$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/909e53cc-51d1-3125-9c79-58cc89b9abac.roa File: 909e53cc-51d1-3125-9c79-58cc89b9abac.roa (raw, json) Hash identifier: rKlkUzxAjMQsoCaza/rI1QBJTGp6+G4GgZsi30vj3vo= Subject key identifier: 66:56:BD:97:07:59:78:B8:27:C9:67:E8:E2:02:58:DB:86:FA:54:75 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8412E5863134DDCDD1106B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/909e53cc-51d1-3125-9c79-58cc89b9abac.roa Signing time: Fri 16 Oct 2026 01:00:12 +0000 ROA not before: Fri 16 Oct 2026 01:00:12 +0000 ROA not after: Thu 14 Jan 2027 02:00:12 +0000 asID: 21743 IP address blocks: 149.57.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:12:e5:86:31:34:dd:cd:d1:10:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 16 01:00:12 2026 GMT Not After : Jan 14 02:00:12 2027 GMT Subject: CN=ff7c2b3f-6672-4fd8-ad68-bd19ed3cf14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:26:a6:4e:5d:e2:93:e6:96:46:48:7b:20:3e: be:b0:f2:40:34:5b:c4:d4:c1:50:09:da:79:e1:ea: b6:44:6d:56:4f:9c:5f:06:48:4e:29:67:f9:06:a0: f8:8f:2f:64:7c:36:76:56:77:39:e4:e5:53:64:6d: 9d:62:29:64:8a:19:93:f1:58:b3:7f:65:3f:4e:1b: 16:2b:6f:4c:3a:1e:73:bd:1d:46:39:d8:4c:7d:61: a7:36:c8:3f:30:7c:f8:55:cb:74:4f:9a:93:b2:1f: 82:00:8d:d3:42:04:f9:a1:56:ed:b8:74:af:73:45: 8d:30:d3:26:89:77:96:20:99:97:b4:80:3e:24:d8: eb:12:fc:4b:1d:01:fa:29:49:9b:57:63:3b:1d:69: e5:8f:74:81:72:88:eb:2d:f1:76:9d:96:6a:42:a4: e7:9d:27:d7:2d:a6:e9:9c:eb:e1:8d:7a:28:1f:36: c3:73:05:ac:90:ed:af:d8:45:47:e7:f3:a3:7a:92: c7:dd:54:92:3a:b8:25:ac:b7:a3:36:c8:19:ff:19: 42:d6:f2:98:7e:18:2f:01:e2:7c:f7:40:8a:70:58: ff:59:07:f5:bd:fe:cf:27:c5:bb:27:18:3c:0d:50: 87:b1:e4:93:8a:db:6d:6f:8c:c8:eb:56:35:9f:15: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:56:BD:97:07:59:78:B8:27:C9:67:E8:E2:02:58:DB:86:FA:54:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/909e53cc-51d1-3125-9c79-58cc89b9abac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.57.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:25:bf:ca:9c:93:eb:e1:fb:bb:ec:78:59:01:4c:d2:2c:51: 11:c0:7f:46:24:cf:af:b2:21:93:88:96:46:ad:4a:50:36:e7: 09:f3:23:ba:a7:5a:e0:73:70:19:69:97:c3:71:08:ee:69:1e: 0b:c3:10:94:10:aa:6d:69:0c:ba:66:21:65:e3:5b:f4:bd:c3: 1f:07:3d:84:48:13:3a:68:74:d9:37:5c:58:bb:4f:e9:56:33: 9f:38:eb:25:d1:d5:87:c6:75:e6:69:ba:2d:26:11:d6:9c:c1: 1b:f1:fe:c5:bf:33:f7:a2:6c:a5:9f:22:6a:ee:8c:d3:aa:cb: ed:1e:6f:e5:19:bf:ab:a9:f7:4e:34:82:9b:ec:a5:03:7f:cb: 72:fd:13:b7:5f:2f:f4:8f:c2:3a:04:f0:c3:ce:94:08:67:6a: cf:0b:16:77:c6:cd:9e:66:bf:9e:db:81:15:73:2d:da:da:cf: c7:59:eb:5f:f6:f3:98:3e:01:cb:f3:64:e8:4e:f6:f5:ec:97: be:e0:ad:98:f3:7b:cc:7a:77:7b:b5:f2:24:6a:17:61:6a:ae: 2a:59:e8:2e:08:5a:4c:8b:a5:76:df:1b:d7:b9:3c:c6:20:c0: fb:72:87:37:8a:5d:19:62:2b:d2:d8:83:c0:53:e0:b9:61:4e: ef:66:b2:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+EEuWGMTTdzdEQa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNjAxMDAxMloXDTI3MDExNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY3YzJiM2YtNjY3Mi00ZmQ4LWFkNjgtYmQxOWVkM2NmMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yamTl3ik+aWRkh7ID6+sPJANFvE1MFQCdp5 4eq2RG1WT5xfBkhOKWf5BqD4jy9kfDZ2Vnc55OVTZG2dYilkihmT8Vizf2U/ThsW K29MOh5zvR1GOdhMfWGnNsg/MHz4Vct0T5qTsh+CAI3TQgT5oVbtuHSvc0WNMNMm iXeWIJmXtIA+JNjrEvxLHQH6KUmbV2M7HWnlj3SBcojrLfF2nZZqQqTnnSfXLabp nOvhjXooHzbDcwWskO2v2EVH5/OjepLH3VSSOrglrLejNsgZ/xlC1vKYfhgvAeJ8 90CKcFj/WQf1vf7PJ8W7Jxg8DVCHseSTitttb4zI61Y1nxU3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZWvZcHWXi4J8ln6OICWNuG+lR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTA5ZTUzY2MtNTFkMS0z MTI1LTljNzktNThjYzg5YjlhYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQlv8qck+vh+7vseFkBTNIsURHAf0Ykz6+yIZOIlkatSlA25wnzI7qn WuBzcBlpl8NxCO5pHgvDEJQQqm1pDLpmIWXjW/S9wx8HPYRIEzpodNk3XFi7T+lW M5846yXR1YfGdeZpui0mEdacwRvx/sW/M/eibKWfImrujNOqy+0eb+UZv6up9040 gpvspQN/y3L9E7dfL/SPwjoE8MPOlAhnas8LFnfGzZ5mv57bgRVzLdraz8dZ61/2 85g+AcvzZOhO9vXsl77grZjze8x6d3u18iRqF2FqripZ6C4IWkyLpXbfG9e5PMYg wPtyhzeKXRliK9LYg8BT4LlhTu9msgI= -----END CERTIFICATE-----Generated at Tue Oct 27 18:18:33 2026 by rpki-client