$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8dfa631e-946e-3ef1-851e-7062fda84499.roa File: 8dfa631e-946e-3ef1-851e-7062fda84499.roa (raw, json) Hash identifier: TnzkJgLYX+t9G3g9XdvWGZfvi8grcgYzcMaUMQXtkP4= Subject key identifier: 64:3C:19:FC:A4:22:9D:CF:0E:0A:5F:C7:F7:D1:24:3F:69:ED:47:54 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F46A7F1A7FDF5AB2FEB9CF280 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8dfa631e-946e-3ef1-851e-7062fda84499.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 395222 IP address blocks: 149.19.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f1:a7:fd:f5:ab:2f:eb:9c:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=ca17e333-fe00-4c46-bd35-d0056cd68246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:8d:39:a7:d6:73:44:2e:6e:c6:5f:82:5e: 8a:f0:5b:86:99:fe:2c:12:fc:41:ab:82:3d:8f:8d: 6c:f1:be:2a:4e:a7:0a:35:0d:5c:8a:9a:95:5a:8e: 4b:02:0c:6a:6c:ba:5b:35:a2:e7:c3:9f:aa:8c:ab: e9:f9:56:f3:41:f3:6e:c0:1c:93:90:9d:95:a6:59: b3:fa:96:8f:1c:9c:4f:c1:e8:9c:5f:9d:1a:12:e4: 77:67:b0:7e:65:cf:c0:b3:44:a8:d4:a9:50:6f:fb: 5c:79:00:43:a9:39:bd:9c:b5:d8:7d:ef:6a:99:f5: 0b:73:6a:b3:62:3d:4d:43:87:63:20:3b:e0:25:f4: bc:25:bc:68:c6:1d:4c:99:f0:29:a8:05:ba:a7:76: 8e:5b:61:c6:46:88:6e:c7:d2:fb:ce:f4:57:4f:b6: b4:61:be:fe:cd:e8:34:ab:f7:ee:f1:d6:0c:f4:d9: 5c:09:93:ca:94:62:20:ab:7e:93:8d:1a:5c:8a:26: db:32:8b:20:1f:30:e3:57:bd:c2:5f:de:b5:78:9b: e3:e7:63:4a:8a:19:16:4e:2a:dc:3e:93:11:54:a7: bc:65:d2:66:36:a7:d1:28:83:d3:38:af:27:bc:d4: de:5a:a5:7a:ae:7b:dc:f2:76:a4:a5:f9:d4:7d:af: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3C:19:FC:A4:22:9D:CF:0E:0A:5F:C7:F7:D1:24:3F:69:ED:47:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8dfa631e-946e-3ef1-851e-7062fda84499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 149.19.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6a:49:cb:2f:38:f6:a3:be:b7:22:cb:2c:65:2c:86:06:5a: 1f:4d:e9:11:f1:51:6b:08:d1:5b:6c:f2:8c:72:e8:95:33:6c: 15:28:f9:85:74:b5:0e:2c:56:5c:37:cc:4f:db:9c:6b:6d:4e: 20:df:93:79:e0:b7:2e:5e:44:a7:bb:88:c4:c7:fc:ed:7c:4c: 70:4c:7c:ad:20:fd:f1:30:eb:bc:43:45:96:d8:bb:f2:ce:94: 53:3e:c0:fb:48:38:68:6b:85:af:d2:52:24:9e:03:eb:15:65: bf:f4:be:c2:a1:16:56:6d:be:45:9c:48:3c:5e:3d:bc:af:7d: 79:42:52:97:bd:2b:2d:7a:83:c0:70:d3:66:f8:82:32:a5:20: 79:21:04:ef:a3:c4:9a:01:3b:c0:15:48:45:cd:86:f1:54:8b: 93:51:31:85:45:27:ed:10:fe:b7:a4:41:dc:66:c0:17:56:22: 95:82:d6:04:f1:96:62:96:18:d6:23:a6:99:22:38:05:7f:86: 40:f2:20:dd:02:97:c4:5d:d9:bd:5b:59:d1:0c:63:ad:c6:75: 07:6e:2d:bb:9a:98:1a:35:c4:6d:06:df:a7:fd:e2:ff:39:a7: 08:c8:ac:79:ab:ad:18:fe:41:47:b2:7d:cd:74:bf:f4:f5:db: 5e:44:03:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/Gn/fWrL+uc8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2ExN2UzMzMtZmUwMC00YzQ2LWJkMzUtZDAwNTZjZDY4MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GKNOafWc0QubsZfgl6K8FuGmf4sEvxBq4I9 j41s8b4qTqcKNQ1cipqVWo5LAgxqbLpbNaLnw5+qjKvp+VbzQfNuwByTkJ2Vplmz +paPHJxPweicX50aEuR3Z7B+Zc/As0So1KlQb/tceQBDqTm9nLXYfe9qmfULc2qz Yj1NQ4djIDvgJfS8Jbxoxh1MmfApqAW6p3aOW2HGRohux9L7zvRXT7a0Yb7+zeg0 q/fu8dYM9NlcCZPKlGIgq36TjRpciibbMosgHzDjV73CX961eJvj52NKihkWTirc PpMRVKe8ZdJmNqfRKIPTOK8nvNTeWqV6rnvc8nakpfnUfa8XtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ8GfykIp3PDgpfx/fRJD9p7UdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOGRmYTYzMWUtOTQ2ZS0z ZWYxLTg1MWUtNzA2MmZkYTg0NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9qScsvOPajvrciyyxlLIYGWh9N6RHxUWsI0Vts8oxy6JUzbBUo+YV0 tQ4sVlw3zE/bnGttTiDfk3ngty5eRKe7iMTH/O18THBMfK0g/fEw67xDRZbYu/LO lFM+wPtIOGhrha/SUiSeA+sVZb/0vsKhFlZtvkWcSDxePbyvfXlCUpe9Ky16g8Bw 02b4gjKlIHkhBO+jxJoBO8AVSEXNhvFUi5NRMYVFJ+0Q/rekQdxmwBdWIpWC1gTx lmKWGNYjppkiOAV/hkDyIN0Cl8Rd2b1bWdEMY63GdQduLbuamBo1xG0G36f94v85 pwjIrHmrrRj+QUeyfc10v/T1215EA2k= -----END CERTIFICATE-----Generated at Sat Sep 26 04:30:56 2026 by rpki-client