$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8f48cbdd-6dad-37a5-a804-ad7ee0f94790.roa File: 8f48cbdd-6dad-37a5-a804-ad7ee0f94790.roa (raw, json) Hash identifier: qXxHn/PIB06Ghvh0MwAEpj7g0ucwRhDS4fP16Fcgyk8= Subject key identifier: CE:70:5E:7A:E3:96:14:52:DA:E2:55:27:49:C9:1F:AA:58:E5:6A:67 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FFB6A24C3B97A73AE480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8f48cbdd-6dad-37a5-a804-ad7ee0f94790.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 206.108.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ff:b6:a2:4c:3b:97:a7:3a:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=44b71109-eed3-4eec-ac88-225d650b99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:45:56:53:28:50:2f:b8:dd:1f:e2:72:58: 66:00:f5:fd:e5:df:ae:4f:5b:04:07:bb:45:8a:b9: c1:e5:72:d7:72:49:90:c2:4c:32:b2:1c:07:4b:3c: 8a:ce:8c:7d:28:b2:0c:82:5b:63:c9:70:37:bb:12: eb:d2:75:3c:17:ec:b5:0d:3d:ef:67:c8:22:09:71: f4:f6:21:4f:02:14:fd:bd:0f:71:93:42:90:8f:10: f1:26:83:28:ca:24:84:c2:3d:53:a9:73:2b:0f:ae: b4:5c:e4:ee:02:3f:7d:d9:fc:12:58:02:3c:08:e8: 4d:bc:b1:18:4a:40:5f:4d:38:a4:f3:fe:35:bf:80: 6b:ed:39:f0:52:a6:26:12:87:a3:b4:cf:ef:79:be: bb:3b:50:4c:6d:5d:c5:0d:a4:4b:ee:ff:e9:89:de: 50:2c:d9:ca:34:a4:a0:c7:32:68:dc:c5:f3:f6:39: 61:67:58:8b:13:c1:27:d2:34:78:7e:74:a2:3f:12: bf:7d:9b:f9:cc:36:fb:3a:73:17:d2:b3:2b:4d:d7: 71:ad:89:3b:cb:f8:54:24:7c:42:40:c3:9e:ee:6e: 34:a5:18:f1:4d:af:d0:82:41:f2:0f:02:10:41:e6: df:bb:da:fd:1d:e9:be:eb:44:ee:1f:ed:d9:61:58: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:5E:7A:E3:96:14:52:DA:E2:55:27:49:C9:1F:AA:58:E5:6A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8f48cbdd-6dad-37a5-a804-ad7ee0f94790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.108.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:66:0b:2c:8e:4a:c1:85:09:0d:b4:03:9b:a8:6b:cb:50:59: 2c:1f:09:6b:75:d7:e4:f7:5e:45:35:d8:31:1a:58:93:79:7b: ae:cc:0d:9f:c8:7c:3c:96:71:fb:9f:56:1d:9d:cb:b5:c2:96: 79:4f:31:36:87:b5:d6:32:03:79:10:10:21:27:d2:73:0b:18: 12:23:14:32:bf:4e:bf:f8:a2:ac:37:2e:3c:4b:9a:a7:d0:c2: fb:cb:93:b2:6e:4c:72:89:a3:63:a8:ae:56:14:85:14:a7:e1: db:bb:fd:7a:e4:4c:e4:59:1e:94:a7:ae:d6:cc:ba:1e:88:3d: ad:9e:e5:98:ed:c2:a5:53:15:fc:a3:2f:3f:74:73:df:59:13: 7d:1c:d7:33:0a:c9:bb:04:07:e0:0e:b0:7f:21:2e:c6:8d:11: 9e:3b:8d:93:62:fb:78:04:6f:df:2e:31:08:c3:a8:10:83:e3: d5:b2:bd:32:d6:2f:0c:d6:e4:99:14:09:d6:ef:1c:b4:a3:3f: b0:0e:5f:3d:b7:31:35:36:15:fa:fc:c4:18:21:6b:a1:ae:fe: 00:6e:2b:5e:b6:a4:7e:bc:fa:4c:9f:fc:3a:41:27:83:f6:42: c1:ed:31:70:49:f9:15:3e:9e:ce:7d:ae:c1:8c:75:95:cc:29: 7e:4d:79:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/+2okw7l6c65IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDRiNzExMDktZWVkMy00ZWVjLWFjODgtMjI1ZDY1MGI5OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDxFVlMoUC+43R/iclhmAPX95d+uT1sEB7tF irnB5XLXckmQwkwyshwHSzyKzox9KLIMgltjyXA3uxLr0nU8F+y1DT3vZ8giCXH0 9iFPAhT9vQ9xk0KQjxDxJoMoyiSEwj1TqXMrD660XOTuAj992fwSWAI8COhNvLEY SkBfTTik8/41v4Br7TnwUqYmEoejtM/veb67O1BMbV3FDaRL7v/pid5QLNnKNKSg xzJo3MXz9jlhZ1iLE8En0jR4fnSiPxK/fZv5zDb7OnMX0rMrTddxrYk7y/hUJHxC QMOe7m40pRjxTa/QgkHyDwIQQebfu9r9Hem+60TuH+3ZYVjoGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5wXnrjlhRS2uJVJ0nJH6pY5WpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGY0OGNiZGQtNmRhZC0z N2E1LWE4MDQtYWQ3ZWUwZjk0NzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzmxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRmCyyOSsGFCQ20A5uoa8tQWSwfCWt11+T3XkU12DEaWJN5e67MDZ/I fDyWcfufVh2dy7XClnlPMTaHtdYyA3kQECEn0nMLGBIjFDK/Tr/4oqw3LjxLmqfQ wvvLk7JuTHKJo2OorlYUhRSn4du7/XrkTORZHpSnrtbMuh6IPa2e5ZjtwqVTFfyj Lz90c99ZE30c1zMKybsEB+AOsH8hLsaNEZ47jZNi+3gEb98uMQjDqBCD49WyvTLW LwzW5JkUCdbvHLSjP7AOXz23MTU2Ffr8xBgha6Gu/gBuK162pH68+kyf/DpBJ4P2 QsHtMXBJ+RU+ns59rsGMdZXMKX5NeZw= -----END CERTIFICATE-----Generated at Sun Oct 11 07:07:10 2026 by rpki-client