:96:ce:11:f8:e2:7a:87:bb:10:a0:89:56:d0:54: dd:75:02:e7:19:16:b5:68:48:0b:8f:97:4c:29:dd: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DE:0D:63:95:31:3D:46:25:9A:70:61:17:39:78:BA:73:BB:D8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.6.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7c:5f:58:76:a2:53:67:d0:d6:d1:a6:22:ae:ab:b1:64:46: ba:99:2a:0d:c8:ab:cc:d5:0d:90:6f:c9:1f:2d:73:e1:56:d6: d6:12:d2:4b:9d:33:92:8f:e1:ce:bc:3b:22:68:80:02:ef:5c: b2:50:32:94:06:93:e3:3b:3f:8d:73:00:76:59:a0:76:8a:27: 8b:f4:1b:1f:62:80:cf:8d:37:75:1a:e7:f3:b0:29:59:e4:e0: c0:76:90:0d:ad:6b:de:6a:f2:01:13:d7:5d:a4:d6:4d:d1:34: e4:03:0d:4c:a7:22:16:bc:27:5e:38:c3:e6:bd:77:7d:e4:51: 42:6c:fd:67:0b:3d:bd:73:77:be:26:4e:6e:7a:d4:b4:45:69: c7:20:79:55:38:8b:02:19:fa:6d:92:06:6a:74:db:c4:74:9d: 36:74:6b:98:35:e6:be:17:8e:1c:47:81:7e:7a:b6:d8:20:b4: a7:f2:e6:21:d7:74:61:55:34:ba:5a:c6:3b:a0:7e:8f:e8:6f: 43:71:fc:97:bf:62:65:a6:43:49:6f:0b:8d:81:82:a6:b7:f4: 6c:fa:69:05:0a:4f:f3:0f:02:00:fc:82:1b:e1:ef:3d:dc:79: da:02:54:98:d9:99:57:59:23:9d:2f:c6:ff:6d:58:dd:87:f9: e2:fb:15:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ieMUWYZNY48ok9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjIyMTk0NFoXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NTI2MmFhNjYtZTg2MC00MWQ5LTg5YTQtZmE2MTA3Nzk5YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKEgTQrMSYbpXJ/Ivl9YcqLKjwLdZhIvVZO7 3zOxWRco5UYI+jEY+s4jT7AJz/r0zmYwEjJfUkeG8AfSGBLIrkK0W8NQ8dt7g5qB JpO+XxM01qFscQ/QuHPD+pfgj5YRB3Fd6e17a+ZhzG0pcJ9lVydJSVzhqoHWTPPj 65wK2moYsl+sIbCge9ZGk5hdRG9HwKC4zaHY83qDwehen4YM2IlmcRjWM12zYpH1 3Wc0Cn6kTUnkpkmG/fnu+HYZadxh8SPJICVvfOUJ1RqINQCemqhCQJkoRGSqutwm E3NjuCL1ls4R+OJ6h7sQoIlW0FTddQLnGRa1aEgLj5dMKd2vBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLneDWOVMT1GJZpwYRc5eLpzu9jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDIxZWFjODUtY2RlZC0z YWZiLWEwOGItN2JkMDU2NGI3NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmgb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR8X1h2olNn0NbRpiKuq7FkRrqZKg3Iq8zVDZBvyR8tc+FW1tYS0kud M5KP4c68OyJogALvXLJQMpQGk+M7P41zAHZZoHaKJ4v0Gx9igM+NN3Ua5/OwKVnk 4MB2kA2ta95q8gET112k1k3RNOQDDUynIha8J144w+a9d33kUUJs/WcLPb1zd74m Tm561LRFaccgeVU4iwIZ+m2SBmp028R0nTZ0a5g15r4XjhxHgX56ttggtKfy5iHX dGFVNLpaxjugfo/ob0Nx/Je/YmWmQ0lvC42Bgqa39Gz6aQUKT/MPAgD8ghvh7z3c edoCVJjZmVdZI50vxv9tWN2H+eL7FQM= -----END CERTIFICATE-----Generated at Tue Oct 27 20:36:22 2026 by rpki-client