$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa File: 1452c82d-e941-345d-9f84-660e91555ab0.roa (raw, json) Hash identifier: pu5SvYKPqjcL+72wLiOFiLOs+zq5Nz9dEAXpu2mS7xs= Subject key identifier: A9:A1:28:39:DD:72:26:4C:12:E1:49:58:42:71:C8:B8:DA:C0:0E:A4 Certificate issuer: /CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Certificate serial: 010D0C9F4328584F498A05EC2C237E6588F3CA80 Authority key identifier: 6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 142.249.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:05:ec:2c:23:7e:65:88:f3:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=64ce7de5-a226-4fe2-ba55-f27d34b502dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:2b:ac:39:f4:39:b3:a8:b1:37:2e:f4:84: a6:a4:56:e0:19:b8:af:12:2b:96:6a:cd:60:4f:02: f9:22:76:fa:a7:e2:6f:76:eb:86:86:87:fe:ff:28: 43:c5:bd:f6:22:d8:a9:a7:dd:de:cf:79:d7:40:cc: 0b:31:82:02:09:89:bd:97:ae:2d:e2:96:4c:ff:98: cb:51:18:48:6e:69:13:e2:f0:5b:79:e6:11:d3:ed: 1b:90:cb:05:36:a0:c0:5f:db:c4:6e:b3:f8:60:a0: 89:12:18:b4:54:33:e0:b2:a1:2e:8c:ab:7f:ec:73: 7a:39:ff:ea:5b:bb:a8:51:cf:64:15:d4:0a:98:32: f2:e8:9a:6e:ff:b3:a6:c0:0f:f3:d6:bd:e7:35:fc: 58:6b:50:c0:88:74:60:9d:09:04:9d:56:1b:e4:72: 5c:55:ef:05:10:b2:24:4f:77:65:79:89:6f:4e:46: 6f:f8:1a:78:cb:4f:f8:fc:30:e4:04:66:ce:fa:27: 66:4b:d2:ac:fc:08:20:90:c5:ef:2e:9a:a6:62:58: 82:48:dc:05:ca:7b:0a:fa:e0:94:4f:ea:0f:b0:fe: 61:54:6e:0b:cc:dd:ef:e0:68:1a:b7:12:0e:35:a9: d2:20:ce:99:2e:2e:50:2c:68:da:12:6d:b2:9b:1a: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:28:39:DD:72:26:4C:12:E1:49:58:42:71:C8:B8:DA:C0:0E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl X509v3 Authority Key Identifier: keyid:6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer sbgp-ipAddrBlock: critical IPv4: 142.249.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b9:d0:0d:6f:92:13:17:e5:44:dc:6e:ed:31:c5:3d:92:14: cd:d2:ee:6a:44:a2:f7:06:97:cc:67:28:e5:65:15:cd:b6:5d: 75:b2:66:07:8a:e3:cf:c9:9f:59:50:4e:52:ee:ba:37:e5:5f: d8:2e:9c:02:49:d8:d8:76:d4:45:40:88:40:f5:30:61:8b:1f: 71:40:be:ba:88:31:b4:f4:9a:9c:1b:27:d6:14:54:5d:0a:c1: 02:19:5e:30:5f:46:0c:14:10:22:66:83:d8:ee:a9:04:fe:6f: 34:a9:21:64:b6:e0:fa:05:4d:7c:92:95:7e:43:89:8d:96:d6: 08:75:f2:f3:bd:58:11:19:31:5d:9e:f5:d9:d5:9a:ba:8c:de: 11:10:5f:25:af:21:ad:bd:58:8d:3e:ce:c6:b2:f9:5b:c4:a4: 2e:15:df:cb:39:98:ab:ad:87:af:0b:7e:65:7a:8a:f6:03:1c: 61:fb:15:60:fc:c8:33:97:a3:23:a8:d4:c7:35:aa:b4:b8:02: 08:91:85:ac:78:9f:1f:8c:aa:84:e0:a5:ac:20:c4:93:b6:3e: 5c:c5:26:9e:77:21:60:ad:c3:7d:0f:96:ff:8e:f5:6b:84:44: 16:b9:91:5e:6a:f6:a4:27:43:3d:24:05:7c:e8:12:72:eb:85: 71:1c:14:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JigXsLCN+ZYjzyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzc4YWMtOTc1Yy00MDIyLWFjZDctYmQ1MDI2OGNl ZTIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjRjZTdkZTUtYTIyNi00ZmUyLWJhNTUtZjI3ZDM0YjUwMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA4rrDn0ObOosTcu9ISmpFbgGbivEiuWas1g TwL5Inb6p+JvduuGhof+/yhDxb32Itipp93ez3nXQMwLMYICCYm9l64t4pZM/5jL URhIbmkT4vBbeeYR0+0bkMsFNqDAX9vEbrP4YKCJEhi0VDPgsqEujKt/7HN6Of/q W7uoUc9kFdQKmDLy6Jpu/7OmwA/z1r3nNfxYa1DAiHRgnQkEnVYb5HJcVe8FELIk T3dleYlvTkZv+Bp4y0/4/DDkBGbO+idmS9Ks/AggkMXvLpqmYliCSNwFynsK+uCU T+oPsP5hVG4LzN3v4GgatxIONanSIM6ZLi5QLGjaEm2ymxq0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmhKDndciZMEuFJWEJxyLjawA6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJj NzhhYy05NzVjLTQwMjItYWNkNy1iZDUwMjY4Y2VlMjIvMTQ1MmM4MmQtZTk0MS0z NDVkLTlmODQtNjYwZTkxNTU1YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjJiYzc4YWMtOTc1Yy00MDIyLWFj ZDctYmQ1MDI2OGNlZTIyL2YyYmM3OGFjLTk3NWMtNDAyMi1hY2Q3LWJkNTAyNjhj ZWUyMi5jcmwwHwYDVR0jBBgwFoAUapanbCgUo/EP2PFDwhtATDBJcNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJjNzhhYy05NzVjLTQwMjItYWNkNy1iZDUw MjY4Y2VlMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu50A1vkhMX5UTcbu0xxT2SFM3S7mpEovcGl8xnKOVlFc22XXWyZgeK 48/Jn1lQTlLuujflX9gunAJJ2Nh21EVAiED1MGGLH3FAvrqIMbT0mpwbJ9YUVF0K wQIZXjBfRgwUECJmg9juqQT+bzSpIWS24PoFTXySlX5DiY2W1gh18vO9WBEZMV2e 9dnVmrqM3hEQXyWvIa29WI0+zsay+VvEpC4V38s5mKuth68LfmV6ivYDHGH7FWD8 yDOXoyOo1Mc1qrS4AgiRhax4nx+MqoTgpawgxJO2PlzFJp53IWCtw30Plv+O9WuE RBa5kV5q9qQnQz0kBXzoEnLrhXEcFHM= -----END CERTIFICATE-----Generated at Sat Sep 26 01:47:37 2026 by rpki-client