$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa File: 43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa (raw, json) Hash identifier: YXMg4eOoYgYtJ1mdUSgmhlukwhxzr2PD/YAGCvRuVXw= Subject key identifier: DD:27:0C:70:1C:64:92:24:76:7E:B6:AC:91:0D:0F:C8:19:0F:6E:A8 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584F498B6C5AEA4868C11EA3B600 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 142.147.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:6c:5a:ea:48:68:c1:1e:a3:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a14bc74-fc4b-4fe4-8653-dbd843bd4e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:73:57:f7:cd:2c:d7:fe:0c:1a:80:ce:50: 89:3f:79:9f:70:e9:1b:74:23:46:a1:21:d0:ae:64: 33:57:a4:a1:f6:ae:dc:1c:53:df:f1:8c:55:ba:6c: eb:36:dd:ae:51:35:d4:9e:c6:11:fd:a4:fc:10:b4: c8:04:e4:6a:90:3d:47:59:f4:f2:0f:1e:e3:34:66: f5:52:26:48:3b:54:a1:c3:b1:ea:e2:ea:10:e2:b1: de:da:37:b3:54:9f:ac:04:19:f5:ae:e4:66:b5:19: f2:a3:19:90:c6:d6:e1:0a:23:dc:ed:ab:78:80:0b: 8b:f7:24:74:09:9b:ca:bb:4c:d1:19:84:08:04:3d: 42:ef:05:b5:ea:f8:cf:8f:28:9e:eb:fe:24:ea:2d: 47:77:05:32:2a:4b:b8:77:6d:4f:dd:3c:78:72:7a: 49:38:31:54:70:43:61:76:21:4b:ee:86:95:d5:ea: 3a:28:72:a6:2a:e5:91:d3:7c:8c:a8:0f:a2:d0:c2: bf:81:eb:e0:ca:0c:c9:e7:0c:d3:eb:ae:a6:4e:a9: 34:d7:96:31:9f:ed:a3:08:1e:46:ef:a4:fc:56:3b: bd:60:f8:21:f4:13:a7:19:8b:a3:89:37:57:c9:37: 57:80:be:b5:7c:a6:b9:6f:90:a1:0b:ce:63:74:96: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:0C:70:1C:64:92:24:76:7E:B6:AC:91:0D:0F:C8:19:0F:6E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4b:d2:9f:e2:b0:0e:77:a7:36:db:31:c3:4e:ee:2f:63:24: 91:7a:7b:1a:47:fc:06:7b:6e:7b:b7:0c:98:dc:2c:4a:fd:35: d8:3d:ab:96:c4:f5:2f:07:e5:3d:f7:a5:02:ca:a8:49:7c:cc: 2b:1c:32:cb:cb:2f:69:dc:bb:cb:87:01:da:1a:48:f2:38:e4: f1:a4:9c:b2:a4:db:85:5c:83:ba:da:5b:6b:a3:40:05:d4:5b: e3:38:b6:d4:f3:6b:8e:b3:b7:f8:48:71:d5:dd:cb:cd:f9:14: db:4b:4b:ed:e0:e4:91:e3:a3:72:de:37:8e:9e:5a:3f:ef:32: b7:3e:eb:d4:a9:ee:a4:2b:c7:a3:8c:ae:ae:c3:79:1b:61:08: 67:2d:f3:e9:b7:f2:71:50:1a:e5:5e:c3:eb:8c:ad:58:3f:1a: 8a:71:48:d2:ec:14:2e:65:f8:24:fc:2e:49:5b:27:3d:ab:9e: 2e:27:cd:20:28:93:c9:bf:62:6b:90:18:4c:d7:2c:1e:a4:7e: bf:06:91:49:b2:49:11:c0:cd:84:fc:39:b0:ab:be:4e:65:2b: 0b:e1:34:c6:64:54:b2:6d:9b:a6:3a:73:56:6d:b2:9d:eb:c4: cb:0c:73:d5:a2:a3:e7:6c:85:29:33:a8:f4:20:56:b7:63:0f: 7b:80:e3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2xa6khowR6jtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ExNGJjNzQtZmM0Yi00ZmU0LTg2NTMtZGJkODQzYmQ0ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrVzV/fNLNf+DBqAzlCJP3mfcOkbdCNGoSHQ rmQzV6Sh9q7cHFPf8YxVumzrNt2uUTXUnsYR/aT8ELTIBORqkD1HWfTyDx7jNGb1 UiZIO1Shw7Hq4uoQ4rHe2jezVJ+sBBn1ruRmtRnyoxmQxtbhCiPc7at4gAuL9yR0 CZvKu0zRGYQIBD1C7wW16vjPjyie6/4k6i1HdwUyKku4d21P3Tx4cnpJODFUcENh diFL7oaV1eo6KHKmKuWR03yMqA+i0MK/gevgygzJ5wzT666mTqk015Yxn+2jCB5G 76T8Vju9YPgh9BOnGYujiTdXyTdXgL61fKa5b5ChC85jdJaDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0nDHAcZJIkdn62rJEND8gZD26oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvNDNkZmU4ZGMtNWU0Ny0z ZDBlLWIyNjctNDZmZDYxYTE5MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjpOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9L0p/isA53pzbbMcNO7i9jJJF6expH/AZ7bnu3DJjcLEr9Ndg9q5bE 9S8H5T33pQLKqEl8zCscMsvLL2ncu8uHAdoaSPI45PGknLKk24Vcg7raW2ujQAXU W+M4ttTza46zt/hIcdXdy835FNtLS+3g5JHjo3LeN46eWj/vMrc+69Sp7qQrx6OM rq7DeRthCGct8+m38nFQGuVew+uMrVg/GopxSNLsFC5l+CT8LklbJz2rni4nzSAo k8m/YmuQGEzXLB6kfr8GkUmySRHAzYT8ObCrvk5lKwvhNMZkVLJtm6Y6c1Ztsp3r xMsMc9Wio+dshSkzqPQgVrdjD3uA42c= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:06 2026 by rpki-client