$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/06409c51-dc7d-3f74-8956-6662e11d8f9a.roa File: 06409c51-dc7d-3f74-8956-6662e11d8f9a.roa (raw, json) Hash identifier: 6G+r3l2vli4IzOEEUqm863Nli87gjWcsmuxmxXrgDX8= Subject key identifier: E9:EC:17:6F:A8:AA:85:80:59:66:29:28:B4:A1:97:F5:95:7A:43:83 Certificate issuer: /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d Certificate serial: 010D0C9F4328584F393C8D2417FDF8BA74C87500 Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/06409c51-dc7d-3f74-8956-6662e11d8f9a.roa Signing time: Sat 19 Sep 2026 05:38:32 +0000 ROA not before: Sat 19 Sep 2026 05:38:32 +0000 ROA not after: Fri 18 Dec 2026 06:38:32 +0000 asID: 29120 IP address blocks: 143.58.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:39:3c:8d:24:17:fd:f8:ba:74:c8:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d Validity Not Before: Sep 19 05:38:32 2026 GMT Not After : Dec 18 06:38:32 2026 GMT Subject: CN=3ba3ea9e-9241-4a34-9152-353263cb5ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:b9:66:37:88:6a:30:23:1a:f4:f9:02:08: b7:9e:cf:40:4a:be:48:66:1f:0a:f5:82:db:0b:3a: a2:bf:55:44:e9:b2:ce:4a:d8:46:be:d5:2b:9a:d5: 98:2a:30:ae:83:7d:01:8e:26:49:29:61:c2:a1:1d: e4:1b:7e:bc:59:41:09:b1:f5:0b:47:7c:e8:dc:bb: d1:cc:f5:4d:99:07:c6:bd:7b:8f:65:e6:f7:c5:59: 6b:09:c0:d7:45:ed:21:8a:b8:ab:ed:ee:62:1f:6a: 4a:15:97:77:a6:fa:44:cd:8e:e6:41:b9:b2:ad:6d: 92:b6:b5:af:04:80:e3:46:3f:97:e3:eb:61:d5:0a: 6b:d6:66:60:8c:fc:90:0c:b3:9b:a6:ad:ad:b2:79: f2:d7:ab:d5:76:d2:3b:8e:c7:1c:ab:74:09:73:04: 06:82:19:56:dd:f4:fb:14:98:5b:79:cb:07:53:97: e8:8c:32:af:8c:8d:cb:ad:00:cb:a5:e5:80:e1:dd: 64:9f:7f:38:33:b2:27:3d:0d:91:aa:ba:cb:9e:53: c8:bd:7e:2c:b7:62:54:1b:d2:34:46:8a:79:e7:9d: 07:ec:51:17:d6:51:8c:9d:2e:0c:f9:aa:c2:51:86: 3f:c0:86:d2:29:5a:42:5f:3f:c5:1a:9c:2f:74:80: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EC:17:6F:A8:AA:85:80:59:66:29:28:B4:A1:97:F5:95:7A:43:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/06409c51-dc7d-3f74-8956-6662e11d8f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl X509v3 Authority Key Identifier: keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer sbgp-ipAddrBlock: critical IPv4: 143.58.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:65:af:6e:13:d2:d7:8f:09:7d:02:27:22:55:10:9e:db: c1:db:9c:e8:d7:e0:de:30:45:ad:00:58:05:5b:e7:06:89:07: 99:68:02:28:1d:57:96:f5:5d:58:f7:10:d2:a4:3c:ad:05:5e: d6:d9:18:af:14:ec:9d:98:37:1d:b1:89:53:fc:7f:1b:ec:52: f3:2f:72:54:d6:46:f5:45:b8:0a:2a:05:02:54:31:2a:88:68: 7c:80:ce:57:ca:4c:8e:ff:3a:24:39:1e:2d:9b:71:12:bf:f9: 72:69:7b:da:78:3b:bb:a1:4c:02:5f:2d:82:40:ee:da:30:5f: 1e:e7:b5:4a:ff:af:05:2a:75:36:8e:05:8f:16:51:36:da:a8: 97:d0:37:02:f7:bd:a0:32:bb:b7:8c:6f:cb:85:2b:1b:a7:00: fa:6f:07:cf:c3:b7:74:c9:0e:8c:66:94:29:29:8b:fd:09:c4: 0c:c5:6d:cd:26:5f:d1:28:56:92:70:b0:6c:4c:61:60:c7:b3: 1c:7a:2c:06:71:9d:6b:c9:09:1f:ab:ca:d6:13:bb:b9:67:2d: b3:29:82:dc:78:1b:18:e6:91:bf:c4:32:2c:2f:b5:57:cd:79: c4:69:09:d6:c0:8c:c4:4a:9e:fd:25:f5:b9:72:8a:32:d9:82: db:71:a8:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE85PI0kF/34unTIdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2NjE3Y2EtNGY1Mi00NzRjLTk4YzktZDJmMmFiZTdi ZjhkMB4XDTI2MDkxOTA1MzgzMloXDTI2MTIxODA2MzgzMlowLzEtMCsGA1UEAxMk M2JhM2VhOWUtOTI0MS00YTM0LTkxNTItMzUzMjYzY2I1YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy65ZjeIajAjGvT5Agi3ns9ASr5IZh8K9YLb Czqiv1VE6bLOSthGvtUrmtWYKjCug30BjiZJKWHCoR3kG368WUEJsfULR3zo3LvR zPVNmQfGvXuPZeb3xVlrCcDXRe0hirir7e5iH2pKFZd3pvpEzY7mQbmyrW2StrWv BIDjRj+X4+th1Qpr1mZgjPyQDLObpq2tsnny16vVdtI7jsccq3QJcwQGghlW3fT7 FJhbecsHU5fojDKvjI3LrQDLpeWA4d1kn384M7InPQ2RqrrLnlPIvX4st2JUG9I0 Rop5550H7FEX1lGMnS4M+arCUYY/wIbSKVpCXz/FGpwvdIC2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnsF2+oqoWAWWYpKLShl/WVekODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDY2 MTdjYS00ZjUyLTQ3NGMtOThjOS1kMmYyYWJlN2JmOGQvMDY0MDljNTEtZGM3ZC0z Zjc0LTg5NTYtNjY2MmUxMWQ4ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQ2NjE3Y2EtNGY1Mi00NzRjLTk4 YzktZDJmMmFiZTdiZjhkLzM0NjYxN2NhLTRmNTItNDc0Yy05OGM5LWQyZjJhYmU3 YmY4ZC5jcmwwHwYDVR0jBBgwFoAUkX3e8iP+pIZgJ1vZEQ9uJvUuockwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNDY2MTdjYS00ZjUyLTQ3NGMtOThjOS1kMmYy YWJlN2JmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM8Za9uE9LXjwl9AiciVRCe28HbnOjX4N4wRa0AWAVb5waJB5loAigd V5b1XVj3ENKkPK0FXtbZGK8U7J2YNx2xiVP8fxvsUvMvclTWRvVFuAoqBQJUMSqI aHyAzlfKTI7/OiQ5Hi2bcRK/+XJpe9p4O7uhTAJfLYJA7towXx7ntUr/rwUqdTaO BY8WUTbaqJfQNwL3vaAyu7eMb8uFKxunAPpvB8/Dt3TJDoxmlCkpi/0JxAzFbc0m X9EoVpJwsGxMYWDHsxx6LAZxnWvJCR+rytYTu7lnLbMpgtx4Gxjmkb/EMiwvtVfN ecRpCdbAjMRKnv0l9blyijLZgttxqFw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:03:03 2026 by rpki-client