$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa File: 4837b021-f493-3c03-a601-3734117996f9.roa (raw, json) Hash identifier: +sw/8vyB0mGr2GKTDkdizRrWUhKJAznvuEpdQXk/i4k= Subject key identifier: 28:05:84:B4:29:8F:04:6E:1A:6E:CB:85:CE:64:A2:B0:1A:33:A1:48 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F498A7875587AF0D4CF2A3400 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30029 IP address blocks: 150.253.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:78:75:58:7a:f0:d4:cf:2a:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4c7813f-e3dc-4740-8dbd-42b49d3973bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:68:87:af:e8:7c:b4:0a:37:dc:5b:af:b3: 9e:8e:53:3c:6d:74:1f:da:94:1f:0a:ae:51:ce:87: ca:be:71:66:c8:be:3f:17:fc:95:f6:9f:40:99:04: 1c:18:c0:9a:27:33:78:d5:c0:ab:18:07:90:1f:46: 87:7b:f4:43:59:01:d0:eb:12:6f:97:7d:b7:2a:7f: b0:0f:35:e8:48:8f:02:2e:d0:7c:09:93:6a:53:26: ec:c4:d9:f7:03:59:f4:3d:09:73:cf:19:5c:d4:25: dc:15:7d:4f:52:ef:d5:29:2a:f3:d0:96:63:7f:92: 4b:10:89:1a:b2:1b:ce:4a:cf:45:45:ce:14:ac:71: e3:f5:ce:bd:b3:25:11:3b:0d:0a:ee:09:8f:a4:65: 2c:84:05:6b:2e:85:30:d7:ef:d2:0c:15:32:db:42: e2:c1:9c:95:10:16:d9:66:7b:02:88:13:a9:2b:24: 6f:93:6c:a3:4e:8f:4e:40:7b:cf:e5:df:b4:c0:bf: a3:49:68:81:d8:41:81:1a:0f:6b:b9:54:37:7a:33: e4:90:a1:3c:f3:a9:3d:04:96:f4:29:40:ff:9b:6f: 06:af:2f:ee:ca:74:92:56:86:c3:61:1e:91:35:70: 0c:ac:38:26:58:57:50:0c:dc:63:aa:f8:95:db:9c: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:84:B4:29:8F:04:6E:1A:6E:CB:85:CE:64:A2:B0:1A:33:A1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 150.253.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6d:5b:65:cd:87:67:a8:2d:6d:db:2c:7a:fe:dc:0c:9b:6e: b4:22:97:b4:57:48:9b:46:29:a0:55:a0:5f:88:57:a0:64:c6: 6a:06:a0:a2:70:a3:1f:ef:d9:1c:88:b8:22:17:e6:4d:47:4b: 41:32:e1:61:cd:87:bc:55:53:e9:c1:a5:4a:84:7f:2e:0c:6b: ae:cb:30:23:76:2f:e5:87:ce:6d:c9:4e:9d:06:2e:0c:08:92: 82:e7:13:71:90:3c:cc:27:e4:92:e6:52:50:fe:65:5e:04:38: b3:38:54:a4:aa:fb:26:fe:76:8e:a2:de:80:22:15:eb:eb:54: 27:92:e4:67:cb:38:4f:fe:20:98:98:3b:a2:88:ba:39:13:1e: ae:a2:02:12:a4:84:f5:4b:96:fa:8f:db:8c:d3:85:68:3e:7e: e3:46:b7:b9:e7:46:50:90:09:ad:54:9c:d1:35:5b:c0:c7:be: 00:85:0f:91:2a:95:91:eb:ea:7e:e6:67:27:b4:31:4f:ad:ef: f9:1a:07:ef:91:45:6e:85:d9:8d:00:e7:5b:77:c8:62:92:6d: 5f:f9:53:62:bb:0c:64:32:54:82:32:bf:5d:ff:42:69:42:d5: 7a:cc:c9:86:f0:1f:95:a6:be:27:2a:d6:1d:85:79:c0:9e:58: 59:49:85:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jinh1WHrw1M8qNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjRjNzgxM2YtZTNkYy00NzQwLThkYmQtNDJiNDlkMzk3M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibloh6/ofLQKN9xbr7OejlM8bXQf2pQfCq5R zofKvnFmyL4/F/yV9p9AmQQcGMCaJzN41cCrGAeQH0aHe/RDWQHQ6xJvl323Kn+w DzXoSI8CLtB8CZNqUybsxNn3A1n0PQlzzxlc1CXcFX1PUu/VKSrz0JZjf5JLEIka shvOSs9FRc4UrHHj9c69syUROw0K7gmPpGUshAVrLoUw1+/SDBUy20LiwZyVEBbZ ZnsCiBOpKyRvk2yjTo9OQHvP5d+0wL+jSWiB2EGBGg9ruVQ3ejPkkKE886k9BJb0 KUD/m28Gry/uynSSVobDYR6RNXAMrDgmWFdQDNxjqviV25z+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgFhLQpjwRuGm7Lhc5korAaM6FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNDgzN2IwMjEtZjQ5My0z YzAzLWE2MDEtMzczNDExNzk5NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFptW2XNh2eoLW3bLHr+3AybbrQil7RXSJtGKaBVoF+IV6BkxmoGoKJw ox/v2RyIuCIX5k1HS0Ey4WHNh7xVU+nBpUqEfy4Ma67LMCN2L+WHzm3JTp0GLgwI koLnE3GQPMwn5JLmUlD+ZV4EOLM4VKSq+yb+do6i3oAiFevrVCeS5GfLOE/+IJiY O6KIujkTHq6iAhKkhPVLlvqP24zThWg+fuNGt7nnRlCQCa1UnNE1W8DHvgCFD5Eq lZHr6n7mZye0MU+t7/kaB++RRW6F2Y0A51t3yGKSbV/5U2K7DGQyVIIyv13/QmlC 1XrMyYbwH5Wmvicq1h2FecCeWFlJhe8= -----END CERTIFICATE-----Generated at Tue Oct 13 22:40:16 2026 by rpki-client