$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa File: 0c800d95-53c3-3c16-aa3f-80e99df0796a.roa (raw, json) Hash identifier: xQJ9HRR2szztbUVFZRi0IZyTTFhecVNWGkOGVFBSbLA= Subject key identifier: D6:DD:E8:71:6E:8B:8E:71:EC:7A:81:06:2C:39:2D:56:3D:AB:E5:A9 Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584F3CE2846A4FF37084884B5660 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 26658 IP address blocks: 104.243.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:84:6a:4f:f3:70:84:88:4b:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=1726c027-bcd7-4d2f-b0d1-8ea016fc9a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:bb:1b:8d:44:67:ed:4b:42:61:80:0b:87: b3:dc:e2:e8:cf:a4:d8:ab:e0:3b:21:e5:ce:06:92: 7c:ac:35:a7:7c:5a:e4:a3:a3:5e:a3:c2:95:3a:e2: 17:d7:fb:b0:24:16:50:ff:39:ef:69:ca:37:17:b0: 4d:4e:d2:f9:c9:02:12:0c:ca:5f:d2:c5:f5:15:b9: f0:47:ee:d6:18:89:0b:78:94:3e:7b:fe:d4:a4:32: 7c:71:eb:ab:d0:55:f5:e8:5f:f5:b8:5a:03:33:20: 81:d0:9e:cc:14:cf:39:26:f0:16:a9:76:93:29:46: 49:fb:76:db:54:c1:c6:ee:97:a5:1b:28:88:ad:d8: c8:22:50:cf:71:aa:59:56:a9:52:7c:9b:7c:2c:ba: 01:38:70:72:44:0a:4a:75:67:1a:08:fc:40:01:4f: 70:19:2e:9a:b7:a7:e0:30:67:f4:a5:81:bd:07:6e: 52:14:ad:2d:78:d9:fc:d3:1d:72:30:0e:38:ed:5f: a6:d1:e1:8c:69:d2:14:32:36:45:eb:0e:60:d4:7e: e8:bc:40:35:35:b0:b2:29:61:60:43:1c:75:24:e5: a5:51:86:b9:f0:79:22:25:ea:33:40:1d:00:79:f5: e8:21:6a:1e:06:54:2d:b3:7b:cf:8b:9d:16:e0:f7: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DD:E8:71:6E:8B:8E:71:EC:7A:81:06:2C:39:2D:56:3D:AB:E5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:16:44:6f:16:aa:21:b7:d8:8a:b8:8d:33:d1:14:8e:5e:4d: 9b:a4:d4:42:7a:37:99:cd:67:ee:4f:37:57:72:38:c2:e1:19: 9d:36:1e:48:29:74:7f:31:2c:44:24:62:69:8c:9e:6c:e4:16: bd:db:31:38:b4:cb:c0:f4:fb:98:e3:e0:35:bb:ee:a9:d8:4e: d1:39:5a:57:be:7f:ea:e7:9c:dd:5c:4c:5a:cc:d9:9a:19:71: 90:0a:11:13:f2:58:12:85:37:1a:cd:ba:b4:73:d6:ac:4d:ad: af:16:0c:dc:36:57:c1:7c:32:8f:fa:e6:44:c4:87:75:ec:88: 03:da:d1:ea:a2:b8:8d:b3:d2:4d:cb:87:99:cf:de:25:20:c3: 59:eb:5f:33:e2:77:ea:cb:1a:03:3e:59:8c:3e:d7:32:6a:ac: 0f:31:03:24:e2:27:77:66:7d:f6:eb:e1:d7:f3:a5:8a:47:34: bd:01:64:d2:00:28:fb:ba:57:4c:2c:01:2b:03:96:2a:38:af: ef:1b:c2:dd:0b:fc:a4:49:77:2a:ba:37:4d:dc:02:f4:75:2f: 27:b3:a6:cd:4f:95:ca:e2:5d:c4:98:26:3b:33:53:30:09:83: ad:2b:ac:f7:fd:b2:4a:8f:fe:3d:74:f4:70:8e:a5:63:46:eb: 48:93:af:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oRqT/NwhIhLVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MTcyNmMwMjctYmNkNy00ZDJmLWIwZDEtOGVhMDE2ZmM5YTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LC7G41EZ+1LQmGAC4ez3OLoz6TYq+A7IeXO BpJ8rDWnfFrko6Neo8KVOuIX1/uwJBZQ/znvaco3F7BNTtL5yQISDMpf0sX1Fbnw R+7WGIkLeJQ+e/7UpDJ8ceur0FX16F/1uFoDMyCB0J7MFM85JvAWqXaTKUZJ+3bb VMHG7pelGyiIrdjIIlDPcapZVqlSfJt8LLoBOHByRApKdWcaCPxAAU9wGS6at6fg MGf0pYG9B25SFK0teNn80x1yMA447V+m0eGMadIUMjZF6w5g1H7ovEA1NbCyKWFg Qxx1JOWlUYa58HkiJeozQB0AefXoIWoeBlQts3vPi50W4PeNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbd6HFui45x7HqBBiw5LVY9q+WpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMGM4MDBkOTUtNTNjMy0z YzE2LWFhM2YtODBlOTlkZjA3OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEWRG8WqiG32Iq4jTPRFI5eTZuk1EJ6N5nNZ+5PN1dyOMLhGZ02Hkgp dH8xLEQkYmmMnmzkFr3bMTi0y8D0+5jj4DW77qnYTtE5Wle+f+rnnN1cTFrM2ZoZ cZAKERPyWBKFNxrNurRz1qxNra8WDNw2V8F8Mo/65kTEh3XsiAPa0eqiuI2z0k3L h5nP3iUgw1nrXzPid+rLGgM+WYw+1zJqrA8xAyTiJ3dmffbr4dfzpYpHNL0BZNIA KPu6V0wsASsDlio4r+8bwt0L/KRJdyq6N03cAvR1Lyezps1PlcriXcSYJjszUzAJ g60rrPf9skqP/j109HCOpWNG60iTr7c= -----END CERTIFICATE-----Generated at Mon Sep 28 10:04:41 2026 by rpki-client