$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa File: 43318d43-107a-3c35-937c-35cc2520acca.roa (raw, json) Hash identifier: p+MNz6ddnEkXDy22I0BnTyEXmmih/2tzlDFfvzqjP2o= Subject key identifier: 48:A5:90:3A:D0:96:99:69:30:5A:13:45:4A:36:77:5E:A5:4D:EB:57 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584F5E62B6917CA2A4BBF6A4FD00 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 12119 IP address blocks: 142.204.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b6:91:7c:a2:a4:bb:f6:a4:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=46a91ac5-5ffe-49f8-bd91-1514195b6106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:38:53:e6:48:7f:92:9d:51:a5:c1:7a:d7: ac:53:12:95:72:21:ba:66:e1:6e:9e:cc:64:5f:5b: ea:b9:cb:ec:fc:2c:7e:b9:54:6f:a4:42:ed:90:fa: 6b:be:00:d9:0c:b2:2f:a4:2a:64:5c:31:91:ba:0c: 7e:2a:57:57:cc:b9:7e:73:d9:28:1f:26:45:bf:08: b8:c2:cb:12:58:e2:7d:3b:bd:cf:3c:19:51:38:56: cc:12:0b:e5:97:8f:a0:12:5f:17:34:0d:db:87:fc: ad:39:a8:c3:25:31:f8:70:16:6f:e4:8c:bc:4e:0c: e4:c1:6c:b6:ed:b7:00:21:50:67:df:f6:bd:b6:57: 69:62:43:ac:96:7f:cb:4c:54:bb:b3:ec:1d:f6:c1: 84:ef:31:01:91:be:17:fa:ab:f7:e9:f2:af:96:94: 83:8f:ab:0b:87:47:ab:79:30:5f:86:64:6b:4e:18: f6:ff:b1:80:92:3a:84:9f:f1:95:ee:f5:b5:0e:69: c4:f4:ea:f4:fb:28:ae:69:22:d3:b6:b5:6f:34:5b: 8f:7e:79:07:45:91:2c:c6:2f:f8:ff:ae:71:a0:fe: ca:d4:df:92:4e:8c:f7:79:4c:2f:b0:95:b5:1f:14: c4:61:56:d1:af:93:8e:a1:ab:5a:7f:97:73:6f:20: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A5:90:3A:D0:96:99:69:30:5A:13:45:4A:36:77:5E:A5:4D:EB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 142.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:60:98:c7:5f:3b:99:02:3e:e3:e8:2c:7c:d9:5a:95:27:7a: 3d:d9:37:19:bf:3d:18:11:c5:45:b1:35:2a:f3:c8:6a:62:44: 96:5a:c4:a2:39:81:4a:f5:5f:5b:e6:cc:05:90:cc:ec:72:2b: d3:76:e3:e9:54:16:e7:2c:de:fa:ec:8b:ca:b1:b0:8d:26:b9: b3:f5:c1:c6:95:f4:1a:b6:fe:05:54:7e:03:6c:ba:e1:d8:af: 88:b7:49:03:bf:38:b8:e5:8c:7c:2c:b3:20:5e:29:91:b0:78: 3b:98:52:20:e0:e9:0e:c1:c9:ef:d4:5b:3d:d8:56:69:02:00: 71:91:73:88:40:11:b1:e0:ed:2a:46:29:77:a0:89:b9:f0:f9: d4:a0:7d:77:a3:6e:e3:72:71:5a:c4:bc:08:b0:1e:3a:9c:b0: 7f:eb:a3:48:b3:d5:cf:de:93:ef:c7:5f:f1:58:cf:84:66:0c: 18:a2:fe:be:2a:f4:ac:d2:d3:28:c6:23:c4:18:63:cd:63:71: f3:ca:e6:aa:23:6c:de:08:3f:88:d6:c9:ee:39:fb:f6:71:05: 28:ba:3e:d2:09:b8:a8:10:0f:fe:8c:2b:fd:d3:46:5a:d0:33: 8a:1a:8f:db:ae:75:e4:74:2f:88:cb:3d:78:e0:46:33:8a:73: 5a:ee:6b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYraRfKKku/ak/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NDZhOTFhYzUtNWZmZS00OWY4LWJkOTEtMTUxNDE5NWI2MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6w4U+ZIf5KdUaXBetesUxKVciG6ZuFunsxk X1vqucvs/Cx+uVRvpELtkPprvgDZDLIvpCpkXDGRugx+KldXzLl+c9koHyZFvwi4 wssSWOJ9O73PPBlROFbMEgvll4+gEl8XNA3bh/ytOajDJTH4cBZv5Iy8TgzkwWy2 7bcAIVBn3/a9tldpYkOsln/LTFS7s+wd9sGE7zEBkb4X+qv36fKvlpSDj6sLh0er eTBfhmRrThj2/7GAkjqEn/GV7vW1DmnE9Or0+yiuaSLTtrVvNFuPfnkHRZEsxi/4 /65xoP7K1N+SToz3eUwvsJW1HxTEYVbRr5OOoataf5dzbyDbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEilkDrQlplpMFoTRUo2d16lTetXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNDMzMThkNDMtMTA3YS0z YzM1LTkzN2MtMzVjYzI1MjBhY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjsxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBgmMdfO5kCPuPoLHzZWpUnej3ZNxm/PRgRxUWxNSrzyGpiRJZaxKI5 gUr1X1vmzAWQzOxyK9N24+lUFucs3vrsi8qxsI0mubP1wcaV9Bq2/gVUfgNsuuHY r4i3SQO/OLjljHwssyBeKZGweDuYUiDg6Q7Bye/UWz3YVmkCAHGRc4hAEbHg7SpG KXegibnw+dSgfXejbuNycVrEvAiwHjqcsH/ro0iz1c/ek+/HX/FYz4RmDBii/r4q 9KzS0yjGI8QYY81jcfPK5qojbN4IP4jWye45+/ZxBSi6PtIJuKgQD/6MK/3TRlrQ M4oaj9uudeR0L4jLPXjgRjOKc1rua8c= -----END CERTIFICATE-----Generated at Sun Oct 11 11:32:24 2026 by rpki-client