$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa File: 666ce706-f266-3fa9-aabf-cb8681729e63.roa (raw, json) Hash identifier: gjnvjzaMgmu2eEY39Ocphjo+Q6nyYKu/t2XkeyMHias= Subject key identifier: F8:B8:49:5B:A4:26:6C:29:78:8E:55:C9:25:46:82:BA:4C:8D:E2:53 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584F7A4D96B3D633AB26AE079280 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 14618 IP address blocks: 142.0.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:96:b3:d6:33:ab:26:ae:07:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0d5b2199-94f9-4485-a7a1-1d698e297250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:84:a2:9d:51:dd:85:9d:cc:03:a0:5b:61: ef:19:54:fb:06:f7:ed:5a:9a:42:df:f6:8b:ee:f3: 1d:fa:d2:99:66:20:cf:33:c4:09:f4:8c:84:dc:51: 98:e5:35:fe:89:9c:cf:62:0b:21:d5:af:39:42:c8: 61:b0:c6:21:b3:43:e6:bd:fb:8a:c2:d4:5f:cb:94: e0:aa:c6:11:a5:a3:bd:78:9d:63:7a:c1:03:53:d7: 5c:d3:11:ab:58:40:a1:97:74:5b:14:a8:e2:88:f8: 3b:4f:78:d8:21:3a:2e:5f:fd:7c:3d:ce:92:ac:6c: a9:c0:58:9d:ba:84:74:46:59:96:d9:aa:81:94:00: 4c:b7:ae:b7:97:e1:88:40:32:c2:ed:d8:0e:fa:c4: d4:f0:19:9e:3b:a1:a1:9f:92:b5:e2:5f:da:ec:70: a2:5f:11:5a:90:ec:1a:38:15:37:11:ea:17:fd:3f: 35:79:98:d2:5b:3c:52:53:76:d5:3c:9f:d8:c0:c4: d1:94:74:1a:de:71:26:e5:c8:8d:d2:41:45:30:98: 41:e8:1b:f9:64:31:dd:54:50:67:db:f5:eb:d0:bc: 0c:a9:22:da:b9:ee:5b:33:95:a8:8b:ce:fe:90:ae: dc:03:90:55:01:41:a8:0e:73:9b:dc:45:77:59:73: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:49:5B:A4:26:6C:29:78:8E:55:C9:25:46:82:BA:4C:8D:E2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c7:f0:35:f7:52:b0:b1:f9:3b:b9:b9:36:5d:c3:b9:0f:b1: dc:a4:33:17:7f:68:78:10:71:77:81:51:20:7f:93:56:e7:b3: ee:27:a6:83:40:6e:05:fc:05:23:36:7e:53:8b:bb:7f:23:87: b5:8b:1d:b3:d2:15:31:a7:61:4b:a4:3c:a0:d6:ba:39:b2:f4: 27:9b:ed:46:4d:4d:8e:f9:fb:23:27:d4:55:2c:61:3b:50:98: 39:01:aa:da:2f:9b:52:89:55:47:95:c6:6f:45:55:ba:ea:a1: 4f:a2:a2:6b:a7:98:be:b2:2a:c4:2a:34:d9:37:97:01:ce:dd: be:c8:22:82:92:47:01:2f:f7:c8:bb:17:49:42:bc:d6:b0:9a: b8:cf:1f:5a:3d:37:49:8d:06:d9:68:76:53:cd:2b:db:d5:9d: da:2a:ae:6f:34:e5:9b:7f:1d:8b:d7:e8:65:47:6e:ec:94:40: e6:46:16:8b:88:82:6c:83:d9:b4:a0:c4:9f:37:a7:aa:b9:65: 2b:7d:bd:69:3f:af:fa:d3:58:fe:a3:84:c7:65:d1:29:f8:e8: 7e:75:37:3f:5e:78:18:9f:4a:b7:0a:bc:1e:aa:ad:bc:69:61: 09:be:65:4e:77:6f:79:b5:66:10:6b:d4:9c:af:0d:14:bc:b3: 81:8c:76:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZaz1jOrJq4HkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MGQ1YjIxOTktOTRmOS00NDg1LWE3YTEtMWQ2OThlMjk3MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv2Eop1R3YWdzAOgW2HvGVT7BvftWppC3/aL 7vMd+tKZZiDPM8QJ9IyE3FGY5TX+iZzPYgsh1a85QshhsMYhs0PmvfuKwtRfy5Tg qsYRpaO9eJ1jesEDU9dc0xGrWEChl3RbFKjiiPg7T3jYITouX/18Pc6SrGypwFid uoR0RlmW2aqBlABMt663l+GIQDLC7dgO+sTU8BmeO6Ghn5K14l/a7HCiXxFakOwa OBU3EeoX/T81eZjSWzxSU3bVPJ/YwMTRlHQa3nEm5ciN0kFFMJhB6Bv5ZDHdVFBn 2/Xr0LwMqSLaue5bM5Woi87+kK7cA5BVAUGoDnOb3EV3WXOfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi4SVukJmwpeI5VySVGgrpMjeJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvNjY2Y2U3MDYtZjI2Ni0z ZmE5LWFhYmYtY2I4NjgxNzI5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/H8DX3UrCx+Tu5uTZdw7kPsdykMxd/aHgQcXeBUSB/k1bns+4npoNA bgX8BSM2flOLu38jh7WLHbPSFTGnYUukPKDWujmy9Ceb7UZNTY75+yMn1FUsYTtQ mDkBqtovm1KJVUeVxm9FVbrqoU+iomunmL6yKsQqNNk3lwHO3b7IIoKSRwEv98i7 F0lCvNawmrjPH1o9N0mNBtlodlPNK9vVndoqrm805Zt/HYvX6GVHbuyUQOZGFouI gmyD2bSgxJ83p6q5ZSt9vWk/r/rTWP6jhMdl0Sn46H51Nz9eeBifSrcKvB6qrbxp YQm+ZU53b3m1ZhBr1JyvDRS8s4GMdjQ= -----END CERTIFICATE-----Generated at Wed Oct 14 10:26:54 2026 by rpki-client