$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa File: 2239a84b-7e10-3429-b4a8-09f38898bb31.roa (raw, json) Hash identifier: SZuAguXFu4NoWI0BESifvHEGCinJlVbLOScAYAgK6C4= Subject key identifier: DD:F8:7F:97:F3:64:FB:93:B4:F4:82:A6:77:D4:55:50:C0:87:8E:86 Certificate issuer: /CN=45718731-be33-4e2d-a8ff-5c444109d0ad Certificate serial: 010D0C9F4328584F497322ECF7EDE2368D7E27A0 Authority key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 149.28.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:22:ec:f7:ed:e2:36:8d:7e:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45718731-be33-4e2d-a8ff-5c444109d0ad Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d3e752e8-d266-4bde-aee6-3699cfd84605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:f9:2a:93:5d:dd:ab:34:b4:44:32:3b:13: 04:3b:85:be:c8:f9:de:9e:49:78:11:ab:6b:60:b6: 2c:cb:4b:f3:1a:7c:a8:61:d3:11:c9:e7:0d:94:05: 58:7b:f7:b6:d4:0d:76:9b:49:71:15:84:99:4b:17: 9c:78:17:53:0a:52:94:d9:ac:be:3c:19:2d:87:fb: 5e:5a:08:42:c8:0e:eb:a3:28:61:4f:3b:d7:66:c5: f4:8f:dc:14:e5:4c:da:37:0a:5d:fe:e1:54:0d:c6: 0e:d7:cf:ea:cd:25:4b:28:e7:4e:c7:7c:11:b4:cf: 52:ee:f4:21:99:27:4e:99:e6:45:f3:ca:03:92:cc: 1b:ad:72:d8:d2:dd:cd:f7:5c:b0:a1:ec:fa:32:f2: af:ce:c1:14:25:8d:70:9a:b4:1e:84:28:67:2a:4b: 89:b5:d4:bc:75:61:2b:30:3d:dc:34:da:fb:65:2d: 54:bc:b1:bf:95:8c:40:de:e7:14:20:d0:ce:fd:76: 37:56:31:dd:6b:66:4a:f5:d2:dc:be:af:b0:07:e5: 4f:b1:9a:eb:45:a7:fb:7f:bb:fb:43:76:cd:bb:c4: 78:a0:da:d7:fd:6a:cd:f9:42:a5:a9:91:39:14:93: 6f:ef:6d:d7:92:5f:00:0e:7b:51:ae:d1:4f:f9:ac: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F8:7F:97:F3:64:FB:93:B4:F4:82:A6:77:D4:55:50:C0:87:8E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl X509v3 Authority Key Identifier: keyid:DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer sbgp-ipAddrBlock: critical IPv4: 149.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3e:7b:a5:4f:e9:f0:64:b4:96:d1:99:55:20:e2:0b:8f:ab: bc:75:1e:f5:2f:6b:72:94:fa:fc:88:fd:af:42:fb:2a:48:e9: c4:8c:2e:b1:e2:b4:42:f8:49:50:8a:9d:46:ce:69:5a:22:73: 69:e3:30:0f:21:a5:22:b1:95:df:ba:31:46:88:aa:7f:d0:e8: 4c:ee:47:a8:9b:23:27:37:bb:b3:6f:0e:ab:b9:e5:39:c8:03: c9:58:e5:dc:23:53:ad:c2:6e:90:1b:05:b3:44:6a:e7:dd:3c: ce:61:bb:9d:39:22:eb:b7:11:5c:78:00:72:5a:6b:ef:29:ce: 8f:29:a1:21:41:0c:d3:60:08:a0:eb:8b:8b:44:e3:60:f6:a3: 1a:36:67:fa:6a:a2:8c:98:4f:1b:7b:9b:ff:4d:72:1a:72:d5: 85:87:b1:89:b5:f4:41:e7:f1:8c:c4:a5:5f:f8:a6:39:17:8e: 59:13:c4:ab:dc:fd:e7:23:77:1f:4f:2a:35:97:e0:4c:9e:e5: 2d:7b:e7:18:5e:fe:f3:f9:f7:22:64:e0:ba:b7:65:08:9c:78: 19:ff:5e:4c:44:3f:84:a1:8a:f6:a3:1f:d5:b7:98:cd:4e:d5: 57:3b:8a:25:3a:41:b4:8f:d6:01:75:79:3c:e3:00:ef:0b:cf: b3:e3:51:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyLs9+3iNo1+J6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3MTg3MzEtYmUzMy00ZTJkLWE4ZmYtNWM0NDQxMDlk MGFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDNlNzUyZTgtZDI2Ni00YmRlLWFlZTYtMzY5OWNmZDg0NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/v5KpNd3as0tEQyOxMEO4W+yPnenkl4Eatr YLYsy0vzGnyoYdMRyecNlAVYe/e21A12m0lxFYSZSxeceBdTClKU2ay+PBkth/te WghCyA7royhhTzvXZsX0j9wU5UzaNwpd/uFUDcYO18/qzSVLKOdOx3wRtM9S7vQh mSdOmeZF88oDkswbrXLY0t3N91ywoez6MvKvzsEUJY1wmrQehChnKkuJtdS8dWEr MD3cNNr7ZS1UvLG/lYxA3ucUINDO/XY3VjHda2ZK9dLcvq+wB+VPsZrrRaf7f7v7 Q3bNu8R4oNrX/WrN+UKlqZE5FJNv723Xkl8ADntRrtFP+aw6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN34f5fzZPuTtPSCpnfUVVDAh46GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTcx ODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEwOWQwYWQvMjIzOWE4NGItN2UxMC0z NDI5LWI0YTgtMDlmMzg4OThiYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3MTg3MzEtYmUzMy00ZTJkLWE4 ZmYtNWM0NDQxMDlkMGFkLzQ1NzE4NzMxLWJlMzMtNGUyZC1hOGZmLTVjNDQ0MTA5 ZDBhZC5jcmwwHwYDVR0jBBgwFoAU3vyj43DeIThjPi4QH7jxu69ar2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0 NDEwOWQwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE+e6VP6fBktJbRmVUg4guPq7x1HvUva3KU+vyI/a9C+ypI6cSMLrHi tEL4SVCKnUbOaVoic2njMA8hpSKxld+6MUaIqn/Q6EzuR6ibIyc3u7NvDqu55TnI A8lY5dwjU63CbpAbBbNEaufdPM5hu505Iuu3EVx4AHJaa+8pzo8poSFBDNNgCKDr i4tE42D2oxo2Z/pqooyYTxt7m/9Nchpy1YWHsYm19EHn8YzEpV/4pjkXjlkTxKvc /ecjdx9PKjWX4Eye5S175xhe/vP59yJk4Lq3ZQiceBn/XkxEP4ShivajH9W3mM1O 1Vc7iiU6QbSP1gF1eTzjAO8Lz7PjUWc= -----END CERTIFICATE-----Generated at Tue Sep 29 19:48:49 2026 by rpki-client