$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/542c98b8-aca5-3c80-a007-d1623cf6ed91.roa File: 542c98b8-aca5-3c80-a007-d1623cf6ed91.roa (raw, json) Hash identifier: 18KvSrkzcbRNhDOWrz1lyrbuo4vZSHMg9HEmNYiC5GQ= Subject key identifier: 3A:40:FA:70:52:41:22:48:95:B8:80:75:EA:DB:BE:F5:07:9F:68:7E Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584F4F07FE175006AD775689CB88 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/542c98b8-aca5-3c80-a007-d1623cf6ed91.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 18705 IP address blocks: 67.223.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:fe:17:50:06:ad:77:56:89:cb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=af583be4-d437-4219-9b7d-32f204d0fa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:0b:1e:02:cd:10:45:e7:88:01:25:4d:6d: 87:3c:47:f5:3d:2b:a3:8b:17:eb:05:64:eb:64:75: d4:e9:34:b3:b9:1b:63:54:be:a5:26:0a:70:be:f4: cf:8e:8d:5a:d4:b7:98:98:bb:ff:ac:57:cd:85:55: 19:fa:13:18:b3:d5:19:91:2a:3f:47:79:a1:c8:7d: 5e:17:11:d5:26:18:11:d0:bb:26:7a:d9:99:df:e4: 18:2e:69:e6:42:c3:54:05:48:be:42:a2:64:d3:dd: 6f:a7:88:bd:ce:0e:f3:d9:70:a7:5e:8d:5c:d9:0a: 02:c1:e9:47:d6:20:f9:6c:72:c3:62:1c:4a:c5:32: 9c:02:f0:d5:f0:f1:ed:95:54:f9:03:86:ac:a3:50: 0a:29:99:c8:e5:15:c3:97:bb:c6:aa:8d:c9:2b:11: f4:e8:4a:c3:e5:1c:68:b5:bb:cd:20:5f:21:4c:5f: a6:8d:d9:fb:4e:f7:96:e1:d3:d4:c3:cc:6b:e5:b4: e1:67:a5:fa:d5:cd:8c:92:3d:62:89:75:40:2a:bf: f6:bd:00:47:c9:ae:3c:b5:1d:20:b1:6a:a1:cd:5d: dc:3e:3b:fa:bb:57:5e:56:e6:72:94:f2:7e:a2:1a: 2b:97:26:32:bb:cd:1b:c8:48:5b:1d:9c:46:cb:a9: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:FA:70:52:41:22:48:95:B8:80:75:EA:DB:BE:F5:07:9F:68:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/542c98b8-aca5-3c80-a007-d1623cf6ed91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 67.223.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4d:a8:f3:8b:c6:a6:ae:c2:67:18:e2:61:9c:54:73:44:26: ca:72:85:8b:d2:01:bd:c8:18:57:db:11:d5:67:7e:7b:ef:1b: 97:fe:60:62:de:ec:b2:d8:96:eb:5e:d0:0e:04:07:03:2e:a5: 7d:7a:c9:8e:ab:11:76:04:d1:c4:b8:68:c9:99:a2:6f:a2:29: b5:a7:28:79:8b:d4:a3:37:ba:58:4b:c2:1a:dc:83:d2:4d:1e: 21:8d:db:bb:c4:1c:bf:fe:49:d1:ff:2b:da:db:b9:c3:d9:f2: 4b:78:05:81:46:64:45:79:45:1a:f7:d8:bf:ca:73:66:2d:c0: ee:17:5b:37:03:51:c9:9e:ca:0f:a0:1b:63:a3:94:b6:be:b1: 52:70:a9:31:b7:5d:43:96:fe:4e:0e:8c:40:17:a5:fc:8b:a0: 6c:55:0e:94:dc:ad:bf:1c:ce:14:6f:a0:f7:0c:94:4d:af:29: 5a:d1:35:88:cf:58:88:90:90:e8:d3:ea:f9:16:21:5c:3b:8c: 0e:b2:d5:13:16:85:33:05:a4:94:84:eb:40:a6:e8:b5:17:a5: 29:72:9b:4a:a0:4c:0d:fd:1b:0f:58:6d:27:48:0a:5a:6b:01: df:bf:f0:07:c7:0c:ba:66:a5:01:31:84:d6:58:a9:d0:2f:39: 0b:30:dc:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/4XUAatd1aJy4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YWY1ODNiZTQtZDQzNy00MjE5LTliN2QtMzJmMjA0ZDBmYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrsLHgLNEEXniAElTW2HPEf1PSujixfrBWTr ZHXU6TSzuRtjVL6lJgpwvvTPjo1a1LeYmLv/rFfNhVUZ+hMYs9UZkSo/R3mhyH1e FxHVJhgR0LsmetmZ3+QYLmnmQsNUBUi+QqJk091vp4i9zg7z2XCnXo1c2QoCwelH 1iD5bHLDYhxKxTKcAvDV8PHtlVT5A4aso1AKKZnI5RXDl7vGqo3JKxH06ErD5Rxo tbvNIF8hTF+mjdn7TveW4dPUw8xr5bThZ6X61c2Mkj1iiXVAKr/2vQBHya48tR0g sWqhzV3cPjv6u1deVuZylPJ+ohorlyYyu80byEhbHZxGy6mQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpA+nBSQSJIlbiAderbvvUHn2h+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvNTQyYzk4YjgtYWNhNS0z YzgwLWEwMDctZDE2MjNjZjZlZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ99AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpNqPOLxqauwmcY4mGcVHNEJspyhYvSAb3IGFfbEdVnfnvvG5f+YGLe 7LLYlute0A4EBwMupX16yY6rEXYE0cS4aMmZom+iKbWnKHmL1KM3ulhLwhrcg9JN HiGN27vEHL/+SdH/K9rbucPZ8kt4BYFGZEV5RRr32L/Kc2YtwO4XWzcDUcmeyg+g G2OjlLa+sVJwqTG3XUOW/k4OjEAXpfyLoGxVDpTcrb8czhRvoPcMlE2vKVrRNYjP WIiQkOjT6vkWIVw7jA6y1RMWhTMFpJSE60Cm6LUXpSlym0qgTA39Gw9YbSdIClpr Ad+/8AfHDLpmpQExhNZYqdAvOQsw3DQ= -----END CERTIFICATE-----Generated at Wed Oct 7 14:10:59 2026 by rpki-client