$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/3ca00f40-f5be-3811-b066-757069bd233e.roa File: 3ca00f40-f5be-3811-b066-757069bd233e.roa (raw, json) Hash identifier: VblYJnSzFAR3DDeHehmHkKQDgnrpIZd1AKq6yHyYdgQ= Subject key identifier: 55:83:FD:2A:56:9E:57:02:9B:E6:B7:29:11:0E:3C:43:F3:BB:1C:18 Certificate issuer: /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Certificate serial: 010D0C9F4328584F9A68C22E225B357A9FD30B20 Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/3ca00f40-f5be-3811-b066-757069bd233e.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 5650 IP address blocks: 206.168.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:c2:2e:22:5b:35:7a:9f:d3:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=7c0c944e-13d4-4849-9bb5-08c7c6603446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:0d:cd:c4:e2:10:7f:80:d9:58:7a:09:2e: df:89:62:cf:41:be:87:55:c4:b9:7a:a0:ed:4b:2f: c5:82:c1:b8:c1:e9:82:d4:99:38:8e:5b:93:24:71: 82:7d:94:01:75:12:f3:8a:c8:5f:8d:63:cb:22:61: 29:fa:e1:a3:c0:23:4c:6c:07:78:20:26:3b:51:61: 80:3b:a2:88:12:95:63:36:d6:8e:9e:6f:b0:11:c2: a6:76:a2:99:7f:d8:94:8e:82:5f:1b:af:46:ef:bf: 05:61:43:93:09:2b:2b:73:3a:73:a3:32:8f:4e:26: 50:dc:4c:90:95:c5:77:35:a5:31:8b:6f:35:37:54: fa:be:94:73:45:bb:b8:58:e6:94:c3:ad:71:3b:39: a9:11:85:11:09:bb:57:df:7a:4b:51:51:32:18:05: 5b:a7:c6:b3:bb:43:06:a2:2b:28:3c:40:1c:2c:cc: b2:fb:de:f6:ad:90:59:c6:d2:ae:a5:6c:a6:08:fb: 03:24:be:5c:dc:84:9c:33:99:e0:ee:27:cf:6e:63: 04:60:98:9e:8d:9c:23:c7:3f:8b:29:8b:38:57:2a: a5:61:2c:5f:be:a0:14:4e:f3:4d:54:cf:b7:c8:a0: 5e:08:51:17:5b:c6:cd:f5:0e:de:52:80:88:50:86: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:83:FD:2A:56:9E:57:02:9B:E6:B7:29:11:0E:3C:43:F3:BB:1C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/3ca00f40-f5be-3811-b066-757069bd233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl X509v3 Authority Key Identifier: keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer sbgp-ipAddrBlock: critical IPv4: 206.168.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a1:e3:9d:d9:b4:02:60:87:79:4f:d3:a2:42:52:16:4f:84: 44:bf:17:db:0a:1f:86:49:72:0d:6c:ee:b3:c0:65:cf:e5:cb: 51:c4:b5:78:a2:3d:8a:a8:d1:18:d5:cf:91:c2:8a:01:9a:69: a0:2f:51:80:a8:27:25:4f:e8:21:f7:4b:7d:32:7d:0b:2f:8f: ac:fb:82:9b:ad:d9:7d:11:db:59:4f:19:0c:c1:7e:19:db:e4: 88:72:fc:e9:2f:b8:98:82:44:50:90:ba:59:7a:fb:f5:58:2b: 97:cf:c6:00:77:d6:d0:13:ea:bf:f9:db:29:61:cd:18:8e:4a: 78:b9:d4:53:0a:36:0e:b4:98:21:f8:28:9a:1d:31:eb:d4:c4: e8:87:94:36:94:90:b3:04:74:cf:46:9f:4f:0e:db:ea:8c:fb: e5:db:40:95:9b:1b:bc:9d:8f:45:03:76:d7:0a:41:ad:68:8e: df:41:cb:fe:3f:2a:f2:68:41:3d:9f:1b:d6:ea:3d:a4:b8:8a: 90:6c:fa:4f:39:1f:28:12:8f:5f:3d:40:43:2c:f0:75:96:5e: 38:ed:44:84:5f:15:c4:4f:a5:3a:ad:25:33:c2:82:81:98:95: 59:35:9d:be:0a:85:04:09:a3:d5:cd:ae:ce:2d:72:d6:4f:d6: 45:4f:f5:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaMIuIls1ep/TCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1NjNkYzktNmI4Ny00ZDgyLThhNTgtNmI4Yjc5MTcw OTJjMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk N2MwYzk0NGUtMTNkNC00ODQ5LTliYjUtMDhjN2M2NjAzNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR8NzcTiEH+A2Vh6CS7fiWLPQb6HVcS5eqDt Sy/FgsG4wemC1Jk4jluTJHGCfZQBdRLzishfjWPLImEp+uGjwCNMbAd4ICY7UWGA O6KIEpVjNtaOnm+wEcKmdqKZf9iUjoJfG69G778FYUOTCSsrczpzozKPTiZQ3EyQ lcV3NaUxi281N1T6vpRzRbu4WOaUw61xOzmpEYURCbtX33pLUVEyGAVbp8azu0MG oisoPEAcLMyy+972rZBZxtKupWymCPsDJL5c3IScM5ng7ifPbmMEYJiejZwjxz+L KYs4VyqlYSxfvqAUTvNNVM+3yKBeCFEXW8bN9Q7eUoCIUIb79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWD/SpWnlcCm+a3KREOPEPzuxwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2 M2RjOS02Yjg3LTRkODItOGE1OC02YjhiNzkxNzA5MmMvM2NhMDBmNDAtZjViZS0z ODExLWIwNjYtNzU3MDY5YmQyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGM1NjNkYzktNmI4Ny00ZDgyLThh NTgtNmI4Yjc5MTcwOTJjL2RjNTYzZGM5LTZiODctNGQ4Mi04YTU4LTZiOGI3OTE3 MDkyYy5jcmwwHwYDVR0jBBgwFoAUoDb4C8itBT9EjLiiq6o5Zlfg040wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2M2RjOS02Yjg3LTRkODItOGE1OC02Yjhi NzkxNzA5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6h453ZtAJgh3lP06JCUhZPhES/F9sKH4ZJcg1s7rPAZc/ly1HEtXii PYqo0RjVz5HCigGaaaAvUYCoJyVP6CH3S30yfQsvj6z7gput2X0R21lPGQzBfhnb 5Ihy/OkvuJiCRFCQull6+/VYK5fPxgB31tAT6r/52ylhzRiOSni51FMKNg60mCH4 KJodMevUxOiHlDaUkLMEdM9Gn08O2+qM++XbQJWbG7ydj0UDdtcKQa1ojt9By/4/ KvJoQT2fG9bqPaS4ipBs+k85HygSj189QEMs8HWWXjjtRIRfFcRPpTqtJTPCgoGY lVk1nb4KhQQJo9XNrs4tctZP1kVP9RM= -----END CERTIFICATE-----Generated at Tue Oct 27 17:03:38 2026 by rpki-client