$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa File: b5b2dd17-d227-39eb-b530-306174de9aab.roa (raw, json) Hash identifier: InSNa8hSKTJGq1DkLdj8L1QwIdHV0rCEpiUJt6/P6CI= Subject key identifier: E2:D3:DB:13:3D:77:24:67:80:B3:C3:85:22:FD:E6:94:58:78:D6:71 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584F7A4D96C048944A9F4B8B4FC0 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 142.0.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:96:c0:48:94:4a:9f:4b:8b:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=cd4f777c-17d3-443f-9e6f-6f80d77986d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:22:f7:f2:47:87:ba:d2:b1:16:f6:71:1b: 19:49:bb:e2:59:03:bc:90:79:b2:3e:2e:8b:dd:b6: 72:6e:0c:c9:c1:5d:b6:e0:a9:9a:48:66:4a:a1:7f: 8b:7c:64:0d:b8:1e:6e:f8:95:16:cd:72:c2:24:d4: b4:45:b3:ae:01:61:73:11:83:ab:3e:4c:33:13:94: 44:48:18:28:f1:19:d1:8b:ce:3b:76:6e:e7:92:fb: 5f:ed:9f:76:2a:d1:cd:c1:74:b6:91:02:ea:55:73: 92:2e:50:37:71:29:1c:db:bf:ff:1b:06:18:37:b2: 11:9d:96:83:52:84:b9:1f:62:57:82:00:e8:ff:b3: 1b:8f:b0:e8:b9:34:43:7c:15:25:8a:7f:20:f1:24: ed:c4:5d:1c:9b:70:17:35:94:62:f3:b3:d8:64:aa: a0:0f:5b:8a:ef:26:1e:fe:22:7c:ab:f9:d8:db:7e: e2:3f:c0:2c:f8:d3:7f:4e:60:5e:af:f2:01:49:97: 9f:0e:15:d8:ca:3c:57:21:b0:92:ec:29:75:b3:1f: 46:a6:16:06:f3:68:05:fb:48:80:09:79:ee:16:86: 40:8d:41:2e:cb:bc:10:52:15:77:70:2c:9a:0f:8d: 3e:4b:9c:30:2a:bb:bc:e5:d4:95:4e:6e:8c:f4:2b: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:DB:13:3D:77:24:67:80:B3:C3:85:22:FD:E6:94:58:78:D6:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bc:eb:83:ec:83:90:8c:08:26:8e:40:16:79:92:1a:d0:cd: ee:b9:39:d5:0c:7c:7d:7f:07:dc:d0:04:df:8b:91:b2:0a:3d: 96:86:ae:56:8e:6c:ae:91:c9:78:0f:b3:45:19:9d:08:3c:10: 43:1b:36:60:f1:0c:ba:33:5c:16:05:93:ac:c1:82:82:ef:eb: 44:52:11:a8:42:61:7e:04:fe:fb:d8:0c:f4:85:b0:9b:d8:df: a4:66:2a:98:05:e7:1c:dc:17:5c:e3:c2:7a:77:03:47:64:c0: 9c:86:f0:0e:e4:fd:69:e0:2f:ef:8f:9a:e3:be:61:05:05:25: 34:c5:f3:23:70:39:49:5d:f6:e6:13:88:35:20:2b:95:9c:6c: ba:04:fe:3c:f4:ff:4b:9c:fc:a6:80:35:84:f3:33:72:55:76: db:9a:75:7c:60:8e:7a:21:83:41:49:0f:b2:22:d4:6c:04:8e: ba:cc:c4:d8:5b:06:11:c4:b8:3a:4f:b0:0b:a0:57:a5:17:83: 75:28:61:51:25:c1:3a:f5:c8:76:93:88:ac:6b:e7:9f:9b:14: 41:f9:e7:04:4e:74:2e:fe:b1:66:1b:06:36:39:7d:83:f4:a5: 72:99:1e:b3:8e:2f:cb:8b:f7:08:81:29:19:86:dc:c7:c3:02: 06:97:75:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZbASJRKn0uLT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Y2Q0Zjc3N2MtMTdkMy00NDNmLTllNmYtNmY4MGQ3Nzk4NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfoi9/JHh7rSsRb2cRsZSbviWQO8kHmyPi6L 3bZybgzJwV224KmaSGZKoX+LfGQNuB5u+JUWzXLCJNS0RbOuAWFzEYOrPkwzE5RE SBgo8RnRi847dm7nkvtf7Z92KtHNwXS2kQLqVXOSLlA3cSkc27//GwYYN7IRnZaD UoS5H2JXggDo/7Mbj7DouTRDfBUlin8g8STtxF0cm3AXNZRi87PYZKqgD1uK7yYe /iJ8q/nY237iP8As+NN/TmBer/IBSZefDhXYyjxXIbCS7Cl1sx9GphYG82gF+0iA CXnuFoZAjUEuy7wQUhV3cCyaD40+S5wwKru85dSVTm6M9CuEqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLT2xM9dyRngLPDhSL95pRYeNZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYjViMmRkMTctZDIyNy0z OWViLWI1MzAtMzA2MTc0ZGU5YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG864Psg5CMCCaOQBZ5khrQze65OdUMfH1/B9zQBN+LkbIKPZaGrlaO bK6RyXgPs0UZnQg8EEMbNmDxDLozXBYFk6zBgoLv60RSEahCYX4E/vvYDPSFsJvY 36RmKpgF5xzcF1zjwnp3A0dkwJyG8A7k/WngL++PmuO+YQUFJTTF8yNwOUld9uYT iDUgK5WcbLoE/jz0/0uc/KaANYTzM3JVdtuadXxgjnohg0FJD7Ii1GwEjrrMxNhb BhHEuDpPsAugV6UXg3UoYVElwTr1yHaTiKxr55+bFEH55wROdC7+sWYbBjY5fYP0 pXKZHrOOL8uL9wiBKRmG3MfDAgaXddM= -----END CERTIFICATE-----Generated at Tue Oct 13 19:29:44 2026 by rpki-client