$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json) Hash identifier: yGU3UxSryDnLc9ROKojqFdGce1Qx4hsSle/Ser0qKY0= Subject key identifier: 39:3B:BB:24:9A:5D:05:08:A7:EC:7E:18:BF:20:0B:2A:A8:6B:9F:D3 Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae Certificate serial: 010D0C9F4328584F6F230713F5F374273F412280 Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 14630 IP address blocks: 142.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:07:13:f5:f3:74:27:3f:41:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=01af0e06-3b7f-4181-8025-768fb669d0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:7f:89:f2:9c:1c:86:4c:02:7a:fb:51:2b: b1:c3:29:0e:f9:86:9e:cc:b0:cd:52:51:18:68:c1: 60:25:d1:dd:41:68:ff:59:a8:66:61:55:94:b3:24: 6e:a0:68:3c:1c:42:76:4f:8f:e1:ca:22:6f:a3:f8: ec:80:a6:3d:5a:9f:1d:c8:68:2d:dc:19:88:20:2a: 76:33:14:5f:71:1d:5b:8a:21:02:b0:32:8b:dd:6d: 03:56:92:84:e9:84:72:27:b5:41:a8:9c:5f:c4:31: 8c:ef:d3:79:16:1d:d3:7a:d0:de:5e:39:bf:24:22: 4e:f5:9d:7b:93:8f:fa:74:c5:ca:72:77:42:6b:40: 8b:fa:11:62:52:e1:77:66:6e:46:bc:60:21:87:12: 62:2d:f8:47:9b:2a:47:88:ce:d4:fb:ba:86:8a:5e: 1a:79:5f:de:c0:88:27:f2:d8:58:9f:b7:7c:cf:63: f9:ce:48:2f:b9:62:3c:1c:1d:84:c2:b9:c8:e5:17: dc:72:d8:65:b5:16:98:f1:7e:22:5c:44:5c:3d:41: ac:e8:8c:64:6e:2d:ba:f2:9a:3d:97:17:14:dc:b7: 52:14:c2:83:7c:7e:f9:70:18:ee:a6:c0:ca:e5:85: ba:76:8a:2b:58:c6:08:35:49:c0:0c:51:91:9a:03: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:BB:24:9A:5D:05:08:A7:EC:7E:18:BF:20:0B:2A:A8:6B:9F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl X509v3 Authority Key Identifier: keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer sbgp-ipAddrBlock: critical IPv4: 142.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:92:ef:b1:aa:ef:71:fb:c9:fb:ed:c6:b5:60:20:53:37:68: 8d:d4:a0:4f:47:75:cb:5a:42:5d:d9:06:ba:89:a4:9b:27:a4: 19:21:3f:20:f2:cc:ad:06:c0:b9:8d:7d:b5:f8:6a:e4:09:4a: a7:5f:39:97:64:a1:66:9e:c5:ec:57:5e:37:8d:c8:8b:66:7c: 32:17:23:10:a7:5e:c8:ca:64:bf:36:42:ef:90:3e:04:e7:01: f4:de:c8:3c:46:ed:5e:7f:b2:e7:00:65:6d:21:70:67:1d:6d: ae:ef:56:29:26:19:cf:2f:b4:66:30:60:87:59:ac:55:f3:35: 51:79:ed:8f:db:42:61:0a:bf:73:50:50:73:80:e9:e0:57:b4: 78:22:56:3d:f1:0a:d6:cf:4f:cd:fa:b6:d0:97:38:83:25:e1: 0a:30:b5:1e:81:c3:47:1b:95:04:53:cb:22:74:0d:41:af:1a: ef:a5:07:71:e9:77:81:22:5a:1a:cc:7d:a9:d4:1c:90:c7:69: 79:df:c9:4e:25:3a:d3:18:e5:4b:56:3d:bc:8d:01:1d:8c:2d: 25:f7:52:88:4f:f4:07:79:0d:b8:93:10:88:b9:5d:e0:fe:b9: 3d:dd:f6:f3:0a:0e:39:db:56:c9:1a:4c:6d:e5:32:b0:f9:7c: b5:07:f1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwcT9fN0Jz9BIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm Y2FlMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDFhZjBlMDYtM2I3Zi00MTgxLTgwMjUtNzY4ZmI2NjlkMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk15/ifKcHIZMAnr7USuxwykO+YaezLDNUlEY aMFgJdHdQWj/WahmYVWUsyRuoGg8HEJ2T4/hyiJvo/jsgKY9Wp8dyGgt3BmIICp2 MxRfcR1biiECsDKL3W0DVpKE6YRyJ7VBqJxfxDGM79N5Fh3TetDeXjm/JCJO9Z17 k4/6dMXKcndCa0CL+hFiUuF3Zm5GvGAhhxJiLfhHmypHiM7U+7qGil4aeV/ewIgn 8thYn7d8z2P5zkgvuWI8HB2EwrnI5RfccthltRaY8X4iXERcPUGs6Ixkbi268po9 lxcU3LdSFMKDfH75cBjupsDK5YW6doorWMYINUnADFGRmgM1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk7uySaXQUIp+x+GL8gCyqoa5/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvY2FjMTJmMjctZTNhZi0z ODAzLWE2OWMtZTFkYjVjYmM0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3 MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj MWE2MGZjYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWS77Gq73H7yfvtxrVgIFM3aI3UoE9HdctaQl3ZBrqJpJsnpBkhPyDy zK0GwLmNfbX4auQJSqdfOZdkoWaexexXXjeNyItmfDIXIxCnXsjKZL82Qu+QPgTn AfTeyDxG7V5/sucAZW0hcGcdba7vVikmGc8vtGYwYIdZrFXzNVF57Y/bQmEKv3NQ UHOA6eBXtHgiVj3xCtbPT836ttCXOIMl4QowtR6Bw0cblQRTyyJ0DUGvGu+lB3Hp d4EiWhrMfanUHJDHaXnfyU4lOtMY5UtWPbyNAR2MLSX3UohP9Ad5DbiTEIi5XeD+ uT3d9vMKDjnbVskaTG3lMrD5fLUH8f4= -----END CERTIFICATE-----Generated at Wed Oct 14 10:08:45 2026 by rpki-client