$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa File: 6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa (raw, json) Hash identifier: JPXvLaw4hjDa3It1tOm7+JBKvjkuYTCu7tMGiobeg1Y= Subject key identifier: 3F:82:3F:DB:2E:56:E9:DB:9B:33:B3:1B:B8:6E:A3:0F:40:58:59:9E Certificate issuer: /CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Certificate serial: 010D0C9F4328584F857870AD697C1CABFF3E6F80 Authority key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 1074 IP address blocks: 141.195.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:70:ad:69:7c:1c:ab:ff:3e:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=5534dd1f-1f36-4fda-b749-0462fa0e13a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:49:9a:aa:be:d1:3b:13:99:ed:a4:be:09: ff:d4:be:bd:75:93:fe:d4:da:16:4e:e2:75:e3:9d: 42:f2:36:b0:7a:04:d3:f3:1a:0a:a5:04:09:e3:a8: 42:e2:83:f0:20:ac:e4:ab:9c:5c:51:cc:b6:d3:8f: 92:1b:69:20:f0:9b:7d:ef:6e:6f:ea:fd:3b:55:34: c6:8a:b4:9f:11:ca:ad:0a:ca:93:bd:29:db:2e:11: 7c:d9:20:51:fb:b8:9e:22:58:95:45:48:fb:2f:0e: ba:cf:e4:4b:a4:24:86:00:40:aa:4c:72:41:3d:c7: 4f:15:98:4f:6a:f5:a0:42:5c:b8:8d:6d:7b:8b:62: 2b:63:b1:bc:e0:1c:ba:f9:dd:f5:ef:29:eb:05:aa: 50:f6:91:0a:8b:63:45:3b:fc:f1:5c:16:d9:32:ea: a9:d3:f9:f3:04:29:df:ee:b9:6b:09:4e:fb:26:64: b9:95:21:68:14:72:16:92:fe:0c:79:6c:cf:ed:a0: 54:04:c7:a9:b1:88:37:45:db:56:ce:61:0f:88:5f: d4:3c:61:b7:0b:99:c7:f8:b9:7f:bd:0c:29:33:98: e0:54:17:12:3f:46:b6:b8:bd:65:86:e1:a1:07:8e: 27:4d:8b:f3:9a:2b:5d:f0:d6:51:6e:d3:77:43:d0: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:3F:DB:2E:56:E9:DB:9B:33:B3:1B:B8:6E:A3:0F:40:58:59:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl X509v3 Authority Key Identifier: keyid:0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer sbgp-ipAddrBlock: critical IPv4: 141.195.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:fa:4a:81:db:fe:e2:9c:0d:3c:6a:17:d2:d9:84:bc:65: ed:0e:92:eb:d8:97:ad:66:c7:ab:0f:c2:35:80:2b:48:48:ff: 9c:85:68:24:7f:c4:7d:4f:9c:4e:00:a1:bf:59:73:53:4a:70: 94:ce:e0:9a:ff:13:f9:45:90:ea:7d:a1:14:60:b5:e8:e2:87: ce:90:f9:8c:d9:f4:d6:a4:64:23:60:3a:d2:9b:b4:ed:e2:74: ec:58:9d:30:b0:1b:59:cb:c8:e2:73:be:c0:c3:e0:13:79:18: cf:57:3a:53:1b:3f:ad:7e:35:63:56:c6:dd:e0:e7:62:ae:85: 4d:6c:b7:b7:6c:73:71:17:44:9f:3b:d9:01:a0:a2:f6:9d:c6: ae:81:c7:a7:0e:b6:fc:4a:6f:c3:76:45:d3:47:18:18:16:ec: 04:90:fa:f3:f3:8e:9e:cc:ae:6b:5b:84:e0:4b:2e:5d:04:95: 36:09:ef:ce:b5:b7:41:2b:5c:10:be:40:03:65:a6:40:82:78: f5:4f:89:a2:7e:d0:44:42:6e:a7:5e:49:dc:c9:6c:1e:f1:7e: 1b:ed:1d:a4:cc:60:cd:62:d4:c1:b8:78:1e:c1:9a:31:b0:af: 27:8d:17:a5:b6:72:a8:33:38:f8:66:89:6d:6e:2c:e0:29:42: f4:e1:2f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHCtaXwcq/8+b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUxNGM5MTItYmJmNi00N2I4LThlNGUtYTgwZDBjYjk4 YTNlMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NTUzNGRkMWYtMWYzNi00ZmRhLWI3NDktMDQ2MmZhMGUxM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFRJmqq+0TsTme2kvgn/1L69dZP+1NoWTuJ1 451C8jawegTT8xoKpQQJ46hC4oPwIKzkq5xcUcy204+SG2kg8Jt9725v6v07VTTG irSfEcqtCsqTvSnbLhF82SBR+7ieIliVRUj7Lw66z+RLpCSGAECqTHJBPcdPFZhP avWgQly4jW17i2IrY7G84By6+d317ynrBapQ9pEKi2NFO/zxXBbZMuqp0/nzBCnf 7rlrCU77JmS5lSFoFHIWkv4MeWzP7aBUBMepsYg3RdtWzmEPiF/UPGG3C5nH+Ll/ vQwpM5jgVBcSP0a2uL1lhuGhB44nTYvzmitd8NZRbtN3Q9C3awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+CP9suVunbmzOzG7huow9AWFmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTE0 YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNiOThhM2UvNmIwNmE1YTctODViNi0z MzY2LTkxZDItOGJmZDUzNGJhNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjUxNGM5MTItYmJmNi00N2I4LThl NGUtYTgwZDBjYjk4YTNlL2I1MTRjOTEyLWJiZjYtNDdiOC04ZTRlLWE4MGQwY2I5 OGEzZS5jcmwwHwYDVR0jBBgwFoAUDBUEe7HvArcYQ91GKkWn3aMNjgUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBk MGNiOThhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpA+kqB2/7inA08ahfS2YS8Ze0OkuvYl61mx6sPwjWAK0hI/5yFaCR/ xH1PnE4Aob9Zc1NKcJTO4Jr/E/lFkOp9oRRgtejih86Q+YzZ9NakZCNgOtKbtO3i dOxYnTCwG1nLyOJzvsDD4BN5GM9XOlMbP61+NWNWxt3g52KuhU1st7dsc3EXRJ87 2QGgovadxq6Bx6cOtvxKb8N2RdNHGBgW7ASQ+vPzjp7MrmtbhOBLLl0ElTYJ7861 t0ErXBC+QANlpkCCePVPiaJ+0ERCbqdeSdzJbB7xfhvtHaTMYM1i1MG4eB7BmjGw ryeNF6W2cqgzOPhmiW1uLOApQvThL9o= -----END CERTIFICATE-----Generated at Tue Oct 27 17:39:58 2026 by rpki-client