$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa File: 29607c22-9eb6-34db-ad57-b7018dc41198.roa (raw, json) Hash identifier: 73TV/nB+cPglq5dCKCEqfnB+lcRBwSNQMsLU8XZ+i/k= Subject key identifier: 9C:18:39:D5:DE:11:0E:FF:86:7E:9C:B4:51:A5:D1:74:92:72:6E:38 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C56E5D538C27C4BC2500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 142.169.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c5:6e:5d:53:8c:27:c4:bc:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2dce25a0-6bb5-481b-a434-a6d7657ed00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:93:81:2e:1a:a3:a6:3c:89:15:3a:b8:ce:c7: 45:c5:08:c4:d0:86:76:73:d6:b0:c2:dd:af:47:6e: d6:39:b6:fb:f7:0d:62:e4:1b:c8:36:9c:7f:f2:a7: 60:18:1f:b1:75:2b:65:28:fe:12:82:bf:6f:08:eb: 6b:ea:7a:95:24:bd:80:da:b2:2b:1b:b1:64:55:55: 95:fd:01:d5:36:98:f6:98:e6:19:95:8e:b1:8f:e4: 96:21:27:ae:fe:a6:20:6b:53:b6:b1:d2:12:bd:e8: 44:b3:3e:7c:c5:39:c8:bb:73:ae:bc:b0:eb:d9:78: 57:0e:0a:33:1c:bc:cc:a1:ec:c1:05:39:9c:ed:20: 35:ee:7f:df:69:85:5c:c6:80:53:3e:b9:9d:17:37: e1:09:51:2d:2d:62:cb:c9:f8:5b:e8:3d:06:36:c3: 67:1a:91:ce:02:b5:91:2f:b5:d6:c9:6e:2a:17:5b: 9c:2c:60:2a:93:81:66:94:88:9d:0c:50:7c:45:7c: 76:3a:6d:97:70:6a:90:a8:7e:95:0a:09:d9:e6:ae: 59:e3:da:42:c6:9e:1d:b1:0e:ce:0a:f0:64:d5:6a: 11:46:6e:9d:5a:0e:53:66:00:dd:0a:41:f0:9c:07: 8f:17:8d:2f:74:38:67:14:dc:bf:b2:bf:03:ec:16: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:39:D5:DE:11:0E:FF:86:7E:9C:B4:51:A5:D1:74:92:72:6E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.169.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1b:0e:58:6c:bb:7d:72:a2:22:1d:d4:59:27:dd:75:20:fb: 5b:5b:48:3e:8f:65:dc:31:dd:be:d4:1f:4e:47:f0:70:fa:16: 06:7f:b7:b9:06:b0:c5:d0:9c:e0:ab:07:b4:d5:e2:78:9b:8d: 50:d3:0c:f5:e7:88:61:4e:f7:57:72:75:63:b4:10:7c:9a:fe: 45:df:7f:37:d5:12:db:b9:e4:18:43:dd:44:d0:2d:5f:86:12: a8:64:88:8c:ac:10:e7:51:6a:1a:29:c5:b1:06:1f:3c:fc:94: 71:8f:eb:7c:c5:6e:68:ff:51:34:4e:46:2a:17:6e:bf:34:81: b9:30:7a:58:d2:95:58:27:7a:ff:f3:2b:39:cb:84:22:0e:b7: 69:7e:f1:d6:9f:86:0c:75:b4:27:f9:24:8c:e6:ce:ca:d1:3e: 67:28:4d:18:32:4b:4c:6e:f9:87:60:9b:1f:c2:d3:da:58:01: 51:03:f8:0b:51:e9:1e:f6:1c:49:90:2f:9b:f9:95:84:29:31: d6:01:1a:d7:cf:cc:88:75:91:6e:90:22:b6:ce:74:bc:b1:81: 92:e9:f0:b1:38:1b:38:8d:84:30:e2:ce:2b:0a:ae:33:48:bf: 99:b9:4c:b2:87:d1:b7:ed:a9:c1:82:94:a8:a0:49:1d:61:6e: a0:33:e1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8VuXVOMJ8S8JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRjZTI1YTAtNmJiNS00ODFiLWE0MzQtYTZkNzY1N2VkMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JOBLhqjpjyJFTq4zsdFxQjE0IZ2c9awwt2v R27WObb79w1i5BvINpx/8qdgGB+xdStlKP4Sgr9vCOtr6nqVJL2A2rIrG7FkVVWV /QHVNpj2mOYZlY6xj+SWISeu/qYga1O2sdISvehEsz58xTnIu3OuvLDr2XhXDgoz HLzMoezBBTmc7SA17n/faYVcxoBTPrmdFzfhCVEtLWLLyfhb6D0GNsNnGpHOArWR L7XWyW4qF1ucLGAqk4FmlIidDFB8RXx2Om2XcGqQqH6VCgnZ5q5Z49pCxp4dsQ7O CvBk1WoRRm6dWg5TZgDdCkHwnAePF40vdDhnFNy/sr8D7BYcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwYOdXeEQ7/hn6ctFGl0XSScm44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjk2MDdjMjItOWViNi0z NGRiLWFkNTctYjcwMThkYzQxMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjqmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIbDlhsu31yoiId1Fkn3XUg+1tbSD6PZdwx3b7UH05H8HD6FgZ/t7kG sMXQnOCrB7TV4nibjVDTDPXniGFO91dydWO0EHya/kXffzfVEtu55BhD3UTQLV+G EqhkiIysEOdRahopxbEGHzz8lHGP63zFbmj/UTRORioXbr80gbkweljSlVgnev/z KznLhCIOt2l+8dafhgx1tCf5JIzmzsrRPmcoTRgyS0xu+Ydgmx/C09pYAVED+AtR 6R72HEmQL5v5lYQpMdYBGtfPzIh1kW6QIrbOdLyxgZLp8LE4GziNhDDizisKrjNI v5m5TLKH0bftqcGClKigSR1hbqAz4ec= -----END CERTIFICATE-----Generated at Sat Oct 10 14:01:17 2026 by rpki-client