$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa File: c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa (raw, json) Hash identifier: afmnJm8iy8ccUPR91PBncK5k+E6R6B78K2ZC4uQnkqg= Subject key identifier: 7A:F5:37:B9:DE:90:8F:07:1F:B4:BE:1C:1D:9A:29:50:9F:E5:54:B7 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584F7A4D97A3F8953ACE6936D100 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7381 IP address blocks: 142.0.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:97:a3:f8:95:3a:ce:69:36:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=588e407a-8b3a-406e-9324-0c621a2df3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:2d:7c:93:ba:99:fa:cb:27:a9:19:b7:98: a3:b7:bb:a8:3f:e5:c4:d4:ed:f3:76:e2:5e:c3:86: 57:c5:9e:d4:2e:7b:23:32:99:9c:94:9a:bc:14:eb: 3d:b8:87:46:da:51:2d:c0:bf:ce:95:bf:5f:df:c4: 2f:29:aa:16:39:0a:cd:42:89:ff:9b:8e:64:39:94: 25:e0:41:bc:f3:0d:b6:57:92:c2:59:12:4d:e1:f1: 8b:5c:8d:7f:fa:9e:f8:3f:dd:65:c3:8e:48:54:41: 4d:50:d7:ad:b6:0b:46:f5:00:e3:9a:93:f3:fb:63: f7:4e:ee:23:5d:3b:4b:1f:f5:30:a7:6b:82:8a:43: 94:a5:2b:a1:13:fd:a5:8f:34:18:6f:7b:37:44:80: 80:4c:6a:38:b8:8a:49:56:94:68:05:d7:a9:42:b3: c9:fe:ec:e0:63:03:30:1a:98:e6:cb:6a:3f:6f:7c: 13:f2:af:10:9e:06:16:a7:b0:11:0b:65:86:3a:db: 62:79:b4:b8:de:85:74:d6:25:c0:df:0c:4d:7e:47: f4:74:f4:be:4b:be:3a:09:6e:16:d1:2e:f6:4b:1b: 0d:09:04:8d:4a:ec:f7:64:67:8b:55:84:da:f2:a8: 98:f3:bf:c1:65:82:2e:31:e8:51:02:66:e3:c2:69: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:37:B9:DE:90:8F:07:1F:B4:BE:1C:1D:9A:29:50:9F:E5:54:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f1:1e:a1:f1:e0:84:70:b9:c3:66:c1:86:7b:ca:cf:aa:4d: ff:67:25:89:f3:6b:3d:6b:23:9e:be:57:e4:b4:53:b7:59:eb: 68:b1:49:55:94:23:c0:47:f0:5a:1e:8d:c4:40:97:39:07:83: 01:30:54:09:ea:e9:2b:ef:72:36:c6:82:f1:17:b9:8e:70:0e: e1:12:f8:09:de:ee:c2:04:71:e0:08:fd:1d:d3:47:50:76:6e: 56:ba:d2:d3:b5:8b:90:3a:63:9b:5a:c5:7c:01:14:92:79:8f: c6:f0:19:38:0e:03:12:0a:41:c9:70:6f:9a:7a:93:d0:be:4d: 33:99:f2:07:1f:48:2d:3a:a5:a2:7d:b0:14:8f:cd:fb:8d:ea: 0e:f8:7f:54:95:e4:a4:00:1f:2e:51:40:10:f6:f1:6b:7f:4f: 2f:52:64:30:15:e3:c4:33:1c:2b:99:29:21:7b:0a:c8:d5:86: bb:5d:ca:37:07:79:16:a1:2b:d3:ee:cb:65:b2:03:42:63:d1: a2:10:44:63:fd:f7:dc:35:1f:90:82:a0:bd:9b:88:6e:d0:e7: 6a:34:79:39:a3:51:9f:0d:2c:d8:69:bd:be:b3:14:52:b3:f8: a9:3e:88:91:2d:e6:3b:40:66:70:dd:74:54:6f:26:ed:c6:75: 69:08:67:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZej+JU6zmk20QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTg4ZTQwN2EtOGIzYS00MDZlLTkzMjQtMGM2MjFhMmRmM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO4tfJO6mfrLJ6kZt5ijt7uoP+XE1O3zduJe w4ZXxZ7ULnsjMpmclJq8FOs9uIdG2lEtwL/Olb9f38QvKaoWOQrNQon/m45kOZQl 4EG88w22V5LCWRJN4fGLXI1/+p74P91lw45IVEFNUNettgtG9QDjmpPz+2P3Tu4j XTtLH/Uwp2uCikOUpSuhE/2ljzQYb3s3RICATGo4uIpJVpRoBdepQrPJ/uzgYwMw Gpjmy2o/b3wT8q8QngYWp7ARC2WGOttiebS43oV01iXA3wxNfkf0dPS+S746CW4W 0S72SxsNCQSNSuz3ZGeLVYTa8qiY87/BZYIuMehRAmbjwmmvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr1N7nekI8HH7S+HB2aKVCf5VS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYzI5ZDM1YzUtNWI2Ny0z NmM3LThhNWItZTZiMWYzYjgyZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLxHqHx4IRwucNmwYZ7ys+qTf9nJYnzaz1rI56+V+S0U7dZ62ixSVWU I8BH8FoejcRAlzkHgwEwVAnq6SvvcjbGgvEXuY5wDuES+Ane7sIEceAI/R3TR1B2 bla60tO1i5A6Y5taxXwBFJJ5j8bwGTgOAxIKQclwb5p6k9C+TTOZ8gcfSC06paJ9 sBSPzfuN6g74f1SV5KQAHy5RQBD28Wt/Ty9SZDAV48QzHCuZKSF7CsjVhrtdyjcH eRahK9Puy2WyA0Jj0aIQRGP999w1H5CCoL2biG7Q52o0eTmjUZ8NLNhpvb6zFFKz +Kk+iJEt5jtAZnDddFRvJu3GdWkIZ+A= -----END CERTIFICATE-----Generated at Tue Oct 13 21:32:14 2026 by rpki-client