$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: 9QsZSAtUfrebCYPVZQuiaaNqiKU/BrDmyM0IADvI2Yo= Subject key identifier: AF:2B:26:D3:81:E7:2D:9D:39:D4:AC:7B:AE:C6:B0:46:F5:37:E3:B6 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584F49753C5FDB226BEA0081B000 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:3c:5f:db:22:6b:ea:00:81:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8877c9a-4155-414c-be0b-c989f5483e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:b1:d5:87:e6:b0:19:46:c9:b3:b2:a9:3d: db:44:ba:53:c3:3b:fb:a6:71:ad:21:b4:36:1b:cb: 70:a5:be:a0:7f:b9:f4:f1:9d:02:ac:7c:21:8f:66: d9:06:cb:1e:54:76:99:fe:00:bb:c0:b5:52:b0:fc: e6:6b:c9:8f:00:26:1f:38:c5:56:d1:80:7a:62:8e: 9c:1b:fe:fc:c7:2b:a6:0c:44:78:bb:9d:bc:bf:1b: fc:43:6e:9b:8a:d7:a7:68:0b:06:81:21:1c:7c:d0: 77:25:79:1a:7d:37:5c:e8:d0:44:88:13:76:1c:8a: 3a:65:45:2d:d4:f6:d5:70:90:95:c0:96:a8:d0:8d: 2f:46:4f:81:4c:ac:c4:89:32:9c:e7:14:35:0b:08: 94:50:1b:dc:99:3f:b9:dd:32:bb:fc:22:e5:c5:d4: 15:9b:92:db:c8:cf:88:6f:a2:c0:08:04:03:a4:a0: c2:1f:b0:2f:22:af:ba:70:fa:74:7d:b0:8f:ed:06: 4a:f6:70:87:29:6a:30:47:56:71:da:8a:e7:57:a4: 83:b7:48:6c:fd:1a:cd:83:50:fc:30:6d:f5:8b:ec: 4a:41:33:44:47:58:a9:e6:1f:4c:0b:de:3d:bb:03: 1e:43:3a:86:f0:bd:e0:db:90:a8:43:fa:72:77:68: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:26:D3:81:E7:2D:9D:39:D4:AC:7B:AE:C6:B0:46:F5:37:E3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ef:0d:a8:92:3b:b3:4e:b7:45:b7:b7:bd:8f:ac:6b:a7:61: d9:d9:6b:49:ca:2f:9c:a7:ae:30:a4:aa:13:8c:8e:2f:e8:df: 03:fb:c0:39:ae:62:e2:6c:ae:73:11:cb:37:01:37:48:40:55: 5d:28:f3:3d:ba:48:e9:f2:75:f7:4d:e8:e1:5a:d9:ea:e8:2d: a6:8f:c9:e7:70:e5:bd:83:8a:77:af:ae:7f:64:f8:2b:b2:d8: 62:ac:ff:61:c0:dd:5d:e8:e2:d5:7e:14:a3:22:ef:56:dd:f9: 64:50:73:25:f6:79:77:67:bb:4f:4a:87:0d:c4:5f:15:38:96: 22:f1:e3:40:5f:4a:ec:d8:47:57:fc:26:46:0d:eb:8c:0a:7e: 23:c8:76:b1:7d:06:fc:10:fb:03:90:a4:04:91:33:1f:e9:a5: 5d:68:b9:09:4c:ea:37:b9:e7:00:86:93:62:cb:3b:63:50:52: f4:be:34:59:12:3d:04:25:8c:15:58:5f:5f:fe:87:78:be:26: d9:49:ac:ad:18:d5:da:9b:2b:9e:ba:bc:8a:a5:38:9f:1c:87: 20:5f:d0:23:69:a6:b2:00:32:96:00:94:c7:f4:ce:c8:a6:b9: a6:84:de:93:2c:d1:65:1a:54:28:4d:c5:b7:a1:f2:6f:5d:0e: 71:f4:61:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdTxf2yJr6gCBsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTg4NzdjOWEtNDE1NS00MTRjLWJlMGItYzk4OWY1NDgzZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wax1YfmsBlGybOyqT3bRLpTwzv7pnGtIbQ2 G8twpb6gf7n08Z0CrHwhj2bZBsseVHaZ/gC7wLVSsPzma8mPACYfOMVW0YB6Yo6c G/78xyumDER4u528vxv8Q26bitenaAsGgSEcfNB3JXkafTdc6NBEiBN2HIo6ZUUt 1PbVcJCVwJao0I0vRk+BTKzEiTKc5xQ1CwiUUBvcmT+53TK7/CLlxdQVm5LbyM+I b6LACAQDpKDCH7AvIq+6cPp0fbCP7QZK9nCHKWowR1Zx2ornV6SDt0hs/RrNg1D8 MG31i+xKQTNER1ip5h9MC949uwMeQzqG8L3g25CoQ/pyd2gxsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8rJtOB5y2dOdSse67GsEb1N+O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbvDaiSO7NOt0W3t72PrGunYdnZa0nKL5ynrjCkqhOMji/o3wP7wDmu YuJsrnMRyzcBN0hAVV0o8z26SOnydfdN6OFa2eroLaaPyedw5b2Dinevrn9k+Cuy 2GKs/2HA3V3o4tV+FKMi71bd+WRQcyX2eXdnu09Khw3EXxU4liLx40BfSuzYR1f8 JkYN64wKfiPIdrF9BvwQ+wOQpASRMx/ppV1ouQlM6je55wCGk2LLO2NQUvS+NFkS PQQljBVYX1/+h3i+JtlJrK0Y1dqbK566vIqlOJ8chyBf0CNpprIAMpYAlMf0zsim uaaE3pMs0WUaVChNxbeh8m9dDnH0YVQ= -----END CERTIFICATE-----Generated at Tue Sep 29 16:45:10 2026 by rpki-client