$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/899c6c6d-59d0-34f3-bfe7-fb77af3056f3.roa File: 899c6c6d-59d0-34f3-bfe7-fb77af3056f3.roa (raw, json) Hash identifier: 1fsN83PTX23dtX7wkxASD+aB+2bvtKpwzWHDHUBe7do= Subject key identifier: 3E:95:6B:2D:36:38:3D:AD:E9:DA:78:C7:1A:33:B1:02:DD:9C:56:BF Certificate issuer: /CN=01def58b-19a6-4ba2-b063-220466ef629f Certificate serial: 010D0C9F4328584F7439FA767E5F648638D59C00 Authority key identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/899c6c6d-59d0-34f3-bfe7-fb77af3056f3.roa Signing time: Sat 10 Oct 2026 08:46:02 +0000 ROA not before: Sat 10 Oct 2026 08:46:02 +0000 ROA not after: Fri 08 Jan 2027 09:46:02 +0000 asID: 402247 IP address blocks: 192.42.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:39:fa:76:7e:5f:64:86:38:d5:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01def58b-19a6-4ba2-b063-220466ef629f Validity Not Before: Oct 10 08:46:02 2026 GMT Not After : Jan 8 09:46:02 2027 GMT Subject: CN=68ef5382-c8b1-440b-b293-99d6b43b669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:69:ac:01:f2:16:dd:02:3d:8b:be:85:84: 41:26:63:7d:ef:16:fe:8b:3f:b4:f6:b8:59:66:e4: 52:f8:66:f4:47:73:6e:80:c5:25:38:93:fa:ba:fe: 75:c0:32:b0:11:44:17:97:bf:ef:a6:1e:df:b1:82: ab:da:94:c2:aa:fb:db:e8:f1:61:71:01:21:81:11: 67:5a:04:7a:2e:70:60:75:2f:66:51:7b:24:5a:28: 7a:6d:03:5f:ee:f3:f3:cd:be:1a:87:89:9d:54:57: 03:97:bd:83:e2:99:51:2f:c6:64:83:7b:4c:8c:d2: 50:1b:a0:b3:bb:01:8c:1d:7d:84:3a:da:4a:fc:56: 52:ed:4b:25:df:0a:7c:c1:40:f4:7f:65:93:db:d3: f6:27:0c:36:82:3f:5a:d4:0d:24:66:b0:6d:71:47: 1e:09:40:03:c5:48:38:d5:dc:d3:bc:7d:ba:69:32: 81:c3:f1:55:15:35:55:f5:77:41:90:ea:29:e4:d9: cc:68:6b:ab:5c:b0:4e:b7:d4:32:21:b9:67:fd:09: b5:f5:fd:f6:cb:a0:5e:9b:ee:38:98:98:d6:e5:4c: 70:d3:6d:18:84:90:be:2f:5f:a7:df:96:d8:75:28: 67:a9:99:ad:c0:c1:24:34:80:22:de:8b:28:7e:33: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:95:6B:2D:36:38:3D:AD:E9:DA:78:C7:1A:33:B1:02:DD:9C:56:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/899c6c6d-59d0-34f3-bfe7-fb77af3056f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl X509v3 Authority Key Identifier: keyid:2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer sbgp-ipAddrBlock: critical IPv4: 192.42.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d6:43:e5:25:4d:df:d2:05:33:78:08:62:f2:e4:ed:75:a1: 8c:31:e4:c1:a2:1a:9a:7d:08:d6:56:99:1f:ba:c3:62:1d:5a: f9:71:ef:a0:41:6f:32:ac:08:0d:08:3f:8a:ee:84:d3:c0:83: eb:ab:b6:a5:ec:13:04:df:ba:f9:7f:03:38:a4:2f:49:ea:55: 0f:55:57:db:c6:62:12:8b:28:79:8c:ca:ca:58:64:9f:41:0f: 97:23:6b:24:e9:10:a2:c5:d2:4b:d7:34:81:9c:02:af:63:eb: 6c:aa:02:7f:34:e1:c5:c0:0a:d0:0d:17:b7:6b:37:89:a1:4c: 86:b3:36:68:d3:a0:f2:94:85:83:2c:f8:bf:58:7b:69:5f:15: ca:a7:9e:09:12:4a:ea:20:42:ca:a7:f4:62:73:97:c5:8e:c9: 73:9d:73:0b:8f:d2:42:8d:54:62:5c:c9:a3:3a:7a:40:7b:e9: fa:10:58:f9:ab:83:98:2d:7b:39:32:86:39:bc:8b:da:9d:ff: 0b:28:af:94:0b:2c:4f:0a:46:79:c7:95:9a:d8:30:f3:05:40: ce:53:33:e7:02:55:bb:6d:1a:06:97:a7:dc:31:11:5b:4c:e1: 58:cd:25:bf:e6:eb:32:65:ec:b6:c2:26:a6:8c:98:fd:56:c5: 43:ad:b3:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90Ofp2fl9khjjVnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFkZWY1OGItMTlhNi00YmEyLWIwNjMtMjIwNDY2ZWY2 MjlmMB4XDTI2MTAxMDA4NDYwMloXDTI3MDEwODA5NDYwMlowLzEtMCsGA1UEAxMk NjhlZjUzODItYzhiMS00NDBiLWIyOTMtOTlkNmI0M2I2NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmlprAHyFt0CPYu+hYRBJmN97xb+iz+09rhZ ZuRS+Gb0R3NugMUlOJP6uv51wDKwEUQXl7/vph7fsYKr2pTCqvvb6PFhcQEhgRFn WgR6LnBgdS9mUXskWih6bQNf7vPzzb4ah4mdVFcDl72D4plRL8Zkg3tMjNJQG6Cz uwGMHX2EOtpK/FZS7Usl3wp8wUD0f2WT29P2Jww2gj9a1A0kZrBtcUceCUADxUg4 1dzTvH26aTKBw/FVFTVV9XdBkOop5NnMaGurXLBOt9QyIbln/Qm19f32y6Bem+44 mJjW5Uxw020YhJC+L1+n35bYdShnqZmtwMEkNIAi3osofjMGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Vay02OD2t6dp4xxozsQLdnFa/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRl ZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0NjZlZjYyOWYvODk5YzZjNmQtNTlkMC0z NGYzLWJmZTctZmI3N2FmMzA1NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDFkZWY1OGItMTlhNi00YmEyLWIw NjMtMjIwNDY2ZWY2MjlmLzAxZGVmNThiLTE5YTYtNGJhMi1iMDYzLTIyMDQ2NmVm NjI5Zi5jcmwwHwYDVR0jBBgwFoAUK9hlRqqMkIySm19brCrm3ntZXIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRlZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0 NjZlZjYyOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLWQ+UlTd/SBTN4CGLy5O11oYwx5MGiGpp9CNZWmR+6w2IdWvlx76BB bzKsCA0IP4ruhNPAg+urtqXsEwTfuvl/AzikL0nqVQ9VV9vGYhKLKHmMyspYZJ9B D5cjayTpEKLF0kvXNIGcAq9j62yqAn804cXACtANF7drN4mhTIazNmjToPKUhYMs +L9Ye2lfFcqnngkSSuogQsqn9GJzl8WOyXOdcwuP0kKNVGJcyaM6ekB76foQWPmr g5gtezkyhjm8i9qd/wsor5QLLE8KRnnHlZrYMPMFQM5TM+cCVbttGgaXp9wxEVtM 4VjNJb/m6zJl7LbCJqaMmP1WxUOts4U= -----END CERTIFICATE-----Generated at Sun Oct 25 20:06:02 2026 by rpki-client