$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa File: 85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa (raw, json) Hash identifier: IuovDjdUlj0OoUEDqrwBFyWiGOezEaSxP4YTbLvBWFg= Subject key identifier: 94:4B:E6:18:87:0B:2A:52:71:6C:82:8F:E5:30:30:32:6B:3D:A5:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FF38D7D5B948CEEFF4C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 207.102.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ff:38:d7:d5:b9:48:ce:ef:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=951f3f51-c4c4-427f-a732-8adaed11b310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:80:42:3d:3d:a7:51:d5:0b:d7:ac:28:c0: ce:7d:fb:c3:4e:aa:a3:78:48:52:93:a2:6f:96:47: a9:27:4c:65:61:02:f8:14:d3:0e:5f:4b:37:de:bc: 7f:6b:ba:5a:8e:43:30:82:43:12:6b:9c:ac:00:5d: 70:bf:08:3b:8a:5d:c2:c3:b1:72:57:ae:de:b6:08: 3e:e0:5e:ac:18:b9:78:49:c3:fe:2b:91:9e:47:67: 27:dd:c4:62:5a:1e:7c:19:03:55:5d:37:96:62:b1: 03:ce:8b:1f:40:1b:eb:2d:9f:2b:5e:46:22:d0:33: 1b:e0:47:58:ba:92:c8:60:56:cf:1a:d6:ad:be:4a: 7c:5c:16:f2:1e:39:3f:87:f7:2d:cc:be:18:f5:fc: b2:8b:b0:f7:fc:5d:a8:c9:8e:55:1b:51:b7:cc:ce: 61:e9:6a:05:1d:df:65:6c:76:70:ab:37:ad:08:9e: 4c:c8:72:e8:59:23:ef:2e:ec:b3:37:c6:09:18:d1: c6:e3:18:a7:33:fc:c7:99:02:e3:e6:d3:aa:60:3b: cd:d7:31:71:3a:54:50:75:75:02:25:dc:57:dc:b8: a2:ca:1b:b9:51:e9:c9:c3:cb:04:69:a4:85:65:24: ab:80:8a:4d:54:21:2b:12:45:d7:af:0a:59:ea:3d: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:E6:18:87:0B:2A:52:71:6C:82:8F:E5:30:30:32:6B:3D:A5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a6:ec:be:4c:b5:d7:d2:84:c9:83:1e:d5:c4:59:56:2b:a6: a3:9b:17:0a:3d:87:4e:66:48:21:52:a2:12:ab:0d:67:68:96: b3:68:61:03:18:3a:f3:12:07:fa:14:da:a9:b3:6f:ed:2c:a8: 35:a8:67:09:bd:fd:5c:5b:e4:71:75:ea:34:7b:89:68:53:5e: 22:be:d6:cf:88:27:61:0b:c6:75:6e:94:1f:7c:e9:49:2b:8b: c3:0d:4c:da:d7:56:af:38:be:43:7a:73:10:22:52:9f:7b:d6: 4d:f8:00:9d:f4:de:36:6e:82:65:05:e6:f9:da:a6:93:c9:df: 79:d8:91:40:c5:b1:5b:e0:b8:43:0c:40:11:53:e8:78:f6:dc: 85:aa:7a:d6:74:72:fa:12:a2:54:1c:13:60:7e:89:ee:f5:99: fd:0b:95:2b:5a:81:a7:43:b8:c1:00:3a:65:ce:10:03:09:b3: e4:38:6b:a2:c7:f3:c2:0a:69:54:30:94:35:ec:96:76:fc:ab: 87:3a:45:02:4d:ed:1c:83:54:0e:e3:b7:2f:46:44:56:55:65: c6:88:4e:dd:d6:30:15:99:e4:5b:25:10:4d:85:b1:24:b8:b1: 38:2b:98:3b:27:86:54:76:6e:79:f7:ab:95:8c:33:61:db:e9: 4c:6b:0f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/8419W5SM7v9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTUxZjNmNTEtYzRjNC00MjdmLWE3MzItOGFkYWVkMTFiMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JWAQj09p1HVC9esKMDOffvDTqqjeEhSk6Jv lkepJ0xlYQL4FNMOX0s33rx/a7pajkMwgkMSa5ysAF1wvwg7il3Cw7FyV67etgg+ 4F6sGLl4ScP+K5GeR2cn3cRiWh58GQNVXTeWYrEDzosfQBvrLZ8rXkYi0DMb4EdY upLIYFbPGtatvkp8XBbyHjk/h/ctzL4Y9fyyi7D3/F2oyY5VG1G3zM5h6WoFHd9l bHZwqzetCJ5MyHLoWSPvLuyzN8YJGNHG4xinM/zHmQLj5tOqYDvN1zFxOlRQdXUC JdxX3Liiyhu5UenJw8sEaaSFZSSrgIpNVCErEkXXrwpZ6j0yMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRL5hiHCypScWyCj+UwMDJrPaUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODVhYmI4NjAtYzA4My0z YTY1LTlkNDgtMWQ5MWJiZTZhM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz2YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6m7L5MtdfShMmDHtXEWVYrpqObFwo9h05mSCFSohKrDWdolrNoYQMY OvMSB/oU2qmzb+0sqDWoZwm9/Vxb5HF16jR7iWhTXiK+1s+IJ2ELxnVulB986Ukr i8MNTNrXVq84vkN6cxAiUp971k34AJ303jZugmUF5vnappPJ33nYkUDFsVvguEMM QBFT6Hj23IWqetZ0cvoSolQcE2B+ie71mf0LlStagadDuMEAOmXOEAMJs+Q4a6LH 88IKaVQwlDXslnb8q4c6RQJN7RyDVA7jty9GRFZVZcaITt3WMBWZ5FslEE2FsSS4 sTgrmDsnhlR2bnn3q5WMM2Hb6UxrD1s= -----END CERTIFICATE-----Generated at Mon Sep 28 19:50:06 2026 by rpki-client