$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa File: de847a06-de42-39bb-b42d-d6634e0c9a95.roa (raw, json) Hash identifier: GlninajEstHiUKc75ND0f4WRyYP+XXsTrEuUEgX6iHo= Subject key identifier: 73:CA:0A:35:AD:45:99:5C:74:39:E2:9A:CF:A0:62:88:8B:FF:D6:21 Certificate issuer: /CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Certificate serial: 010D0C9F4328584EA78833349100629340885DA8 Authority key identifier: 9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40214 IP address blocks: 124.197.0.0/20 maxlen: 24 185.111.200.0/22 maxlen: 24 2607:ee40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:33:34:91:00:62:93:40:88:5d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=79519ddd-c331-4350-9de7-44cbc167b659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:45:7d:cf:b2:d7:c6:88:82:fb:d0:c0:c9: da:ab:85:8b:d9:14:e9:54:b9:d6:65:3c:19:e0:60: 58:c1:8f:c1:ff:49:79:04:d3:80:c7:ed:7c:52:57: c4:ce:2c:b7:6f:ef:73:e9:96:c1:a7:ee:42:cb:1b: 11:ba:7a:f5:e1:f9:7e:bf:03:d6:4b:82:2f:24:2b: 2e:a2:44:9f:c5:cb:e4:29:15:8c:c0:0a:53:12:33: a2:b4:9b:35:06:25:41:f5:0b:05:15:40:7f:a9:8b: 46:c1:88:fa:62:18:58:dc:47:60:07:b0:c3:54:00: 24:e2:15:44:cd:1a:5e:26:17:dd:ab:d1:22:ca:f5: 38:c6:49:bb:7c:b5:5f:f7:a9:36:b0:5a:82:8b:9e: 45:02:de:01:83:9b:a9:4e:78:33:e6:8e:61:78:4e: f3:30:b7:90:60:62:c6:82:62:b4:0c:7f:33:d9:4a: f3:8a:0b:a6:fe:4b:95:60:98:37:3f:84:80:d7:00: 3f:8f:50:05:b8:cb:29:af:9d:fa:7a:77:1d:14:13: 52:25:a3:df:2a:59:3b:a1:ae:20:49:6f:22:ed:d1: 6e:51:2b:38:4e:8a:ee:15:59:fd:23:de:cd:44:17: 38:07:e7:25:41:d9:59:f7:f3:a0:99:94:dc:33:01: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CA:0A:35:AD:45:99:5C:74:39:E2:9A:CF:A0:62:88:8B:FF:D6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl X509v3 Authority Key Identifier: keyid:9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer sbgp-ipAddrBlock: critical IPv4: 124.197.0.0/20 185.111.200.0/22 IPv6: 2607:ee40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:aa:db:89:15:08:dc:7c:2c:43:c7:9c:b6:b0:2a:a4:5b:b7: cb:02:ec:a0:5e:8b:ab:f7:10:3d:f3:72:8c:e6:c8:ff:6f:c2: 0d:e7:51:81:ea:b7:1b:d5:4b:33:c4:c6:d4:fc:25:86:0f:42: 6a:6f:e1:2f:36:ec:d5:b1:21:e5:bf:a2:16:53:79:d5:8a:b7: 31:fc:44:0c:d3:1e:ea:f8:51:87:bb:b7:2b:2d:2b:b6:96:42: 44:cc:db:17:2f:47:32:c6:4a:5a:db:d5:b7:8e:06:92:20:56: 13:4d:87:45:32:1f:88:44:c2:61:b7:b5:ca:3f:10:77:c1:59: 87:56:76:2d:da:cf:6d:db:c1:ff:a9:b4:7a:f4:98:c4:a0:0b: c3:94:7e:09:32:8c:ed:39:80:02:ca:a1:7c:11:b3:b9:14:81: 99:b1:2e:69:59:04:90:80:72:50:67:56:47:52:30:bd:da:83: 52:37:53:50:9e:6e:1a:b8:c2:a3:db:b4:ff:7d:a6:08:69:7f: 2f:c7:fe:d4:39:37:72:18:cd:05:7a:4f:35:a3:c3:5e:0b:d6: 35:9d:40:58:1b:fe:56:bb:5b:ae:c3:55:63:57:f2:4b:88:66: f9:45:44:c4:af:c7:3b:be:f2:0a:0d:1b:9c:14:8b:d6:44:2a: 48:34:d0:97 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6niDM0kQBik0CIXagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiZjk2MjgtYWY0ZC00YWZhLWFlNzktYWM1MWU4NjU1 ZDMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Nzk1MTlkZGQtYzMzMS00MzUwLTlkZTctNDRjYmMxNjdiNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtFfc+y18aIgvvQwMnaq4WL2RTpVLnWZTwZ 4GBYwY/B/0l5BNOAx+18UlfEziy3b+9z6ZbBp+5CyxsRunr14fl+vwPWS4IvJCsu okSfxcvkKRWMwApTEjOitJs1BiVB9QsFFUB/qYtGwYj6YhhY3EdgB7DDVAAk4hVE zRpeJhfdq9EiyvU4xkm7fLVf96k2sFqCi55FAt4Bg5upTngz5o5heE7zMLeQYGLG gmK0DH8z2Urzigum/kuVYJg3P4SA1wA/j1AFuMspr536encdFBNSJaPfKlk7oa4g SW8i7dFuUSs4ToruFVn9I97NRBc4B+clQdlZ9/OgmZTcMwFlSQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFHPKCjWtRZlcdDnims+gYoiL/9YhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJm OTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUxZTg2NTVkMzIvZGU4NDdhMDYtZGU0Mi0z OWJiLWI0MmQtZDY2MzRlMGM5YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiZjk2MjgtYWY0ZC00YWZhLWFl NzktYWM1MWU4NjU1ZDMyL2E0YmY5NjI4LWFmNGQtNGFmYS1hZTc5LWFjNTFlODY1 NWQzMi5jcmwwHwYDVR0jBBgwFoAUmnon3up0B6ZLkvm/jzWi6HFlpMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJmOTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUx ZTg2NTVkMzIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEfMUAAwQC uW/IMA0EAgACMAcDBQAmB+5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGOq24kVCNx8LEPHnLawKqRbt8sC 7KBei6v3ED3zcozmyP9vwg3nUYHqtxvVSzPExtT8JYYPQmpv4S827NWxIeW/ohZT edWKtzH8RAzTHur4UYe7tystK7aWQkTM2xcvRzLGSlrb1beOBpIgVhNNh0UyH4hE wmG3tco/EHfBWYdWdi3az23bwf+ptHr0mMSgC8OUfgkyjO05gALKoXwRs7kUgZmx LmlZBJCAclBnVkdSML3ag1I3U1Cebhq4wqPbtP99pghpfy/H/tQ5N3IYzQV6TzWj w14L1jWdQFgb/la7W67DVWNX8kuIZvlFRMSvxzu+8goNG5wUi9ZEKkg00Jc= -----END CERTIFICATE-----Generated at Fri Sep 25 04:33:13 2026 by rpki-client