$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4e064923-bc9c-321e-b0d7-7075ffddc33f.roa File: 4e064923-bc9c-321e-b0d7-7075ffddc33f.roa (raw, json) Hash identifier: 9g/4HNmGhB5QAItlcsOdvtVdQ2l65oSUYiApXobu/NI= Subject key identifier: 57:B8:01:1E:88:40:0F:51:37:F9:CA:51:AD:25:66:9B:1B:08:92:05 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F49747D9EDABC4D8ACA1F4CC0 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4e064923-bc9c-321e-b0d7-7075ffddc33f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 144.125.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:9e:da:bc:4d:8a:ca:1f:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=be51358f-4acd-4309-be37-7c79b9de9b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:ed:78:7d:94:d7:9b:56:e4:d5:b1:32:88: 9d:da:33:cb:49:d3:7f:9a:bf:4c:4a:0e:31:3c:66: d6:4e:f3:29:e9:b1:b2:79:3f:48:ed:c3:a5:bc:c9: 67:ae:7d:9e:b8:51:1e:da:ee:aa:5d:e5:cf:fe:91: c2:d3:e0:47:d7:89:3c:30:2c:d7:88:ff:fc:ee:10: 2a:f6:62:6a:f5:4c:c6:65:86:8c:18:5d:97:3e:b8: 54:5e:90:02:fa:1a:96:c2:fc:78:ed:ef:9a:0c:13: 99:a0:15:14:d1:e2:bc:81:06:f1:1b:06:8a:6d:78: 6c:45:f3:ca:fa:0a:14:35:b4:41:f0:06:ab:58:6b: 79:90:bb:4f:1a:3e:6d:95:b1:83:7c:3c:5c:8e:06: 0d:93:f5:51:bc:ff:d6:ac:1d:b7:34:ff:63:23:81: 83:a0:30:fd:7b:fa:69:df:79:0c:db:c7:80:f7:9a: f6:9c:c2:9a:73:ce:e6:fb:a8:35:dc:5c:e7:fb:e6: c8:ee:c3:89:01:e6:2c:82:2a:39:54:8d:5a:c9:a9: 90:cd:93:1c:76:b4:8e:05:ec:fa:07:a9:b9:38:64: 36:88:c1:a2:fb:4d:82:51:85:1c:ae:f5:34:bc:f3: d8:89:a9:c4:05:53:a2:28:a2:a3:ed:a0:51:30:d9: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:01:1E:88:40:0F:51:37:F9:CA:51:AD:25:66:9B:1B:08:92:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4e064923-bc9c-321e-b0d7-7075ffddc33f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 144.125.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:3e:86:15:97:88:69:b0:0b:d4:9e:07:3a:f1:57:36:d1:b6: 82:ea:45:b1:d0:21:13:24:bd:4c:23:b4:22:27:0b:e0:4c:d5: c3:66:42:57:04:ba:a9:e7:3b:50:72:1f:85:77:e8:05:ae:aa: e8:81:9f:07:17:a5:24:16:50:3e:e2:02:2c:ab:96:d5:2f:4a: b9:42:4f:4d:bc:ad:88:ec:c3:14:02:f6:11:d2:0e:28:df:e6: 8e:7a:f6:fd:22:36:4b:2e:37:ec:a7:98:44:2c:a9:f9:15:9f: ac:eb:32:35:57:26:dc:ee:99:f4:b0:70:38:19:19:f7:d5:65: ea:14:52:9f:6d:4b:45:c8:22:e9:45:25:68:b3:bf:21:2a:f5: 70:c7:2a:fc:ec:63:72:63:7f:6d:7e:44:ad:59:8c:fb:b0:85: 07:75:8f:6b:31:bf:fe:0f:53:77:b9:76:66:9a:dc:5e:89:b6: 2c:ee:4e:06:60:a2:a3:8d:72:49:d3:3b:b8:67:7d:c4:95:1b: 5b:55:3b:10:5c:c1:7f:ec:fc:38:44:ac:aa:6e:0a:74:8f:24: db:91:4a:65:16:e5:67:5b:40:f8:6f:44:eb:74:62:c4:b1:57: b1:04:dc:9f:2d:0a:34:b5:59:58:01:96:99:41:45:61:2c:14: 9d:47:fc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdH2e2rxNisofTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmU1MTM1OGYtNGFjZC00MzA5LWJlMzctN2M3OWI5ZGU5YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzzteH2U15tW5NWxMoid2jPLSdN/mr9MSg4x PGbWTvMp6bGyeT9I7cOlvMlnrn2euFEe2u6qXeXP/pHC0+BH14k8MCzXiP/87hAq 9mJq9UzGZYaMGF2XPrhUXpAC+hqWwvx47e+aDBOZoBUU0eK8gQbxGwaKbXhsRfPK +goUNbRB8AarWGt5kLtPGj5tlbGDfDxcjgYNk/VRvP/WrB23NP9jI4GDoDD9e/pp 33kM28eA95r2nMKac87m+6g13Fzn++bI7sOJAeYsgio5VI1ayamQzZMcdrSOBez6 B6m5OGQ2iMGi+02CUYUcrvU0vPPYianEBVOiKKKj7aBRMNlBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe4AR6IQA9RN/nKUa0lZpsbCJIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNGUwNjQ5MjMtYmM5Yy0z MjFlLWIwZDctNzA3NWZmZGRjMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkH3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMg+hhWXiGmwC9SeBzrxVzbRtoLqRbHQIRMkvUwjtCInC+BM1cNmQlcE uqnnO1ByH4V36AWuquiBnwcXpSQWUD7iAiyrltUvSrlCT028rYjswxQC9hHSDijf 5o569v0iNksuN+ynmEQsqfkVn6zrMjVXJtzumfSwcDgZGffVZeoUUp9tS0XIIulF JWizvyEq9XDHKvzsY3Jjf21+RK1ZjPuwhQd1j2sxv/4PU3e5dmaa3F6JtizuTgZg oqONcknTO7hnfcSVG1tVOxBcwX/s/DhErKpuCnSPJNuRSmUW5WdbQPhvROt0YsSx V7EE3J8tCjS1WVgBlplBRWEsFJ1H/Es= -----END CERTIFICATE-----Generated at Fri Sep 25 05:04:14 2026 by rpki-client