$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa File: fa58f018-8968-3e9d-b999-74498631b831.roa (raw, json) Hash identifier: CrKU0mVrVz/ncL2SFUisznMX2LVUsBU5waEiPetwbhw= Subject key identifier: 5C:2A:0C:A6:62:16:FF:4E:CC:00:A9:90:5A:9C:15:97:76:AA:3F:A4 Certificate issuer: /CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Certificate serial: 010D0C9F4328584F498BD822352988E4944A4A00 Authority key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22686 IP address blocks: 142.132.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d8:22:35:29:88:e4:94:4a:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cde3cd47-4ee9-4178-9003-d88cfe67ca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:9b:8c:55:b1:e6:1b:ca:31:72:bf:17:32: d5:72:c3:0b:30:b4:ae:d2:01:98:42:ba:d3:d0:2f: fc:11:83:a4:5c:de:6d:1e:27:79:24:ad:ce:41:8e: 16:7a:32:28:d9:1a:7e:29:f0:9e:16:99:e3:13:2a: 02:7b:66:6a:0f:82:91:14:b9:b6:96:be:b0:b0:99: 7c:24:af:93:ba:dd:32:23:ed:91:f2:85:c9:a7:b1: 40:99:7b:27:8e:19:fc:7c:4c:fd:22:b8:e6:86:c8: ce:82:86:42:d8:31:12:8a:f1:33:2b:8a:af:4c:00: 5e:80:03:50:64:5b:93:ef:45:1c:a7:9b:dd:5f:2a: 27:96:d8:7d:fc:53:87:6c:27:22:27:79:8f:df:06: 03:21:1b:4b:55:b7:e5:ed:82:91:7e:b3:15:ba:78: 9e:78:82:62:c0:b5:9a:d8:42:13:44:e1:0e:55:ac: 3f:40:72:0d:76:50:9a:a1:8f:7c:3e:a1:11:87:0b: 8f:92:6f:ac:ea:18:12:85:c7:96:d9:69:9a:f9:95: fd:4c:e1:b7:82:bc:32:9a:d2:65:ac:c6:d9:1f:8d: 05:20:ff:9c:b9:29:a8:79:c1:c3:b0:fd:4e:cf:39: ea:36:7a:5b:19:d3:5a:0a:3c:dd:ea:5c:f9:81:b1: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2A:0C:A6:62:16:FF:4E:CC:00:A9:90:5A:9C:15:97:76:AA:3F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl X509v3 Authority Key Identifier: keyid:D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer sbgp-ipAddrBlock: critical IPv4: 142.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d1:01:a3:d8:2c:2e:6e:3d:c9:2e:9d:2e:96:01:9d:97:4e: 0f:76:55:ea:fe:91:2c:a3:5e:75:30:6c:8c:26:65:10:39:65: 05:a2:c9:ad:79:51:fa:29:94:7e:53:cb:0b:53:5c:e4:4d:43: 19:b5:96:4b:68:ef:16:9e:5f:6c:9a:b1:56:9d:de:01:49:6b: 37:63:31:42:25:fd:a8:f7:c8:da:ca:5f:03:62:d7:49:4b:bc: ff:cd:7f:d5:ee:ea:de:44:73:96:f1:4f:30:5a:ca:31:bb:9b: 6b:f4:2c:4d:71:da:0f:8f:53:a5:dd:61:7b:42:07:27:7e:13: 1a:43:86:51:36:af:6f:a3:da:6b:3a:a2:79:09:ea:6a:80:ff: df:ee:57:ad:2a:6b:33:ed:a5:ce:90:cb:7d:d6:0f:c8:ee:76: 88:d9:d7:c8:18:06:31:44:15:e1:d9:b0:e8:96:da:7d:92:89: 47:19:c5:cc:1b:93:f4:72:10:f2:ab:14:09:46:fe:45:2c:5a: 70:ce:0a:54:10:7e:61:b1:3d:cc:ab:17:49:2a:ed:c1:60:01: 5c:20:6e:29:88:82:0b:64:38:79:b3:6a:20:e9:b5:cc:97:08: c6:d5:ba:2b:7c:3b:8f:f4:28:19:7e:0d:39:a2:80:27:ff:15: 28:2f:b6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji9giNSmI5JRKSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2Yw NTc5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RlM2NkNDctNGVlOS00MTc4LTkwMDMtZDg4Y2ZlNjdjYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOubjFWx5hvKMXK/FzLVcsMLMLSu0gGYQrrT 0C/8EYOkXN5tHid5JK3OQY4WejIo2Rp+KfCeFpnjEyoCe2ZqD4KRFLm2lr6wsJl8 JK+Tut0yI+2R8oXJp7FAmXsnjhn8fEz9IrjmhsjOgoZC2DESivEzK4qvTABegANQ ZFuT70Ucp5vdXyonlth9/FOHbCciJ3mP3wYDIRtLVbfl7YKRfrMVunieeIJiwLWa 2EITROEOVaw/QHINdlCaoY98PqERhwuPkm+s6hgShceW2Wma+ZX9TOG3grwymtJl rMbZH40FIP+cuSmoecHDsP1OzznqNnpbGdNaCjzd6lz5gbEq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwqDKZiFv9OzACpkFqcFZd2qj+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNh MmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvZmE1OGYwMTgtODk2OC0z ZTlkLWI5OTktNzQ0OTg2MzFiODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGMzYTJkMTgtYjE3MS00NmZhLTg2 OTMtMDA4MGQ3N2YwNTc5L2RjM2EyZDE4LWIxNzEtNDZmYS04NjkzLTAwODBkNzdm MDU3OS5jcmwwHwYDVR0jBBgwFoAU1IXG/bRae9Zu5TBLQpLAiaFsszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgw ZDc3ZjA1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjoQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvRAaPYLC5uPckunS6WAZ2XTg92Ver+kSyjXnUwbIwmZRA5ZQWiya15 UfoplH5TywtTXORNQxm1lkto7xaeX2yasVad3gFJazdjMUIl/aj3yNrKXwNi10lL vP/Nf9Xu6t5Ec5bxTzBayjG7m2v0LE1x2g+PU6XdYXtCByd+ExpDhlE2r2+j2ms6 onkJ6mqA/9/uV60qazPtpc6Qy33WD8judojZ18gYBjFEFeHZsOiW2n2SiUcZxcwb k/RyEPKrFAlG/kUsWnDOClQQfmGxPcyrF0kq7cFgAVwgbimIggtkOHmzaiDptcyX CMbVuit8O4/0KBl+DTmigCf/FSgvto0= -----END CERTIFICATE-----Generated at Sun Oct 11 11:02:49 2026 by rpki-client