$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa File: 0fbfcbb5-a853-3343-9ef1-465735735b21.roa (raw, json) Hash identifier: Q6D4+5wWxLwgY8sOvamtE+EEj5JTP1hMhNxfVM3/9CA= Subject key identifier: F5:A2:3E:72:4F:61:91:2A:72:85:21:97:4F:D4:2E:1D:74:94:74:11 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F81483D8BBD8E1B6410F59780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa Signing time: Thu 15 Oct 2026 01:00:12 +0000 ROA not before: Thu 15 Oct 2026 01:00:12 +0000 ROA not after: Wed 13 Jan 2027 02:00:12 +0000 asID: 29222 IP address blocks: 149.18.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:81:48:3d:8b:bd:8e:1b:64:10:f5:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 01:00:12 2026 GMT Not After : Jan 13 02:00:12 2027 GMT Subject: CN=836f607f-689d-414f-b017-618f17afbdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:c9:3a:54:8f:6e:42:1f:5f:7a:96:5d:b5: 47:22:42:51:66:68:70:c1:a3:d8:f9:7c:ef:fe:8a: c6:4a:cb:d1:b9:31:3b:37:0c:43:d1:02:f8:9b:57: df:25:1a:b2:e2:d4:8f:25:d5:bd:24:79:3f:4c:32: 7a:a0:a7:67:18:6b:31:a0:e1:ec:f0:f2:4d:53:a0: 54:b4:f2:e7:dd:15:7c:8d:67:51:4f:f0:15:9e:29: 2a:1f:40:59:02:ac:41:d1:55:0b:c7:2c:85:b5:93: 1d:16:1f:bb:e6:a0:73:21:c4:44:df:a0:73:06:34: 61:1d:a4:8c:67:38:e0:6d:2e:00:5b:12:2c:81:5c: 81:93:31:81:d9:ef:38:ba:0b:94:5f:f3:68:61:46: 29:ee:24:38:b7:95:fc:98:5a:1c:83:2a:41:ab:88: 45:9d:83:0a:08:f7:6b:0f:e7:59:ee:db:cf:ae:f8: de:58:b8:45:5e:d8:b7:7a:19:68:fc:58:01:73:f5: 7a:15:71:95:f2:63:5a:b9:22:a1:51:04:e4:f6:ff: cb:45:f7:b6:73:86:8a:e5:15:d7:06:ea:57:c1:d9: 52:1c:74:a6:31:94:53:75:28:ec:b9:4c:52:4d:d6: 21:4b:c7:5b:ff:c0:a5:5d:8a:6b:14:20:d4:b3:44: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A2:3E:72:4F:61:91:2A:72:85:21:97:4F:D4:2E:1D:74:94:74:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.18.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b0:1a:3f:7f:dc:4e:e2:05:11:2e:f8:fd:40:f5:99:3f:0d: 62:ec:7b:80:a4:9a:0e:bb:d3:d0:c5:eb:45:a0:5b:a6:6f:79: 71:26:4b:3e:f0:bb:87:4d:d5:54:03:47:25:a0:44:cd:bf:c3: 2b:d1:84:1f:d8:7a:6c:09:03:e7:23:c8:d5:75:f9:74:78:6e: 59:ae:61:fd:2e:50:62:f1:fa:12:c3:c4:92:14:00:25:f3:10: ab:4d:15:bc:48:ef:b9:7d:56:45:22:62:16:67:57:f8:2f:8b: 63:f8:72:95:64:4d:9d:92:be:3d:a3:98:f9:7c:ff:cd:e9:6d: 27:fd:b5:53:40:0c:17:6b:fc:08:e3:fe:f8:d7:c7:0a:fe:40: 66:80:bb:2e:7b:d4:8a:b7:64:0f:36:16:6e:dd:3c:86:f0:b7: 24:d6:25:17:6a:45:36:03:20:dc:a3:23:2c:64:f3:00:08:26: 69:dc:21:10:b9:d6:ca:37:d6:8d:74:18:89:8b:f0:36:8b:ee: 9e:73:15:26:87:74:da:73:6d:c6:a5:48:c2:35:60:6f:4f:be: 6d:23:ec:83:cf:6b:6d:15:55:e5:a1:44:4f:79:f9:f3:2a:33: 28:68:60:4a:83:68:a0:db:81:06:57:0e:69:49:65:f1:32:7f: 36:3e:de:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+BSD2LvY4bZBD1l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNTAxMDAxMloXDTI3MDExMzAyMDAxMlowLzEtMCsGA1UEAxMk ODM2ZjYwN2YtNjg5ZC00MTRmLWIwMTctNjE4ZjE3YWZiZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqTJOlSPbkIfX3qWXbVHIkJRZmhwwaPY+Xzv /orGSsvRuTE7NwxD0QL4m1ffJRqy4tSPJdW9JHk/TDJ6oKdnGGsxoOHs8PJNU6BU tPLn3RV8jWdRT/AVnikqH0BZAqxB0VULxyyFtZMdFh+75qBzIcRE36BzBjRhHaSM ZzjgbS4AWxIsgVyBkzGB2e84uguUX/NoYUYp7iQ4t5X8mFocgypBq4hFnYMKCPdr D+dZ7tvPrvjeWLhFXti3ehlo/FgBc/V6FXGV8mNauSKhUQTk9v/LRfe2c4aK5RXX BupXwdlSHHSmMZRTdSjsuUxSTdYhS8db/8ClXYprFCDUs0QhlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWiPnJPYZEqcoUhl0/ULh10lHQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZiZmNiYjUtYTg1My0z MzQzLTllZjEtNDY1NzM1NzM1YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGywGj9/3E7iBREu+P1A9Zk/DWLse4Ckmg6709DF60WgW6ZveXEmSz7w u4dN1VQDRyWgRM2/wyvRhB/YemwJA+cjyNV1+XR4blmuYf0uUGLx+hLDxJIUACXz EKtNFbxI77l9VkUiYhZnV/gvi2P4cpVkTZ2Svj2jmPl8/83pbSf9tVNADBdr/Ajj /vjXxwr+QGaAuy571Iq3ZA82Fm7dPIbwtyTWJRdqRTYDINyjIyxk8wAIJmncIRC5 1so31o10GImL8DaL7p5zFSaHdNpzbcalSMI1YG9Pvm0j7IPPa20VVeWhRE95+fMq MyhoYEqDaKDbgQZXDmlJZfEyfzY+3pU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:32:33 2026 by rpki-client