$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa File: 2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa (raw, json) Hash identifier: NnUbXqAdlgLzkVSuTrlNDKRDV6dLpOid4btXenmcYMg= Subject key identifier: CA:F4:1C:C0:EC:95:24:4B:F3:BC:82:78:CC:54:58:3F:BE:F3:A4:AB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973BDF31A670023AF88E9C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15247 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:bd:f3:1a:67:00:23:af:88:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=11ff39bf-04ba-442b-a90e-113ce6a2b743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:f9:2b:46:a0:7e:c8:cd:36:b9:0d:ea:26: 2d:91:a8:db:12:3c:0a:06:ef:a4:51:2c:2d:33:a1: b8:2b:54:18:96:cd:c8:23:31:c8:cd:da:13:fe:b2: 9d:ca:03:da:70:ba:cf:55:92:1e:c6:29:68:2b:c3: 8d:37:f3:4c:d2:06:dc:76:ca:db:62:13:b0:5e:9f: 1a:6d:99:68:37:48:66:df:f6:92:53:5e:ea:ae:53: 7e:02:0c:a7:ce:b4:c5:02:0c:d2:09:21:7f:6f:9e: d1:42:b3:f9:b2:e3:ae:06:79:94:26:b5:bc:b0:a8: 05:60:fd:9d:37:22:e1:4a:35:25:93:8d:2a:5b:ee: 13:e6:06:c7:60:0d:d8:cf:fa:43:2e:25:38:cc:7b: a6:6f:da:c3:7b:d8:48:9d:8a:a9:86:3c:46:49:d3: 71:13:b8:67:bb:88:b0:1a:a9:69:cf:18:a1:7b:c9: 1b:01:78:24:dc:3c:5a:c4:60:d8:d6:00:94:85:7c: b1:ea:65:4d:de:f6:17:ab:9a:41:70:e5:ac:90:b2: 0c:6f:b2:f7:58:02:c6:9c:50:b8:f0:65:d8:8a:1c: d8:32:3a:6c:9b:79:33:81:27:c9:04:1a:82:04:7c: f8:74:c5:af:dc:02:dc:66:f1:96:75:9e:be:ce:4d: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:1C:C0:EC:95:24:4B:F3:BC:82:78:CC:54:58:3F:BE:F3:A4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5f:03:fa:a3:8c:e2:53:7e:3d:11:c4:6f:67:0a:be:ee:91: b3:f0:13:4a:fd:68:3d:4a:b6:10:bf:3c:80:ab:9d:2a:13:10: 0d:73:0c:cf:6b:cd:ce:06:15:4f:4c:c6:05:1a:5f:c9:51:9c: 91:06:39:06:86:2e:1b:0d:f1:32:68:25:39:e1:a1:22:63:7d: 3f:0b:94:a2:5f:e2:b8:37:97:af:23:52:d9:41:33:49:98:83: f8:15:8f:9f:bd:82:cf:28:37:5e:08:10:56:d9:d0:81:37:91: d2:fb:46:e4:b8:85:b5:02:5a:60:f2:9f:bb:bc:63:28:86:1e: 42:e9:2b:13:aa:ea:36:11:bc:a1:eb:e8:44:bd:ef:8d:21:08: 22:ec:db:9f:62:55:fb:33:05:10:96:56:0f:e7:c4:a2:54:da: c9:5a:77:93:b5:0b:29:30:56:0b:d8:6d:bb:b2:45:4e:a8:e8: 08:6e:0f:9e:a9:1a:6f:68:d1:34:ef:52:96:be:fd:51:30:44: ed:b2:f7:65:11:88:96:4a:9e:8a:fd:30:55:cf:41:e0:f4:05: 54:75:83:4f:24:23:95:85:c1:1a:74:b3:70:8e:9f:06:b4:81: 0e:3b:f5:43:c6:b1:da:47:23:9b:a2:e5:ad:17:69:bb:ff:3a: e4:a2:ca:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc73zGmcAI6+I6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTFmZjM5YmYtMDRiYS00NDJiLWE5MGUtMTEzY2U2YTJiNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kb5K0agfsjNNrkN6iYtkajbEjwKBu+kUSwt M6G4K1QYls3IIzHIzdoT/rKdygPacLrPVZIexiloK8ONN/NM0gbcdsrbYhOwXp8a bZloN0hm3/aSU17qrlN+AgynzrTFAgzSCSF/b57RQrP5suOuBnmUJrW8sKgFYP2d NyLhSjUlk40qW+4T5gbHYA3Yz/pDLiU4zHumb9rDe9hInYqphjxGSdNxE7hnu4iw Gqlpzxihe8kbAXgk3DxaxGDY1gCUhXyx6mVN3vYXq5pBcOWskLIMb7L3WALGnFC4 8GXYihzYMjpsm3kzgSfJBBqCBHz4dMWv3ALcZvGWdZ6+zk3D5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr0HMDslSRL87yCeMxUWD++86SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmJhNTY4ZGItZjFmZi0z ZmE3LWI1ZTktYTI1Y2JlNmQ4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZfA/qjjOJTfj0RxG9nCr7ukbPwE0r9aD1KthC/PICrnSoTEA1zDM9r zc4GFU9MxgUaX8lRnJEGOQaGLhsN8TJoJTnhoSJjfT8LlKJf4rg3l68jUtlBM0mY g/gVj5+9gs8oN14IEFbZ0IE3kdL7RuS4hbUCWmDyn7u8YyiGHkLpKxOq6jYRvKHr 6ES9740hCCLs259iVfszBRCWVg/nxKJU2slad5O1CykwVgvYbbuyRU6o6AhuD56p Gm9o0TTvUpa+/VEwRO2y92URiJZKnor9MFXPQeD0BVR1g08kI5WFwRp0s3COnwa0 gQ479UPGsdpHI5ui5a0Xabv/OuSiynk= -----END CERTIFICATE-----Generated at Sun Oct 4 21:26:44 2026 by rpki-client