$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa File: 645d7b37-8474-3720-a5a3-bd3189eb639a.roa (raw, json) Hash identifier: /dIytlDoN0WZNe9hYo/KRub4zUiKxuBODaq7KeZoA4M= Subject key identifier: 0F:4C:A9:89:97:8F:D5:C9:4E:34:5A:A8:98:D4:5C:84:E1:08:C8:AF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F5E62AE94B414CC400D157580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 20115 IP address blocks: 142.173.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ae:94:b4:14:cc:40:0d:15:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3d171cc7-ec3c-4c80-8654-b230a277e900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:63:ed:ed:ae:6c:51:4c:0d:72:02:8b:ba: 69:61:6a:f3:f8:3d:92:7a:20:8c:b1:68:f6:92:85: 88:74:7e:91:8c:8d:82:f4:d6:2d:84:c7:60:0b:c5: c3:4b:e9:87:ae:02:e2:64:29:11:a5:86:07:89:7a: b0:db:67:48:db:db:26:39:70:48:55:69:f5:e7:7e: 0a:d3:05:06:66:72:77:fb:be:68:63:01:5f:fc:aa: 33:62:6d:42:fc:21:17:d5:db:27:d9:5b:62:1b:1d: 12:4e:f7:40:75:ed:bb:95:2a:e8:a9:9f:0e:ab:d7: 37:01:e9:3f:29:26:bc:c4:de:70:36:e7:80:0f:c3: 55:1f:ff:3e:27:50:b8:37:6a:94:4c:8e:a8:b0:8c: f4:bc:ee:79:3f:7d:50:d8:02:9a:59:43:70:b4:7b: 3e:eb:fa:fc:ad:96:cb:9c:44:8e:0a:f0:17:30:df: 0e:03:4e:d9:c1:87:5e:ef:b8:ff:19:bf:fc:ac:29: 11:3f:74:bb:64:40:b5:6b:eb:36:6a:2a:2a:f7:3e: b1:ca:26:33:3e:97:9c:05:17:0b:cb:24:d3:2f:05: ec:3e:62:72:69:d9:87:14:44:cd:ce:c7:91:73:ef: 28:be:7e:05:6c:eb:ac:80:64:73:07:8d:b6:d1:4f: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:A9:89:97:8F:D5:C9:4E:34:5A:A8:98:D4:5C:84:E1:08:C8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:39:5b:6c:f8:34:b8:b6:c8:4e:f9:2f:3e:9b:94:ca:01:37: 5a:3c:16:54:b6:30:09:eb:6b:3d:b7:2a:d3:80:81:06:22:3f: 97:48:2e:7e:44:13:04:dc:82:bd:0f:f7:b2:2e:89:a7:f9:7c: c0:64:1d:c5:0d:43:31:50:bc:81:06:b6:91:0a:2e:7f:df:22: 45:a4:36:a8:2f:a8:b7:0f:79:48:a6:7e:c5:99:b2:cf:05:ea: c9:b2:69:13:5a:aa:82:84:a3:c1:7d:c6:e3:e4:96:07:a0:af: f2:65:f8:03:ca:55:6f:37:15:ca:5f:1d:4b:81:54:c7:e8:12: 02:b8:a0:97:b4:50:5e:ec:8e:df:b5:36:eb:e8:c6:2f:45:93: 40:1b:18:4c:4a:97:ed:e7:07:3e:3e:c2:1b:c2:b7:bd:98:ce: ce:ce:49:30:f6:b8:1e:d8:25:36:04:26:b9:7b:69:94:81:09: f1:21:f4:66:32:f7:29:3b:a5:54:40:66:98:c2:3b:ca:be:54: f1:5c:bc:56:a4:4b:c8:46:c3:dd:d5:38:1a:61:95:d9:61:9a: f2:e2:d2:32:fc:1d:7f:39:95:35:84:c0:bd:17:ae:2f:b9:4b: 9e:ba:56:ce:1d:d3:7a:1b:29:e1:ad:c7:5b:2d:b9:fb:44:63: ed:76:fa:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYq6UtBTMQA0VdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2QxNzFjYzctZWMzYy00YzgwLTg2NTQtYjIzMGEyNzdlOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnZj7e2ubFFMDXICi7ppYWrz+D2SeiCMsWj2 koWIdH6RjI2C9NYthMdgC8XDS+mHrgLiZCkRpYYHiXqw22dI29smOXBIVWn1534K 0wUGZnJ3+75oYwFf/KozYm1C/CEX1dsn2VtiGx0STvdAde27lSroqZ8Oq9c3Aek/ KSa8xN5wNueAD8NVH/8+J1C4N2qUTI6osIz0vO55P31Q2AKaWUNwtHs+6/r8rZbL nESOCvAXMN8OA07ZwYde77j/Gb/8rCkRP3S7ZEC1a+s2aioq9z6xyiYzPpecBRcL yyTTLwXsPmJyadmHFETNzseRc+8ovn4FbOusgGRzB4220U9KtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9MqYmXj9XJTjRaqJjUXIThCMivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjQ1ZDdiMzctODQ3NC0z NzIwLWE1YTMtYmQzMTg5ZWI2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg5W2z4NLi2yE75Lz6blMoBN1o8FlS2MAnraz23KtOAgQYiP5dILn5E EwTcgr0P97Iuiaf5fMBkHcUNQzFQvIEGtpEKLn/fIkWkNqgvqLcPeUimfsWZss8F 6smyaRNaqoKEo8F9xuPklgegr/Jl+APKVW83FcpfHUuBVMfoEgK4oJe0UF7sjt+1 Nuvoxi9Fk0AbGExKl+3nBz4+whvCt72Yzs7OSTD2uB7YJTYEJrl7aZSBCfEh9GYy 9yk7pVRAZpjCO8q+VPFcvFakS8hGw93VOBphldlhmvLi0jL8HX85lTWEwL0Xri+5 S566Vs4d03obKeGtx1stuftEY+12+i4= -----END CERTIFICATE-----Generated at Sun Oct 11 15:00:40 2026 by rpki-client