$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e8da1b7-9953-317e-a2a9-13a02e0db62f.roa File: 9e8da1b7-9953-317e-a2a9-13a02e0db62f.roa (raw, json) Hash identifier: UZgd/lSRzVMcEcqzKIirxs53xwyC5NSsEah+VepYdSE= Subject key identifier: 9A:9F:26:72:04:EE:75:F4:B1:3E:95:9C:D8:4A:A9:97:58:30:E5:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C9CDC84800E63AB86740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e8da1b7-9953-317e-a2a9-13a02e0db62f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 207.134.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c9:cd:c8:48:00:e6:3a:b8:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f971c8a1-a2b8-49dd-b07d-824637f592ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:4c:c9:28:5b:be:92:3c:ab:cd:6c:36:b6: ba:8f:78:4d:99:2c:f9:b9:06:20:0a:ff:e0:ae:55: 2b:83:d8:5e:2a:fc:8a:d6:80:de:3b:a3:a1:db:5d: 26:e1:8d:5f:5f:a1:92:05:2d:d8:6e:6d:33:0b:ca: 1f:df:16:af:15:78:3e:a7:39:6b:29:1e:03:67:ce: aa:0d:34:76:1c:b1:fd:2a:08:2c:b7:9c:f5:cd:e0: 27:87:28:be:8e:c7:09:49:f9:21:33:82:11:4d:3a: 42:a5:b8:6e:e7:01:ef:da:c7:82:d2:1b:e2:84:c4: 94:eb:1e:1f:1b:f7:5e:49:6c:06:69:4f:74:67:34: 4b:a9:2c:9a:57:f3:75:b2:f9:6e:62:b4:05:fe:02: 01:5a:37:5a:13:03:a1:3b:93:92:3d:95:ed:1a:49: 19:f7:65:30:f0:cb:27:51:87:45:f1:0f:52:4c:b5: e0:f3:d1:c4:03:1f:46:b4:9e:98:22:7e:01:33:85: c3:24:2c:4f:f4:f2:cb:49:bd:82:42:48:12:cb:c2: 53:f3:24:94:66:e4:13:b6:5c:e2:0a:d5:9a:33:61: 5b:72:63:17:fb:53:66:59:1f:64:82:9c:54:b2:23: 0b:a2:f5:fd:08:ef:c5:cc:94:6b:1e:d2:04:6e:50: 2a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:26:72:04:EE:75:F4:B1:3E:95:9C:D8:4A:A9:97:58:30:E5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e8da1b7-9953-317e-a2a9-13a02e0db62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.134.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:4e:70:e8:74:0f:fb:76:03:b3:b8:50:9e:67:c8:d2:6b:ae: 44:19:2a:bf:9f:3d:c4:af:6f:d6:0e:1e:ee:52:b3:4d:b3:5d: 56:bd:58:c1:b7:52:1a:0a:3f:62:6c:a0:c6:39:0a:98:36:be: a3:c7:9f:4c:fb:63:28:81:e7:11:59:07:55:04:8b:cf:3e:2a: 1e:ce:b4:65:13:02:76:b7:50:bf:40:e7:e9:c1:30:2c:7a:90: 24:f2:e4:3e:07:cd:b9:0a:61:ec:49:bc:80:a7:9e:2c:99:a0: 7d:0f:91:fc:12:8f:25:ff:a0:a2:22:e3:70:d0:69:5f:63:95: ca:aa:64:f4:e2:ac:22:c3:ef:fd:b4:57:5e:aa:a4:70:fa:27: c7:b3:0a:21:af:46:18:22:d0:57:b2:38:45:c3:2d:8d:73:d1: 22:1c:65:7d:9f:26:8f:0d:3e:32:77:9c:f2:2e:69:7f:db:fa: 62:3f:e9:c2:3a:3c:72:9e:ad:03:5e:03:f8:0c:9d:6d:9e:9b: 72:30:fe:e8:7b:40:7f:66:3f:bf:75:1c:44:ef:13:b0:44:11: ed:f9:4c:0b:87:23:f3:4c:56:70:6f:9d:45:02:96:3c:68:a8: 49:a5:3e:a9:fd:40:e4:10:2e:bf:be:21:46:27:cd:c9:34:70: 4f:f5:4a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8nNyEgA5jq4Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjk3MWM4YTEtYTJiOC00OWRkLWIwN2QtODI0NjM3ZjU5MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf1MyShbvpI8q81sNra6j3hNmSz5uQYgCv/g rlUrg9heKvyK1oDeO6Oh210m4Y1fX6GSBS3Ybm0zC8of3xavFXg+pzlrKR4DZ86q DTR2HLH9Kggst5z1zeAnhyi+jscJSfkhM4IRTTpCpbhu5wHv2seC0hvihMSU6x4f G/deSWwGaU90ZzRLqSyaV/N1svluYrQF/gIBWjdaEwOhO5OSPZXtGkkZ92Uw8Msn UYdF8Q9STLXg89HEAx9GtJ6YIn4BM4XDJCxP9PLLSb2CQkgSy8JT8ySUZuQTtlzi CtWaM2FbcmMX+1NmWR9kgpxUsiMLovX9CO/FzJRrHtIEblAq7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqfJnIE7nX0sT6VnNhKqZdYMOWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWU4ZGExYjctOTk1My0z MTdlLWEyYTktMTNhMDJlMGRiNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4amMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlOcOh0D/t2A7O4UJ5nyNJrrkQZKr+fPcSvb9YOHu5Ss02zXVa9WMG3 UhoKP2JsoMY5Cpg2vqPHn0z7YyiB5xFZB1UEi88+Kh7OtGUTAna3UL9A5+nBMCx6 kCTy5D4HzbkKYexJvICnniyZoH0PkfwSjyX/oKIi43DQaV9jlcqqZPTirCLD7/20 V16qpHD6J8ezCiGvRhgi0FeyOEXDLY1z0SIcZX2fJo8NPjJ3nPIuaX/b+mI/6cI6 PHKerQNeA/gMnW2em3Iw/uh7QH9mP791HETvE7BEEe35TAuHI/NMVnBvnUUCljxo qEmlPqn9QOQQLr++IUYnzck0cE/1Sgs= -----END CERTIFICATE-----Generated at Mon Sep 28 18:14:26 2026 by rpki-client