$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa File: b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa (raw, json) Hash identifier: 39Q3iHPHXLYL/tB9tGG56WphiBJFXAGxa3sG2upFvHc= Subject key identifier: 79:58:56:69:B4:AF:66:59:59:7A:F6:9E:8F:91:E8:0D:48:4C:08:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5B9804C7800FDE87BB06E2E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 208972 IP address blocks: 149.86.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:04:c7:80:0f:de:87:bb:06:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=2c3a2166-acbf-4fb7-8df0-44e55f3050fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:8c:cf:01:b6:81:13:85:c2:30:1e:14:0b: 2e:8f:ba:c5:88:27:80:08:d6:58:0c:fe:fc:dd:06: cb:bb:1f:32:18:be:68:88:26:00:27:bc:80:8b:00: ba:28:be:7c:d0:31:87:a0:8e:e8:67:53:16:22:3b: 68:cc:c8:12:33:2f:9a:fc:bb:e5:22:0a:6b:bd:5a: 00:bc:a4:e4:6e:5f:ba:b6:ff:4a:59:12:8e:d7:b3: dc:f2:c6:b4:43:73:50:32:3b:68:68:23:7a:da:19: ab:12:70:c7:b4:fa:f0:92:4e:2c:89:ce:62:05:54: 96:56:ee:7a:60:f6:c0:03:28:65:05:ae:8c:51:f3: f8:7d:61:f7:84:a3:e1:f1:ae:59:1c:c6:8d:dd:cc: f2:3e:be:a0:10:29:ee:c9:27:ef:bb:87:38:20:89: 6a:22:6d:96:47:fa:9f:4b:6c:37:10:ea:fd:3f:70: 0c:3a:73:16:ed:fe:37:c9:41:8c:5f:a6:40:97:18: 5a:93:bc:0d:57:66:38:0e:fc:e1:1f:d3:41:e2:ec: 1a:12:eb:9a:45:58:3a:29:ac:2c:c6:83:4d:d0:6e: b6:cd:9c:2c:6d:e2:53:d7:fd:09:42:25:fc:04:e0: 61:31:92:65:ec:38:1a:2b:45:73:c3:7a:21:c0:0d: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:58:56:69:B4:AF:66:59:59:7A:F6:9E:8F:91:E8:0D:48:4C:08:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.86.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5e:e5:ee:33:e8:55:ad:c6:14:0f:54:7c:02:e2:c1:33:0f: d6:45:37:b2:a5:71:c1:65:a1:c8:99:30:b9:96:82:aa:b7:c7: ea:d8:f4:16:af:14:ff:2c:27:3a:17:dc:e7:15:0b:d4:d6:fe: a7:48:54:8e:60:17:ee:df:30:4c:d1:89:81:43:9d:a7:f1:2b: b4:71:34:55:df:21:02:cc:b8:14:90:9c:8b:43:30:4e:c9:be: 96:cc:86:3b:96:60:3d:ee:f1:c8:7a:96:54:99:94:98:b1:f0: 0e:92:29:0b:0b:df:46:7c:df:35:4b:d8:0f:78:a1:f1:5f:17: 55:5e:d5:c7:34:b4:fc:a8:fa:a9:10:a8:82:2e:5f:bf:3b:ce: d8:c7:7b:55:16:eb:dd:43:cb:48:12:88:9b:cd:9f:32:1b:78: 70:5e:c3:05:c2:d2:bb:00:95:41:36:9b:22:4c:3b:ac:7c:b1: b9:49:86:b1:00:96:84:84:37:5e:bf:26:b8:ee:a8:d8:8c:99: ab:fb:bc:d2:55:62:d3:41:c8:a5:68:7e:1d:0c:2d:73:6e:ca: 88:bb:3f:48:55:48:4c:18:ea:08:7d:59:e8:cc:08:2c:a5:a8: 6a:05:9c:01:01:41:bb:b9:81:06:ab:30:d5:5f:af:f3:ea:be: bc:3c:f4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmATHgA/eh7sG4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MmMzYTIxNjYtYWNiZi00ZmI3LThkZjAtNDRlNTVmMzA1MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKMzwG2gROFwjAeFAsuj7rFiCeACNZYDP78 3QbLux8yGL5oiCYAJ7yAiwC6KL580DGHoI7oZ1MWIjtozMgSMy+a/LvlIgprvVoA vKTkbl+6tv9KWRKO17Pc8sa0Q3NQMjtoaCN62hmrEnDHtPrwkk4sic5iBVSWVu56 YPbAAyhlBa6MUfP4fWH3hKPh8a5ZHMaN3czyPr6gECnuySfvu4c4IIlqIm2WR/qf S2w3EOr9P3AMOnMW7f43yUGMX6ZAlxhak7wNV2Y4DvzhH9NB4uwaEuuaRVg6Kaws xoNN0G62zZwsbeJT1/0JQiX8BOBhMZJl7DgaK0Vzw3ohwA0IcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlYVmm0r2ZZWXr2no+R6A1ITAj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjFhMGUxMmYtOGI3MS0z MDU4LWI2YTYtODdlNGFhYzY1OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlVaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACte5e4z6FWtxhQPVHwC4sEzD9ZFN7KlccFlociZMLmWgqq3x+rY9Bav FP8sJzoX3OcVC9TW/qdIVI5gF+7fMEzRiYFDnafxK7RxNFXfIQLMuBSQnItDME7J vpbMhjuWYD3u8ch6llSZlJix8A6SKQsL30Z83zVL2A94ofFfF1Ve1cc0tPyo+qkQ qIIuX787ztjHe1UW691Dy0gSiJvNnzIbeHBewwXC0rsAlUE2myJMO6x8sblJhrEA loSEN16/JrjuqNiMmav7vNJVYtNByKVofh0MLXNuyoi7P0hVSEwY6gh9WejMCCyl qGoFnAEBQbu5gQarMNVfr/Pqvrw89M8= -----END CERTIFICATE-----Generated at Tue Oct 27 15:04:03 2026 by rpki-client