$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa File: 646207f2-cf4f-3abb-93af-47f00919b1b8.roa (raw, json) Hash identifier: jXKLY4SjC2QUfS1sNOHEV8EKucWoybgYWvIQvMfQOTc= Subject key identifier: 11:47:BD:BA:19:E9:DF:5A:95:BB:A6:80:33:07:7D:88:B8:22:99:5B Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F146791070463CD3AE3EE7800 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 12213 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:91:07:04:63:cd:3a:e3:ee:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=d30778cb-1d84-4a9a-8aa4-587f3ec5a453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:bb:28:09:46:ae:9b:55:bf:f5:76:0c:dd: e1:b7:eb:23:e8:4e:a2:9f:76:97:7c:1a:57:8e:02: a8:43:26:8a:52:46:fe:42:5e:bd:f0:bc:ae:d2:85: c1:1c:30:05:5c:8c:47:ee:68:90:63:90:f8:f9:d6: 69:de:f1:cb:ff:bf:cf:5c:70:90:f0:43:fb:43:89: 5d:ac:68:a6:37:ec:ea:aa:b1:ce:4a:ee:d1:3f:b8: 58:ee:87:47:6e:d0:5f:b9:32:5e:e1:78:67:f6:9b: 1f:e3:fd:f1:9d:16:e7:42:d3:c7:2a:a6:e0:4c:b6: 44:86:07:38:ac:d1:e4:dd:63:38:40:26:7b:d5:2c: 84:61:5c:d9:f4:92:b5:53:a9:49:3a:b9:c0:22:ab: aa:66:06:c2:50:b5:68:54:1b:e4:67:08:86:ff:01: 06:3a:b1:c6:75:be:1a:78:c8:38:60:29:fa:cb:02: ca:c3:be:f0:ae:cf:c3:62:d9:c9:50:cb:2e:de:38: 22:86:d7:5e:16:90:0f:45:c6:d0:f7:20:17:41:e5: d4:f5:9f:70:eb:9d:5c:f1:29:a2:17:1b:66:fd:70: fa:bf:db:bc:53:c8:c1:25:4e:b1:f8:3c:de:d0:c2: c9:f1:d9:d9:36:d8:39:90:b0:12:1e:47:7c:d4:60: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:BD:BA:19:E9:DF:5A:95:BB:A6:80:33:07:7D:88:B8:22:99:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4c:9c:66:fd:5d:cf:69:b1:2d:f3:cb:2b:59:96:aa:f5:4c: c7:f4:48:b5:83:03:c9:c1:9e:89:25:67:4d:ce:f9:7e:6c:ea: ac:3f:0f:c1:d5:9e:6d:4e:85:6c:83:83:b2:b2:47:64:dd:a1: 32:67:bd:28:fc:0a:e2:f3:8a:45:19:aa:0b:e4:93:ab:06:7f: 9c:ef:27:6f:10:00:78:3e:af:8b:e0:35:2b:ea:f8:a2:a6:48: 4e:c9:18:6b:fa:fd:b0:61:a2:0f:b0:e9:68:2f:d6:39:38:af: f7:dc:1b:21:92:9e:db:b4:a0:f3:7d:01:66:a6:24:50:73:4f: 90:b3:c6:24:c2:97:bf:01:b6:3a:21:40:7a:df:d7:1f:44:f5: 1b:54:40:70:1f:06:0d:6b:e5:e6:d9:77:a7:63:f0:46:79:0d: ae:c2:e8:9e:2e:9b:d3:bc:7e:36:73:eb:cf:93:3f:e7:46:6c: 83:04:50:46:75:f6:a7:a1:73:ca:48:09:5f:ef:31:0f:c5:f8: 51:14:6e:39:5d:60:94:c5:4c:6e:6d:19:b7:4c:2e:e3:1a:17: 3f:a6:a7:63:48:cb:d4:bc:a6:cf:c7:8d:39:d3:d9:65:9b:55: 48:e2:85:af:0c:04:aa:07:f0:9a:7d:c2:c1:87:01:25:1d:1e: 71:fc:8f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5EHBGPNOuPueAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZDMwNzc4Y2ItMWQ4NC00YTlhLThhYTQtNTg3ZjNlYzVhNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh+7KAlGrptVv/V2DN3ht+sj6E6in3aXfBpX jgKoQyaKUkb+Ql698Lyu0oXBHDAFXIxH7miQY5D4+dZp3vHL/7/PXHCQ8EP7Q4ld rGimN+zqqrHOSu7RP7hY7odHbtBfuTJe4Xhn9psf4/3xnRbnQtPHKqbgTLZEhgc4 rNHk3WM4QCZ71SyEYVzZ9JK1U6lJOrnAIquqZgbCULVoVBvkZwiG/wEGOrHGdb4a eMg4YCn6ywLKw77wrs/DYtnJUMsu3jgihtdeFpAPRcbQ9yAXQeXU9Z9w651c8Smi Fxtm/XD6v9u8U8jBJU6x+Dze0MLJ8dnZNtg5kLASHkd81GC3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFHvboZ6d9albumgDMHfYi4IplbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNjQ2MjA3ZjItY2Y0Zi0z YWJiLTkzYWYtNDdmMDA5MTliMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVMnGb9Xc9psS3zyytZlqr1TMf0SLWDA8nBnoklZ03O+X5s6qw/D8HV nm1OhWyDg7KyR2TdoTJnvSj8CuLzikUZqgvkk6sGf5zvJ28QAHg+r4vgNSvq+KKm SE7JGGv6/bBhog+w6Wgv1jk4r/fcGyGSntu0oPN9AWamJFBzT5CzxiTCl78Btjoh QHrf1x9E9RtUQHAfBg1r5ebZd6dj8EZ5Da7C6J4um9O8fjZz68+TP+dGbIMEUEZ1 9qehc8pICV/vMQ/F+FEUbjldYJTFTG5tGbdMLuMaFz+mp2NIy9S8ps/HjTnT2WWb VUjiha8MBKoH8Jp9wsGHASUdHnH8j1A= -----END CERTIFICATE-----Generated at Fri Sep 25 10:40:43 2026 by rpki-client