$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa File: e21944ab-ea3d-350f-abf2-e875e5f58e73.roa (raw, json) Hash identifier: 0q0ZPj+OKuriwKy3nGzm96Dn68NhwTLeT8tPFL9Os9w= Subject key identifier: 12:D1:6A:3F:A6:E5:A3:9C:D0:E2:73:B8:7E:A0:A1:A5:FF:7E:B9:A3 Certificate issuer: /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Certificate serial: 010D0C9F4328584F4277F8F6AFBF80DE19E978C0 Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 142.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f8:f6:af:bf:80:de:19:e9:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c9402608-90ce-47ed-a9d7-e67f82dd6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:78:73:b6:36:22:b1:58:bb:96:b7:5b:a4: 80:ee:51:2e:ac:ce:39:59:eb:16:be:c3:0b:ec:55: be:9f:f5:30:43:4b:ad:ae:b8:c4:7f:f8:b9:37:61: 46:b5:01:0d:0b:bd:4c:d4:1a:2b:00:54:02:8e:9e: 19:ae:c6:f6:f7:67:cf:20:6e:af:6d:93:e2:00:a6: 7b:db:d2:37:59:9b:d2:9d:34:f7:1f:41:c7:60:ae: 0b:10:7c:f6:68:76:b1:d6:2c:68:6a:7c:19:82:b6: b5:f4:fc:4f:83:e9:e6:02:05:03:10:a8:9d:5c:da: 39:cf:37:dd:1f:70:3b:b5:16:2a:38:af:6c:26:eb: 0f:3d:8f:3c:f8:70:00:e5:49:99:bd:36:a6:11:43: 3b:f4:33:23:7a:e3:4b:26:3c:d1:a0:5f:2e:13:8b: 00:1d:3b:35:a1:14:12:c0:7c:cc:f8:6d:00:f5:ae: 56:b2:e0:54:f1:90:cd:f2:20:34:27:2c:bf:32:71: 19:43:42:52:82:0f:1a:14:f3:f5:a5:f7:b5:fb:ff: 96:b0:f7:08:4b:d5:c0:9e:d8:70:7d:9b:9c:83:1e: f7:44:83:21:ad:8b:1b:9c:10:8c:89:59:71:92:e9: b0:ec:17:b3:78:65:c3:e8:fb:4a:e1:44:5e:24:1b: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D1:6A:3F:A6:E5:A3:9C:D0:E2:73:B8:7E:A0:A1:A5:FF:7E:B9:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl X509v3 Authority Key Identifier: keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer sbgp-ipAddrBlock: critical IPv4: 142.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:14:50:de:cf:a3:db:a6:48:60:48:6b:62:68:8b:13:a7:ce: 14:2b:d0:b2:35:46:8a:50:39:fb:94:ea:dc:d5:7d:61:fd:38: 0e:a4:8a:61:d0:03:20:3e:2e:62:c8:54:7f:51:f4:81:a5:33: 66:7a:14:32:3e:bf:3b:9e:d2:31:0b:db:34:65:6c:66:93:aa: 5b:f3:84:d7:eb:60:0e:6f:a3:1a:17:57:e4:5a:50:cd:3b:d7: bb:ff:ce:74:5d:9b:47:25:7d:2d:65:f6:82:dc:ed:91:77:11: 26:30:42:a7:2d:9c:fa:16:af:83:86:61:31:26:a2:a2:da:07: 19:e4:c1:4c:72:37:3a:2a:d9:5a:25:f7:8e:ed:86:7d:32:d3: a0:6c:d6:8b:f0:a6:7f:23:de:af:69:2c:01:12:61:1a:95:fa: fa:6f:9c:9e:ea:29:a2:d6:d2:17:56:81:38:6b:47:44:51:b5: 6c:c2:c0:43:9c:b6:8d:3d:c6:93:24:5e:f5:bb:f4:09:51:53: 0b:ab:e3:77:bd:25:00:d2:3f:ff:7e:8c:90:6e:89:72:40:22: 53:53:66:e7:06:57:be:bb:06:e7:b4:9e:40:85:71:93:94:46: 79:f3:5e:5c:4a:f3:a2:c2:88:74:62:26:3f:6c:79:09:a2:30: f7:a7:92:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/j2r7+A3hnpeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiZWM4ZjgtY2U0Mi00MjdiLTgyYjQtN2FjY2Q1MWY5 ZGI4MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yzk0MDI2MDgtOTBjZS00N2VkLWE5ZDctZTY3ZjgyZGQ2NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrB4c7Y2IrFYu5a3W6SA7lEurM45WesWvsML 7FW+n/UwQ0utrrjEf/i5N2FGtQENC71M1BorAFQCjp4Zrsb292fPIG6vbZPiAKZ7 29I3WZvSnTT3H0HHYK4LEHz2aHax1ixoanwZgra19PxPg+nmAgUDEKidXNo5zzfd H3A7tRYqOK9sJusPPY88+HAA5UmZvTamEUM79DMjeuNLJjzRoF8uE4sAHTs1oRQS wHzM+G0A9a5WsuBU8ZDN8iA0Jyy/MnEZQ0JSgg8aFPP1pfe1+/+WsPcIS9XAnthw fZucgx73RIMhrYsbnBCMiVlxkumw7BezeGXD6PtK4UReJBupyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLRaj+m5aOc0OJzuH6goaX/frmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJl YzhmOC1jZTQyLTQyN2ItODJiNC03YWNjZDUxZjlkYjgvZTIxOTQ0YWItZWEzZC0z NTBmLWFiZjItZTg3NWU1ZjU4ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGFiZWM4ZjgtY2U0Mi00MjdiLTgy YjQtN2FjY2Q1MWY5ZGI4LzBhYmVjOGY4LWNlNDItNDI3Yi04MmI0LTdhY2NkNTFm OWRiOC5jcmwwHwYDVR0jBBgwFoAUtKE8rvEnBIQDLhPV8VNvN16Y5vcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJlYzhmOC1jZTQyLTQyN2ItODJiNC03YWNj ZDUxZjlkYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAUUN7Po9umSGBIa2JoixOnzhQr0LI1RopQOfuU6tzVfWH9OA6kimHQ AyA+LmLIVH9R9IGlM2Z6FDI+vzue0jEL2zRlbGaTqlvzhNfrYA5voxoXV+RaUM07 17v/znRdm0clfS1l9oLc7ZF3ESYwQqctnPoWr4OGYTEmoqLaBxnkwUxyNzoq2Vol 947thn0y06Bs1ovwpn8j3q9pLAESYRqV+vpvnJ7qKaLW0hdWgThrR0RRtWzCwEOc to09xpMkXvW79AlRUwur43e9JQDSP/9+jJBuiXJAIlNTZucGV767Bue0nkCFcZOU RnnzXlxK86LCiHRiJj9seQmiMPenknM= -----END CERTIFICATE-----Generated at Tue Oct 6 08:21:02 2026 by rpki-client