$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa File: b3df106d-b438-3e20-8914-1fe7a07853fe.roa (raw, json) Hash identifier: tCvtl7rTDEpYSlSyYzqvS3A6kwdA1eg4c2avMVd6z5k= Subject key identifier: 84:5D:D5:AA:D3:11:21:66:AA:FE:55:AC:FE:35:6E:08:94:81:07:25 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C784DD6800420CB11D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 142.59.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c7:84:dd:68:00:42:0c:b1:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e4a0f346-026a-4885-823e-abc7b7cd8650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:4b:6b:23:6e:69:2f:42:c5:28:76:b7:da: fb:41:fd:e8:0f:58:31:65:96:f9:8a:3b:60:95:dc: 2a:af:1d:0d:e7:fb:e5:c3:d1:cc:89:87:2e:d2:2b: 5a:89:b0:dc:5e:8e:e5:08:af:6e:3c:ea:b9:c0:0f: 85:f4:f5:4e:7e:52:76:40:0c:f7:65:cb:3d:49:4b: 63:51:60:08:44:e4:a4:3c:b9:af:f9:39:96:2f:0b: 85:db:c3:2d:bc:5a:0b:88:fa:de:34:fc:e7:c0:67: d7:b9:80:01:f0:e3:89:50:1e:c6:98:c7:7a:fb:86: ce:1c:19:78:2f:9e:c3:81:4c:e6:f9:86:3b:c7:e0: ae:4b:b3:b2:4b:37:9e:76:49:f2:2d:3b:ed:4c:2e: b8:a5:e9:16:b1:1f:66:f1:5e:b0:1d:51:c0:44:cc: 03:be:91:d8:73:5b:e7:0e:00:d9:6b:a8:97:73:a2: 36:da:6a:43:2e:ea:5f:07:d5:90:91:a1:53:27:7f: d6:29:75:e2:24:3d:be:14:4b:eb:4e:45:54:9b:2a: 78:e9:16:55:34:9e:9e:e2:b4:1f:b8:8b:eb:68:2b: cb:c8:ab:35:d8:4c:31:c0:f0:59:d8:e6:3e:82:58: 75:ce:7e:f8:ec:36:9e:26:56:43:9a:40:67:bd:24: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:D5:AA:D3:11:21:66:AA:FE:55:AC:FE:35:6E:08:94:81:07:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4c:73:72:81:ba:1a:67:48:c2:6b:e2:b2:90:29:a2:22:34: 11:bd:8c:78:48:de:62:1d:1b:5f:36:0d:79:fa:0b:83:2d:fd: f7:b3:f8:2b:cd:85:f9:a1:da:a6:31:6b:9b:16:c6:9d:de:61: 66:c7:04:2e:c5:dc:e9:89:e9:5e:cd:ad:eb:da:0c:cc:8f:d1: 98:25:bd:ac:2c:0d:59:9f:c8:2f:67:3a:f1:38:2a:ab:c7:95: a0:39:69:a4:d5:57:f4:e8:10:9a:d3:7f:6a:1a:35:45:0f:a0: 13:ed:a8:85:de:8d:fb:69:92:6b:aa:dc:8b:df:c0:52:e9:c8: 9a:03:dc:20:81:02:dd:ef:1e:6c:da:86:3e:41:24:88:ba:d5: f4:bf:0d:f0:7f:d3:68:0a:b2:17:38:72:0c:3c:d3:e5:a8:ab: a7:3c:dd:f3:e4:93:40:dd:4f:0d:ca:04:57:1c:ae:0d:64:dc: fc:b5:8e:21:b5:3b:aa:30:de:cd:79:94:39:06:f8:94:a7:73: 69:c1:87:86:14:3b:0c:36:70:4c:1f:f0:b4:af:d8:1f:43:60: d9:10:74:64:9b:fe:a3:42:2a:14:02:45:dc:dd:84:bd:79:5b: 41:6a:08:41:e9:73:48:99:85:d4:d7:c5:2a:97:13:8c:64:d6: b1:cd:7f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8eE3WgAQgyxHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTRhMGYzNDYtMDI2YS00ODg1LTgyM2UtYWJjN2I3Y2Q4NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy71LayNuaS9CxSh2t9r7Qf3oD1gxZZb5ijtg ldwqrx0N5/vlw9HMiYcu0itaibDcXo7lCK9uPOq5wA+F9PVOflJ2QAz3Zcs9SUtj UWAIROSkPLmv+TmWLwuF28MtvFoLiPreNPznwGfXuYAB8OOJUB7GmMd6+4bOHBl4 L57DgUzm+YY7x+CuS7OySzeedknyLTvtTC64pekWsR9m8V6wHVHARMwDvpHYc1vn DgDZa6iXc6I22mpDLupfB9WQkaFTJ3/WKXXiJD2+FEvrTkVUmyp46RZVNJ6e4rQf uIvraCvLyKs12EwxwPBZ2OY+glh1zn747DaeJlZDmkBnvSRRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRd1arTESFmqv5VrP41bgiUgQclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjNkZjEwNmQtYjQzOC0z ZTIwLTg5MTQtMWZlN2EwNzg1M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItMc3KBuhpnSMJr4rKQKaIiNBG9jHhI3mIdG182DXn6C4Mt/fez+CvN hfmh2qYxa5sWxp3eYWbHBC7F3OmJ6V7NrevaDMyP0ZglvawsDVmfyC9nOvE4KqvH laA5aaTVV/ToEJrTf2oaNUUPoBPtqIXejftpkmuq3IvfwFLpyJoD3CCBAt3vHmza hj5BJIi61fS/DfB/02gKshc4cgw80+Woq6c83fPkk0DdTw3KBFccrg1k3Py1jiG1 O6ow3s15lDkG+JSnc2nBh4YUOww2cEwf8LSv2B9DYNkQdGSb/qNCKhQCRdzdhL15 W0FqCEHpc0iZhdTXxSqXE4xk1rHNfws= -----END CERTIFICATE-----Generated at Sat Oct 3 15:05:17 2026 by rpki-client