$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa File: 4df80e12-1fe6-3764-926c-c35dada42f64.roa (raw, json) Hash identifier: cJx/glB3JKDu02PgMomHfSRE13NP9fTwqHDlu5Vdnnw= Subject key identifier: A1:9E:43:F3:35:5C:8D:A2:B9:F9:5F:E9:2C:2D:34:22:36:00:8E:7B Certificate issuer: /CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Certificate serial: 010D0C9F4328584F94D350CBB63F06CB4B969500 Authority key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 401441 IP address blocks: 142.249.28.0/23 maxlen: 24 2602:f7b2::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:50:cb:b6:3f:06:cb:4b:96:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=54281b63-5e04-4042-80e6-c7c9320f2ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:9c:1f:34:47:1a:94:83:78:6b:cc:34:ca: 9c:f6:45:ba:3d:bb:96:f1:53:b6:5f:84:26:2b:99: 65:1d:40:20:1d:7e:97:49:5f:1f:8d:e6:21:0f:40: 66:3b:8f:90:bf:ee:bf:a1:9e:f5:67:d6:46:a3:9e: 64:9f:9e:d3:01:fb:1f:4d:e8:4c:f9:3a:46:e5:18: ef:11:b8:18:7c:7a:82:9c:54:99:c1:15:a8:e5:58: e7:9b:68:2c:4b:d6:e0:14:36:2f:78:f3:7a:1e:52: d7:1a:43:38:45:07:91:4e:71:14:ed:10:90:95:a9: 22:7a:b5:92:d2:09:84:50:7e:45:34:d7:5c:e7:e9: 4c:1d:0d:52:cd:0a:0a:a4:e1:54:0e:da:89:67:a6: 4e:26:dd:22:f9:1f:37:cb:dc:be:7a:fc:1a:76:d5: 40:7c:aa:21:0d:bf:cd:70:ac:b0:59:f0:4b:db:18: ef:9f:b6:82:b4:ab:c3:8b:db:ad:2b:29:83:52:3e: 3e:ab:85:8e:96:a4:7d:01:70:d1:91:78:74:87:aa: 47:6f:72:be:48:9d:75:df:0c:20:b5:16:85:47:86: 30:c4:ed:e3:6a:23:ca:ee:30:dd:ce:ad:03:ff:ed: 79:34:c2:c8:ea:95:5b:00:22:a9:38:f0:68:ab:79: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:43:F3:35:5C:8D:A2:B9:F9:5F:E9:2C:2D:34:22:36:00:8E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl X509v3 Authority Key Identifier: keyid:44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer sbgp-ipAddrBlock: critical IPv4: 142.249.28.0/23 IPv6: 2602:f7b2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3d:56:36:8f:18:54:3e:2f:8e:e4:a7:59:3f:b9:0b:d4:42: 38:e0:3c:55:fb:c5:b5:df:a3:39:2d:b8:da:36:a7:d8:bb:cf: b4:de:65:0e:27:aa:3b:a6:5f:9e:d2:b7:03:cb:c0:32:cf:e3: a2:0f:82:f3:ed:d1:b3:e7:66:2d:07:b7:8b:b9:68:d6:c0:3d: 29:73:f0:3a:b9:85:20:62:cb:ee:3a:ad:85:d8:e6:57:cb:17: 3f:1c:0c:10:55:76:8c:0b:58:ca:6d:ef:38:92:a4:90:61:22: a6:94:51:32:5e:25:97:46:c4:0d:ed:8e:bb:12:0c:30:1b:e3: 19:6f:b0:4a:e2:45:60:2e:07:f5:42:92:91:0e:b7:3e:38:54: 5c:8a:25:21:cb:2a:4b:22:c7:e4:60:8a:38:52:86:20:cb:b2: b7:0a:3a:94:1d:5d:7f:69:87:1a:cd:88:3f:93:68:ee:d7:62: f3:2c:b5:77:ef:1f:57:88:9a:73:4a:14:dd:c0:a0:31:7b:07: 36:bf:95:39:77:c9:8f:0d:b4:1c:11:ea:b5:e7:1a:57:69:1d: a6:bc:44:0c:24:c1:d3:c3:86:d8:3c:10:0b:3f:ce:16:37:18: 64:50:fe:0d:a0:1c:30:8e:65:a5:18:d7:57:9e:a3:c7:31:6b: 9d:04:80:3e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+U01DLtj8Gy0uWlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRm NmYyMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTQyODFiNjMtNWUwNC00MDQyLTgwZTYtYzdjOTMyMGYyZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTucHzRHGpSDeGvMNMqc9kW6PbuW8VO2X4Qm K5llHUAgHX6XSV8fjeYhD0BmO4+Qv+6/oZ71Z9ZGo55kn57TAfsfTehM+TpG5Rjv EbgYfHqCnFSZwRWo5Vjnm2gsS9bgFDYvePN6HlLXGkM4RQeRTnEU7RCQlakierWS 0gmEUH5FNNdc5+lMHQ1SzQoKpOFUDtqJZ6ZOJt0i+R83y9y+evwadtVAfKohDb/N cKywWfBL2xjvn7aCtKvDi9utKymDUj4+q4WOlqR9AXDRkXh0h6pHb3K+SJ113wwg tRaFR4YwxO3jaiPK7jDdzq0D/+15NMLI6pVbACKpOPBoq3m3tQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKGeQ/M1XI2iuflf6SwtNCI2AI57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTA2 MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvNGRmODBlMTItMWZlNi0z NzY0LTkyNmMtYzM1ZGFkYTQyZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWEwNjBmYTMtZTJmMS00ODU3LWFj ZjMtOWE5OGE5OGRmNmYyLzVhMDYwZmEzLWUyZjEtNDg1Ny1hY2YzLTlhOThhOThk ZjZmMi5jcmwwHwYDVR0jBBgwFoAURLsOM9JSKHXcbJcZ9f5Vn8BusH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4 YTk4ZGY2ZjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjvkcMA4E AgACMAgDBgQmAveyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6PVY2jxhUPi+O5KdZP7kL1EI44DxV+8W1 36M5LbjaNqfYu8+03mUOJ6o7pl+e0rcDy8Ayz+OiD4Lz7dGz52YtB7eLuWjWwD0p c/A6uYUgYsvuOq2F2OZXyxc/HAwQVXaMC1jKbe84kqSQYSKmlFEyXiWXRsQN7Y67 EgwwG+MZb7BK4kVgLgf1QpKRDrc+OFRciiUhyypLIsfkYIo4UoYgy7K3CjqUHV1/ aYcazYg/k2ju12LzLLV37x9XiJpzShTdwKAxewc2v5U5d8mPDbQcEeq15xpXaR2m vEQMJMHTw4bYPBALP84WNxhkUP4NoBwwjmWlGNdXnqPHMWudBIA+ -----END CERTIFICATE-----Generated at Sun Oct 25 03:22:20 2026 by rpki-client