$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa File: 49981ea0-1655-3c52-98ab-4de0a45d03b2.roa (raw, json) Hash identifier: mQOdTsGcUlG9tvVPNHfWcoAVoa77LfKl2jPtYBwyLvo= Subject key identifier: 25:83:B9:59:0D:F9:96:BA:A5:1A:B0:54:DF:71:EF:5A:11:D8:72:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973F5E006C9B5F8C7176F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21723 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f5:e0:06:c9:b5:f8:c7:17:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b0f120e-a5a0-4698-9393-793f9371b748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:ce:4b:5b:51:17:9e:f9:53:59:e8:15:a7: 01:9e:7c:48:10:3b:f9:31:aa:cc:c6:aa:60:9e:d5: 34:d9:97:3b:49:f8:f6:59:45:a6:f3:d6:fa:db:42: a4:83:38:0e:84:68:fa:7d:a6:a1:93:56:23:cc:9b: 36:90:5d:dd:24:37:07:81:dd:70:f5:87:91:e7:30: c2:65:fe:95:38:fa:84:41:59:07:af:f9:4e:c4:13: 32:2d:42:6a:b2:7c:4f:da:99:e2:51:34:64:a7:aa: df:63:42:2f:cc:18:f9:54:cf:3d:f3:47:18:fb:f8: 35:0c:f8:90:13:c2:23:50:9e:f2:ed:a8:d4:9d:82: a0:82:ff:ee:cb:a9:a9:75:4c:5d:b0:3c:f5:5f:61: a0:6a:30:f1:8b:3d:29:54:bd:bc:2c:5c:76:9c:4b: e6:97:11:63:bf:08:4a:19:f0:57:9c:b1:02:a2:3f: 6b:a9:15:d4:bb:fb:c6:cc:48:4c:76:fb:d5:c8:ae: 7b:aa:fc:51:53:28:1b:3f:6e:eb:ad:54:87:0e:a4: 7a:84:9f:9e:01:b2:05:85:88:7a:39:7d:76:2d:07: 53:23:c2:31:18:9c:56:90:31:c8:e1:32:99:54:28: 32:33:e7:cf:0d:6b:87:78:6c:91:2a:b5:ec:e1:3d: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:B9:59:0D:F9:96:BA:A5:1A:B0:54:DF:71:EF:5A:11:D8:72:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:dd:b7:b8:99:4e:97:46:5a:65:51:d2:0e:38:d2:0a:eb:33: bd:e4:67:3b:7e:38:12:57:18:cc:39:55:dd:ee:f8:c0:d3:f9: e2:9e:9f:22:06:75:f6:b4:c2:87:33:f4:c8:0f:a4:d8:66:c7: 6b:dd:d1:20:ba:ab:c9:c6:5f:47:5d:c9:60:32:78:e2:64:3b: f1:0e:06:60:7a:a7:d7:7b:75:ba:dc:93:49:7e:f1:a6:c8:62: d0:47:5d:e1:fb:03:44:f0:52:b4:92:81:68:45:fe:d6:85:57: c9:c0:96:60:8d:cb:2d:3d:f2:e8:9a:24:dd:f9:ea:c7:2c:b2: 54:6d:ae:7f:8b:03:aa:87:5f:df:0b:c4:e8:50:90:3c:43:09: 99:98:04:be:7c:f4:36:af:e6:b0:d0:8b:4b:6f:b9:64:af:42: 5b:08:ff:2b:b0:1b:69:11:cf:c2:70:a9:0a:94:69:4a:e6:f4: 1d:72:ad:ef:22:aa:c2:a0:05:b2:8b:5b:df:cd:99:65:85:dd: 0a:67:af:58:2c:06:cc:ca:de:17:bc:4b:ba:7a:f7:4e:a8:7b: 7c:6b:78:6b:b7:a9:be:69:03:26:fb:b5:8d:11:fe:ff:6d:d7: 9e:33:8e:00:ca:c6:8b:58:99:39:cf:0e:58:f7:2b:59:75:96: 28:3e:e7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/XgBsm1+McXbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWIwZjEyMGUtYTVhMC00Njk4LTkzOTMtNzkzZjkzNzFiNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGHOS1tRF575U1noFacBnnxIEDv5MarMxqpg ntU02Zc7Sfj2WUWm89b620KkgzgOhGj6faahk1YjzJs2kF3dJDcHgd1w9YeR5zDC Zf6VOPqEQVkHr/lOxBMyLUJqsnxP2pniUTRkp6rfY0IvzBj5VM8980cY+/g1DPiQ E8IjUJ7y7ajUnYKggv/uy6mpdUxdsDz1X2GgajDxiz0pVL28LFx2nEvmlxFjvwhK GfBXnLECoj9rqRXUu/vGzEhMdvvVyK57qvxRUygbP27rrVSHDqR6hJ+eAbIFhYh6 OX12LQdTI8IxGJxWkDHI4TKZVCgyM+fPDWuHeGyRKrXs4T3wTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWDuVkN+Za6pRqwVN9x71oR2HKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDk5ODFlYTAtMTY1NS0z YzUyLTk4YWItNGRlMGE0NWQwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/dt7iZTpdGWmVR0g440grrM73kZzt+OBJXGMw5Vd3u+MDT+eKenyIG dfa0wocz9MgPpNhmx2vd0SC6q8nGX0ddyWAyeOJkO/EOBmB6p9d7dbrck0l+8abI YtBHXeH7A0TwUrSSgWhF/taFV8nAlmCNyy098uiaJN356scsslRtrn+LA6qHX98L xOhQkDxDCZmYBL589Dav5rDQi0tvuWSvQlsI/yuwG2kRz8JwqQqUaUrm9B1yre8i qsKgBbKLW9/NmWWF3Qpnr1gsBszK3he8S7p6906oe3xreGu3qb5pAyb7tY0R/v9t 154zjgDKxotYmTnPDlj3K1l1lig+55Q= -----END CERTIFICATE-----Generated at Fri Oct 9 23:10:06 2026 by rpki-client