$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa File: 11e8d12e-99be-3ca9-9f5d-648782b712c0.roa (raw, json) Hash identifier: DA1jx8qgEVRORlRl2OY2lZQ1X7JBxDZtRl6SY0cSxlE= Subject key identifier: 44:60:97:D9:4C:19:8C:21:E3:E0:27:75:A3:7B:D3:69:B6:21:74:46 Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584F3CE2BA1923F09AEB6F16BC80 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 26658 IP address blocks: 104.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:ba:19:23:f0:9a:eb:6f:16:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=888791fd-8d54-4bbd-bc1f-9ba303be2d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:09:05:8c:13:e1:29:f9:8b:3c:cb:cc:46: 71:23:52:9d:ff:da:4d:aa:70:aa:23:c2:0f:77:65: 18:71:f3:e1:18:fe:9b:0d:2e:b8:e0:c3:e3:4c:d1: e3:dc:68:a5:ad:84:c6:f6:91:36:7c:91:dd:7b:b9: 1a:fc:50:8f:55:97:6c:36:d0:04:34:ee:c4:ed:99: 4f:f9:dc:fe:b5:82:35:dd:c8:d2:72:ed:02:b5:a5: 96:e0:da:04:5c:51:c7:8c:ae:5f:86:76:59:80:4c: a2:77:5a:3a:60:b1:3e:4e:12:16:65:93:86:36:86: bb:60:5e:ec:12:66:47:69:92:d4:c5:b2:f6:91:6f: 96:5a:53:db:13:57:8b:55:31:f1:27:a3:4a:e5:f9: 91:77:2b:6f:83:3b:10:f9:6e:7f:d8:fc:dc:af:07: f2:1e:81:d3:7e:5c:e9:3a:c0:d1:e0:dd:10:f0:92: 57:27:88:8f:06:ce:46:d4:6f:ae:91:cf:b5:e8:24: 43:68:1e:58:27:e9:fd:5c:7e:b3:9b:09:b9:95:40: 50:9e:59:4e:d8:d6:85:11:19:28:5a:51:be:3b:ee: 04:81:37:86:fa:ef:07:35:1e:76:ed:ea:75:75:02: a6:8c:a1:09:e4:ef:40:31:90:a7:f3:f3:ff:a5:0d: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:60:97:D9:4C:19:8C:21:E3:E0:27:75:A3:7B:D3:69:B6:21:74:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c0:9e:44:2a:20:54:c2:f2:fc:a7:4f:0e:d4:34:1a:97:3b: 10:6b:57:e8:50:5e:af:a8:63:76:ef:0e:97:3f:92:73:a1:4a: d6:c3:32:ac:e5:27:df:11:18:67:cf:0e:41:fa:44:78:b5:dc: e6:34:60:9f:e0:2d:0e:2b:2b:08:e1:30:7d:10:fd:41:70:ec: 96:2f:6c:ad:ab:9c:36:cd:45:04:52:be:35:33:94:f0:a8:47: 16:26:3c:3c:47:3a:68:be:c8:85:24:54:98:6c:67:7f:a9:97: 9a:a6:5a:a9:cf:58:26:b9:95:b6:40:c3:39:0f:ee:79:fa:ef: 8f:ba:fd:f4:4c:88:95:93:ce:6d:1c:d6:35:e8:bc:55:16:68: 05:68:01:8c:69:b6:33:25:14:90:16:ca:a7:78:63:d8:22:d6: ac:3b:eb:16:e4:a7:3a:a7:88:eb:d4:7d:bb:2b:ec:12:8b:aa: fa:c7:15:85:de:3a:8b:8c:e2:eb:4a:67:a4:54:3b:16:c6:11: 47:9f:61:82:29:13:57:4e:19:ab:6b:f5:96:26:a1:4d:c8:63: 4e:a4:bd:c0:13:36:4e:cf:31:5f:5c:ab:90:ab:c2:6f:78:1e: 62:66:3e:d4:d8:c8:a2:8a:78:53:d1:b9:26:a1:14:bb:73:e8: a6:ed:e4:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884roZI/Ca628WvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ODg4NzkxZmQtOGQ1NC00YmJkLWJjMWYtOWJhMzAzYmUyZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JgJBYwT4Sn5izzLzEZxI1Kd/9pNqnCqI8IP d2UYcfPhGP6bDS644MPjTNHj3GilrYTG9pE2fJHde7ka/FCPVZdsNtAENO7E7ZlP +dz+tYI13cjScu0CtaWW4NoEXFHHjK5fhnZZgEyid1o6YLE+ThIWZZOGNoa7YF7s EmZHaZLUxbL2kW+WWlPbE1eLVTHxJ6NK5fmRdytvgzsQ+W5/2PzcrwfyHoHTflzp OsDR4N0Q8JJXJ4iPBs5G1G+ukc+16CRDaB5YJ+n9XH6zmwm5lUBQnllO2NaFERko WlG+O+4EgTeG+u8HNR527ep1dQKmjKEJ5O9AMZCn8/P/pQ2dxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERgl9lMGYwh4+AndaN702m2IXRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMTFlOGQxMmUtOTliZS0z Y2E5LTlmNWQtNjQ4NzgyYjcxMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDAnkQqIFTC8vynTw7UNBqXOxBrV+hQXq+oY3bvDpc/knOhStbDMqzl J98RGGfPDkH6RHi13OY0YJ/gLQ4rKwjhMH0Q/UFw7JYvbK2rnDbNRQRSvjUzlPCo RxYmPDxHOmi+yIUkVJhsZ3+pl5qmWqnPWCa5lbZAwzkP7nn674+6/fRMiJWTzm0c 1jXovFUWaAVoAYxptjMlFJAWyqd4Y9gi1qw76xbkpzqniOvUfbsr7BKLqvrHFYXe OouM4utKZ6RUOxbGEUefYYIpE1dOGatr9ZYmoU3IY06kvcATNk7PMV9cq5Crwm94 HmJmPtTYyKKKeFPRuSahFLtz6Kbt5BA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:05:43 2026 by rpki-client