$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2572a536-91b1-3b5b-aff0-40256530eedc.roa File: 2572a536-91b1-3b5b-aff0-40256530eedc.roa (raw, json) Hash identifier: N4gKo0BxU5JkgadWXls9LypVjkwmM1SwJibf2hUMFhY= Subject key identifier: 9C:00:77:81:9E:DC:99:DF:FE:1C:F2:80:55:4B:75:B0:CB:F4:37:4E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C472D3A2CEA8FBF7F540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2572a536-91b1-3b5b-aff0-40256530eedc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 206.75.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c4:72:d3:a2:ce:a8:fb:f7:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f646c890-bb01-4761-af42-cac26009b86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:70:1d:aa:01:31:30:7d:ec:82:92:d9:b9: 4d:8b:a2:7e:08:3c:e9:de:bb:cb:b5:14:eb:f9:c4: e5:7e:75:13:f6:da:20:46:1b:f3:86:93:5a:c2:a9: 84:1d:a0:45:dd:cd:e8:00:db:65:e4:3e:5f:92:0e: 0f:03:97:bb:62:3a:c9:5a:2d:54:d4:9d:4d:e3:38: c2:09:39:70:23:d9:68:91:86:dd:cd:6a:4d:5b:d0: 47:a0:9e:f9:90:7d:de:3a:a8:98:d0:15:45:48:6e: 6b:72:bc:e3:62:6e:da:dc:b6:3e:38:1f:ef:5f:3d: 66:cd:02:ef:f3:c7:dc:35:71:8c:c0:33:0d:28:d2: 36:63:24:d3:92:5b:03:04:7b:6b:9b:29:64:41:88: a4:d1:8e:df:c3:87:46:99:ea:a6:a8:cf:30:ca:e0: c7:d4:64:7d:6c:d6:24:16:aa:e4:4f:5b:1f:e6:cf: 0a:41:93:61:07:67:7c:51:b8:78:38:56:6b:ed:b7: a7:cd:a6:15:7c:56:3c:3c:63:05:6f:d8:dc:c0:dc: 39:e4:8f:5d:b5:8f:f4:ca:a7:09:f8:e7:1f:9a:91: 32:fb:39:73:e8:a2:41:33:37:9f:28:f0:fa:82:65: 0e:09:b7:a8:f7:c2:50:4e:6a:70:f4:87:7c:6a:c8: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:00:77:81:9E:DC:99:DF:FE:1C:F2:80:55:4B:75:B0:CB:F4:37:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2572a536-91b1-3b5b-aff0-40256530eedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.75.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:60:a2:9e:9a:03:67:89:2d:5e:d6:54:1b:56:e5:35:0b:36: a9:2b:ea:27:d2:b3:d5:bb:01:b4:5b:96:e9:7d:ab:f4:ce:9e: ac:15:0a:ee:ec:77:c5:2e:a9:64:f4:6e:1c:b3:56:1d:29:c3: 1e:ed:a5:5a:3b:c6:75:51:6d:a1:e1:54:37:1d:c4:59:9d:92: 68:67:68:5e:b0:92:ad:60:59:41:19:fe:2d:ed:cb:30:30:3b: fd:87:07:75:ed:b5:c8:59:e3:70:b0:e2:83:bf:b5:2b:20:3a: 81:cc:91:e9:d6:6a:6f:cb:af:46:14:45:a2:fc:ca:17:8c:ef: f0:de:a9:02:e3:0f:55:0c:06:03:53:d1:37:32:f3:12:1d:e2: 9c:9f:93:09:2c:a8:8a:ee:28:e1:e0:0f:50:3d:c1:fa:f2:3b: eb:ff:d1:ba:5f:0a:e2:39:4b:59:41:be:2e:1c:43:5c:e8:d8: 32:74:40:1c:58:76:37:7b:d0:5f:2f:44:09:c8:08:75:40:b6: 6c:f3:30:c0:f1:56:34:c9:0d:bf:78:6b:86:8a:33:bf:5e:a2: cc:64:37:51:2c:09:42:ce:1b:44:1b:08:e3:37:ed:d9:79:82: 6d:57:00:74:56:87:2a:74:c6:ed:07:53:9b:1d:18:7c:d0:8a: ff:b6:ea:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8Ry06LOqPv39UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY0NmM4OTAtYmIwMS00NzYxLWFmNDItY2FjMjYwMDliODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFBwHaoBMTB97IKS2blNi6J+CDzp3rvLtRTr +cTlfnUT9togRhvzhpNawqmEHaBF3c3oANtl5D5fkg4PA5e7YjrJWi1U1J1N4zjC CTlwI9lokYbdzWpNW9BHoJ75kH3eOqiY0BVFSG5rcrzjYm7a3LY+OB/vXz1mzQLv 88fcNXGMwDMNKNI2YyTTklsDBHtrmylkQYik0Y7fw4dGmeqmqM8wyuDH1GR9bNYk FqrkT1sf5s8KQZNhB2d8Ubh4OFZr7benzaYVfFY8PGMFb9jcwNw55I9dtY/0yqcJ +OcfmpEy+zlz6KJBMzefKPD6gmUOCbeo98JQTmpw9Id8ashXZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwAd4Ge3Jnf/hzygFVLdbDL9DdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjU3MmE1MzYtOTFiMS0z YjViLWFmZjAtNDAyNTY1MzBlZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVgop6aA2eJLV7WVBtW5TULNqkr6ifSs9W7AbRblul9q/TOnqwVCu7s d8UuqWT0bhyzVh0pwx7tpVo7xnVRbaHhVDcdxFmdkmhnaF6wkq1gWUEZ/i3tyzAw O/2HB3XttchZ43Cw4oO/tSsgOoHMkenWam/Lr0YURaL8yheM7/DeqQLjD1UMBgNT 0Tcy8xId4pyfkwksqIruKOHgD1A9wfryO+v/0bpfCuI5S1lBvi4cQ1zo2DJ0QBxY djd70F8vRAnICHVAtmzzMMDxVjTJDb94a4aKM79eosxkN1EsCULOG0QbCOM37dl5 gm1XAHRWhyp0xu0HU5sdGHzQiv+26pk= -----END CERTIFICATE-----Generated at Sun Oct 4 19:45:56 2026 by rpki-client