$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3567a8a3-240b-3902-8070-65c9b05766f8.roa File: 3567a8a3-240b-3902-8070-65c9b05766f8.roa (raw, json) Hash identifier: qoAYke1IALwcEaVTx3jK4XhPZ/IDdPtRSBnVpZo0hkg= Subject key identifier: 4D:61:6A:22:F1:1F:78:C6:4A:9F:B0:D1:91:63:70:B3:CB:CD:18:FE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973F733E371DA7061225F20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3567a8a3-240b-3902-8070-65c9b05766f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15247 IP address blocks: 208.181.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f7:33:e3:71:da:70:61:22:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=50425fdf-ee0b-4ea6-b8b4-2536b2458dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:88:10:d7:b5:0a:84:b3:03:ac:b1:bb:ef: e4:db:bc:99:2b:33:e9:89:3b:1d:35:da:eb:11:b5: 28:cf:75:33:c7:d2:8b:2f:bd:05:c0:45:bd:c6:da: e4:e9:39:55:ce:ff:ea:dd:c6:81:3d:7b:9d:53:b8: 9f:6b:a1:66:24:11:2a:59:33:d1:74:0c:b8:dc:5d: 70:9b:9b:13:93:01:ad:13:e9:e8:48:96:d4:a2:7b: 7f:83:59:0f:90:cc:17:d7:0a:4a:d2:ea:90:76:68: d7:00:c2:ce:54:6e:2c:78:64:90:da:fa:cc:9c:09: eb:e3:b5:75:47:9a:d0:34:67:50:a6:ec:05:3c:da: de:9b:11:2b:61:cb:9a:58:03:ff:78:ba:b9:b7:d5: 95:c0:6a:96:f3:43:e1:51:f9:88:39:f2:fa:d7:2e: 3e:e9:14:25:5d:e8:6e:f5:ef:62:63:66:30:6d:a3: 55:b6:b5:e6:95:f2:b7:3c:83:d1:f3:3b:79:aa:97: b3:c7:79:b0:ca:0c:9a:60:6b:9c:92:fa:14:8f:5c: 2a:ec:a1:14:bc:5d:bf:ce:94:f0:35:c8:8c:59:49: 51:5d:b1:90:cc:bf:e3:52:c2:f9:bf:0f:e2:e1:58: 9a:c8:1a:bc:06:c1:4d:be:3c:3e:ca:38:59:86:a0: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:61:6A:22:F1:1F:78:C6:4A:9F:B0:D1:91:63:70:B3:CB:CD:18:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3567a8a3-240b-3902-8070-65c9b05766f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:28:05:dd:c2:18:e2:3b:17:89:11:9d:27:80:6d:95:d0:42: d8:98:1a:ce:de:6e:2a:b8:8e:5c:f8:19:fe:08:0f:35:34:d8: ff:d1:8d:b7:31:01:65:66:c7:b1:11:ef:91:27:1a:13:fb:49: 58:5e:d4:bd:b2:91:bc:0c:08:e7:21:42:3f:9d:7f:63:44:48: eb:39:0c:b5:8d:d2:86:b8:93:e6:d2:9b:93:f5:47:af:89:63: a7:00:0e:c3:78:17:45:43:13:16:32:08:fd:b4:2e:05:6a:c3: 57:46:66:d0:26:b1:03:d3:4b:86:ca:d9:17:a5:8c:a3:fd:bd: 00:94:b6:b1:7b:c2:30:1a:ed:45:14:35:41:88:a8:0c:89:ed: 42:6b:f7:e3:54:89:ab:fc:a6:db:de:2b:76:35:86:c6:21:75: 00:cf:44:3c:51:1e:4a:31:0f:5a:b5:43:d9:56:7c:ff:72:31: 96:6b:fa:9c:46:cc:cf:c5:fa:f0:89:23:f8:06:b6:4e:c9:5c: 6a:48:4e:fe:17:93:f4:42:79:79:f7:8f:52:43:f2:44:7c:b7: 94:49:5d:2a:0c:31:44:ac:91:ee:d4:59:a9:ba:70:94:7e:6b: 02:87:36:8f:c3:c6:d8:0c:0c:25:9f:ef:f1:77:f7:38:b4:72: c0:4a:ed:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/cz43HacGEiXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTA0MjVmZGYtZWUwYi00ZWE2LWI4YjQtMjUzNmIyNDU4ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROIENe1CoSzA6yxu+/k27yZKzPpiTsdNdrr EbUoz3Uzx9KLL70FwEW9xtrk6TlVzv/q3caBPXudU7ifa6FmJBEqWTPRdAy43F1w m5sTkwGtE+noSJbUont/g1kPkMwX1wpK0uqQdmjXAMLOVG4seGSQ2vrMnAnr47V1 R5rQNGdQpuwFPNremxErYcuaWAP/eLq5t9WVwGqW80PhUfmIOfL61y4+6RQlXehu 9e9iY2YwbaNVtrXmlfK3PIPR8zt5qpezx3mwygyaYGuckvoUj1wq7KEUvF2/zpTw NciMWUlRXbGQzL/jUsL5vw/i4ViayBq8BsFNvjw+yjhZhqD46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1haiLxH3jGSp+w0ZFjcLPLzRj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzU2N2E4YTMtMjQwYi0z OTAyLTgwNzAtNjVjOWIwNTc2NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUoBd3CGOI7F4kRnSeAbZXQQtiYGs7ebiq4jlz4Gf4IDzU02P/Rjbcx AWVmx7ER75EnGhP7SVhe1L2ykbwMCOchQj+df2NESOs5DLWN0oa4k+bSm5P1R6+J Y6cADsN4F0VDExYyCP20LgVqw1dGZtAmsQPTS4bK2ReljKP9vQCUtrF7wjAa7UUU NUGIqAyJ7UJr9+NUiav8ptveK3Y1hsYhdQDPRDxRHkoxD1q1Q9lWfP9yMZZr+pxG zM/F+vCJI/gGtk7JXGpITv4Xk/RCeXn3j1JD8kR8t5RJXSoMMUSske7UWam6cJR+ awKHNo/DxtgMDCWf7/F39zi0csBK7bc= -----END CERTIFICATE-----Generated at Thu Oct 8 08:30:40 2026 by rpki-client