$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa File: 43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa (raw, json) Hash identifier: Xsam0VYMITXeALO15r2vOK2orC4FvRxa9egqPNtdCi0= Subject key identifier: 80:0E:CD:01:B4:E0:47:FC:BD:00:B4:AF:0E:0C:D7:F9:F8:13:68:18 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C86B4178D3392E894E40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 154.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c8:6b:41:78:d3:39:2e:89:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f70b1e62-f1df-48e7-8782-0cc99837cc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:64:9a:33:5f:7d:36:f0:9a:fd:bb:fd:ec: dc:6f:59:73:d4:45:98:b7:38:f9:1d:c6:46:39:62: d2:8a:43:71:51:04:44:18:bc:0e:92:c7:5f:2a:67: 48:5f:f5:50:51:67:29:75:ef:26:a3:79:13:10:9c: 93:26:c9:14:23:8a:97:41:cd:d6:11:63:47:06:9c: 20:49:34:7f:59:83:80:e7:2d:0f:d3:e8:41:e4:ee: 2f:4f:b5:38:20:a9:26:54:60:b1:bb:2b:4f:ba:21: 3b:84:80:55:78:ec:4d:98:be:91:03:d9:64:30:38: c0:cc:1d:ce:15:95:ee:4c:65:b9:21:99:5c:41:1d: cb:13:28:45:77:16:37:35:1f:59:23:f9:e5:4e:84: 54:00:8a:5a:44:7f:42:bc:9d:d5:d1:83:26:9b:e0: fe:e0:ad:82:0f:e4:50:a3:c3:25:54:0b:98:25:9a: 4c:1f:75:51:1b:a0:fc:7d:6e:cb:88:0b:a0:2c:16: ef:b8:dc:95:d2:01:67:ba:63:7f:74:9a:55:7e:db: 51:7c:37:61:5b:9f:31:76:9d:16:c9:46:15:72:6b: 26:b9:11:da:72:f7:f0:8d:ec:32:35:a6:a9:33:96: 8f:59:ce:e6:39:4e:bd:e9:5c:47:bf:1f:0c:94:36: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0E:CD:01:B4:E0:47:FC:BD:00:B4:AF:0E:0C:D7:F9:F8:13:68:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 154.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e1:d9:90:b5:c1:57:85:c6:e4:72:15:3a:ce:c6:7e:3d:1e: ea:e3:ea:c9:cd:d1:d6:e9:5b:2d:5e:6b:41:56:fe:d5:28:68: 16:c1:92:95:9f:48:7b:69:79:6b:aa:9f:d8:18:31:9d:bd:69: d1:0d:86:fd:17:8d:76:5a:64:66:84:0b:ad:06:55:d0:43:84: 75:e4:79:d0:92:ba:e0:db:91:90:89:d6:aa:86:dd:61:62:c6: 8a:bf:4a:90:95:d5:a3:2b:c9:19:ec:1e:d0:43:0a:2d:bc:64: 60:89:13:03:4b:52:98:50:5f:d5:e2:93:39:90:73:5d:7e:23: c9:d3:f0:59:57:6c:d6:06:1b:40:aa:ad:f0:34:ac:2e:14:49: 6b:3b:ae:c4:7a:fc:85:2e:52:d6:9c:0e:2c:e2:6f:fa:9e:b6: d0:40:52:fd:5e:93:d4:e2:4c:5f:af:d7:11:8e:a6:07:2b:09: d3:db:1b:9c:d7:ad:1c:4e:dc:62:5c:e8:2c:60:68:ab:9e:40: 69:fb:d3:70:00:eb:d6:ac:b0:c4:c4:7d:d0:79:26:8b:7c:ed: 62:4e:e0:dc:bf:8d:eb:5e:97:29:f5:ad:2c:b1:70:9e:d1:e2: a5:6b:22:b4:8d:71:8e:ae:e9:24:d1:a5:82:5c:a0:2b:e6:62: d7:8e:c6:47 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc8hrQXjTOS6JTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjcwYjFlNjItZjFkZi00OGU3LTg3ODItMGNjOTk4MzdjYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkpkmjNffTbwmv27/ezcb1lz1EWYtzj5HcZG OWLSikNxUQREGLwOksdfKmdIX/VQUWcpde8mo3kTEJyTJskUI4qXQc3WEWNHBpwg STR/WYOA5y0P0+hB5O4vT7U4IKkmVGCxuytPuiE7hIBVeOxNmL6RA9lkMDjAzB3O FZXuTGW5IZlcQR3LEyhFdxY3NR9ZI/nlToRUAIpaRH9CvJ3V0YMmm+D+4K2CD+RQ o8MlVAuYJZpMH3VRG6D8fW7LiAugLBbvuNyV0gFnumN/dJpVfttRfDdhW58xdp0W yUYVcmsmuRHacvfwjewyNaapM5aPWc7mOU696VxHvx8MlDZrvwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIAOzQG04Ef8vQC0rw4M1/n4E2gYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDNlZmNhY2ItNTE0ZS0z MTVhLTlhNmItMDk1OWJmOWU5ZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmhQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAD+HZkLXBV4XG5HIVOs7Gfj0e6uPqyc3R1ulbLV5rQVb+1ShoFsGSlZ9I e2l5a6qf2Bgxnb1p0Q2G/ReNdlpkZoQLrQZV0EOEdeR50JK64NuRkInWqobdYWLG ir9KkJXVoyvJGewe0EMKLbxkYIkTA0tSmFBf1eKTOZBzXX4jydPwWVds1gYbQKqt 8DSsLhRJazuuxHr8hS5S1pwOLOJv+p620EBS/V6T1OJMX6/XEY6mBysJ09sbnNet HE7cYlzoLGBoq55AafvTcADr1qywxMR90Hkmi3ztYk7g3L+N616XKfWtLLFwntHi pWsitI1xjq7pJNGlglygK+Zi147GRw== -----END CERTIFICATE-----Generated at Sun Sep 27 14:50:33 2026 by rpki-client