$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bdc661a-0887-3e7b-a96a-baf6815ad49f.roa File: 1bdc661a-0887-3e7b-a96a-baf6815ad49f.roa (raw, json) Hash identifier: ea+kQGPQvpkGvk8XcJlXXJyN1w66zyxeir+vgpdH9vU= Subject key identifier: ED:C5:0E:B2:2A:6D:A8:BA:C2:22:5C:4A:33:BA:1A:5C:24:BE:40:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549D610B66C82C56D83BAC80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bdc661a-0887-3e7b-a96a-baf6815ad49f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 20055 IP address blocks: 149.18.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:61:0b:66:c8:2c:56:d8:3b:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d576feea-b7b0-41af-9fc9-77289f6344a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:a4:ce:d6:e1:9c:01:84:c4:7a:26:5c:07: 05:e2:f8:66:10:43:84:cc:69:f5:3f:96:31:50:57: d6:4c:9e:77:fa:39:41:1c:d3:ad:be:6d:ac:62:99: ab:c8:84:1b:e7:b4:5a:64:85:34:d2:52:e0:1f:65: ab:aa:2c:28:99:2c:ce:da:17:b9:a8:2f:79:f0:0d: e9:91:eb:89:6e:ed:70:83:94:ea:89:55:3a:4d:ea: 4c:5e:13:85:03:86:fe:9e:49:5b:6d:27:85:14:93: 06:71:cf:9a:c2:8f:fa:9a:fa:6f:30:6c:2d:d3:42: 17:20:b0:ea:c9:4c:f2:89:e8:11:5f:5b:cd:f4:d7: 04:8f:d7:5e:d5:ce:6d:17:31:4b:df:ec:fb:da:6e: 81:cb:df:d6:62:e9:1c:1e:65:b6:f2:f8:be:05:17: 6e:a6:d2:a6:2a:a4:9c:17:58:4b:39:a6:19:b0:39: df:65:99:1e:54:c7:fc:79:cd:e1:d9:26:cb:0c:4b: 84:62:e3:3f:f5:9e:6a:c8:d1:ac:6d:70:29:d8:9c: 19:b3:c3:b3:3c:80:50:2c:e9:fb:8f:86:8f:f5:55: 20:c9:a7:9e:61:ef:e3:8e:9f:5e:25:59:23:3a:a4: d1:bc:d0:95:bb:c3:51:fd:22:33:48:6b:d9:9a:9c: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:0E:B2:2A:6D:A8:BA:C2:22:5C:4A:33:BA:1A:5C:24:BE:40:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bdc661a-0887-3e7b-a96a-baf6815ad49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.18.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:61:e7:b9:90:41:df:20:1d:c6:c9:46:25:46:bb:bc:4c:b7: 4b:80:7a:74:0f:6f:a2:39:f4:ca:c8:77:bd:72:90:36:2e:0b: 03:80:5e:a1:72:ee:b5:f7:ce:89:f4:3e:6a:55:5c:18:67:cd: fa:81:09:f5:28:07:5f:94:24:56:67:95:3d:57:ba:32:8e:cb: 9c:25:6e:0c:e6:0b:76:b3:32:2e:a0:a5:f1:ef:93:78:9a:e9: 54:11:55:13:3b:8f:67:09:5c:61:ef:29:b1:73:be:0d:d3:1d: 38:0e:58:1a:ce:67:6c:56:ca:06:9d:5a:fb:c8:d4:23:3f:ff: ad:5c:08:da:67:f4:b2:3c:dc:cd:8d:49:e1:a3:74:28:a2:c7: 47:3d:b8:a8:85:ea:cc:4c:4c:f5:4f:ca:bb:26:30:e3:0c:9f: 34:77:e1:49:d0:2f:a3:7c:e7:dd:dc:34:3b:26:ba:f5:8e:76: 43:29:4b:6f:e4:b8:1c:71:82:d6:64:88:97:09:4f:9a:f5:58: 99:4f:24:ea:01:f8:0b:21:07:ca:7d:10:12:db:b0:4b:46:d3: d1:4e:4d:40:03:3f:4f:91:5d:26:e1:da:cf:20:7d:c9:1e:ad: 65:84:5c:6f:47:89:70:44:13:54:ae:f1:89:a8:79:4c:07:8f: 64:ce:84:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWELZsgsVtg7rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDU3NmZlZWEtYjdiMC00MWFmLTlmYzktNzcyODlmNjM0NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7ukztbhnAGExHomXAcF4vhmEEOEzGn1P5Yx UFfWTJ53+jlBHNOtvm2sYpmryIQb57RaZIU00lLgH2WrqiwomSzO2he5qC958A3p keuJbu1wg5TqiVU6TepMXhOFA4b+nklbbSeFFJMGcc+awo/6mvpvMGwt00IXILDq yUzyiegRX1vN9NcEj9de1c5tFzFL3+z72m6By9/WYukcHmW28vi+BRduptKmKqSc F1hLOaYZsDnfZZkeVMf8ec3h2SbLDEuEYuM/9Z5qyNGsbXAp2JwZs8OzPIBQLOn7 j4aP9VUgyaeeYe/jjp9eJVkjOqTRvNCVu8NR/SIzSGvZmpysAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3FDrIqbai6wiJcSjO6GlwkvkA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWJkYzY2MWEtMDg4Ny0z ZTdiLWE5NmEtYmFmNjgxNWFkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1h57mQQd8gHcbJRiVGu7xMt0uAenQPb6I59MrId71ykDYuCwOAXqFy 7rX3zon0PmpVXBhnzfqBCfUoB1+UJFZnlT1XujKOy5wlbgzmC3azMi6gpfHvk3ia 6VQRVRM7j2cJXGHvKbFzvg3THTgOWBrOZ2xWygadWvvI1CM//61cCNpn9LI83M2N SeGjdCiix0c9uKiF6sxMTPVPyrsmMOMMnzR34UnQL6N8593cNDsmuvWOdkMpS2/k uBxxgtZkiJcJT5r1WJlPJOoB+AshB8p9EBLbsEtG09FOTUADP0+RXSbh2s8gfcke rWWEXG9HiXBEE1Su8YmoeUwHj2TOhOQ= -----END CERTIFICATE-----Generated at Mon Nov 2 06:57:07 2026 by rpki-client