$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/20f5bda5-307c-34b7-8f71-e8e15c02e686.roa File: 20f5bda5-307c-34b7-8f71-e8e15c02e686.roa (raw, json) Hash identifier: YIUiyEwhEemT+uwOdnxnYpAfxZfCtivrtksinnK3dkk= Subject key identifier: 3C:02:60:DC:DE:A2:7F:B7:0F:68:46:CD:48:13:FB:66:B9:74:0A:27 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584F214BC6F83CFF801473841F00 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/20f5bda5-307c-34b7-8f71-e8e15c02e686.roa Signing time: Thu 10 Sep 2026 15:49:48 +0000 ROA not before: Thu 10 Sep 2026 15:49:48 +0000 ROA not after: Wed 09 Dec 2026 16:49:48 +0000 asID: 174 IP address blocks: 164.153.248.0/21 maxlen: 32 204.138.46.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:4b:c6:f8:3c:ff:80:14:73:84:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Sep 10 15:49:48 2026 GMT Not After : Dec 9 16:49:48 2026 GMT Subject: CN=e8e834ab-c9f6-4cb2-9252-9eaa91ba8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:b4:c0:fe:98:f1:14:0b:33:40:94:26:c9: 95:39:4f:ec:28:68:92:d7:71:ee:09:90:94:55:3d: 35:21:02:90:53:ee:0c:a6:e6:7e:83:26:7a:5b:82: c3:e3:f2:ef:4f:15:e2:69:85:13:c8:d6:05:57:fe: f8:89:4c:56:1c:93:18:ed:32:0f:a7:ab:04:53:3e: e7:1c:20:8f:d9:ad:d0:52:5f:d6:e5:ff:dc:3b:7e: 26:db:41:a6:7a:c9:d7:6a:22:51:6f:26:fa:86:a4: d4:57:c9:80:c1:9f:87:35:57:84:80:b3:34:da:a5: 07:0b:fb:42:aa:c1:ce:fc:3f:86:fb:2a:dc:41:56: 70:3f:d5:ce:6c:fd:a0:bb:98:d2:f0:7f:22:a6:f6: 68:55:78:c3:a4:b3:04:20:f6:0f:96:e9:70:47:e4: f7:85:9b:83:a2:5f:0f:8a:49:0d:5b:6b:d1:7f:36: 01:cf:c9:a6:7b:2e:a9:52:60:8a:3e:47:97:40:8d: 5a:65:65:d3:73:b9:77:6c:80:0d:ac:fb:0a:4c:ee: 66:80:85:f4:99:5d:18:64:ef:66:4e:56:29:a2:95: a4:27:ef:08:69:75:13:9c:9e:5a:6b:1e:13:9e:b9: 66:56:ae:a4:01:ea:0a:78:d8:8c:9f:e5:3c:ad:38: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:60:DC:DE:A2:7F:B7:0F:68:46:CD:48:13:FB:66:B9:74:0A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/20f5bda5-307c-34b7-8f71-e8e15c02e686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.248.0/21 204.138.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9d:57:5c:60:2c:98:3d:74:3f:f4:a9:cf:bf:91:a0:42:0d: 3a:39:e3:2f:2c:62:8e:55:39:da:25:1a:6b:10:3e:0c:c5:c2: cd:29:8a:ba:e0:91:f9:12:b9:70:9c:bd:9c:9d:4b:83:88:35: 73:b3:38:cf:96:25:41:49:4c:38:59:ff:3d:bd:b2:99:24:e7: 3e:5c:ef:3e:9e:38:49:9e:47:69:9e:c4:1f:2e:f1:52:87:2f: fa:63:a8:65:40:17:b3:3e:44:cf:23:6d:ca:36:1d:6b:af:7d: e8:20:81:15:78:80:ff:8f:f7:1a:0d:3e:cf:7a:db:7d:92:bd: 36:34:e8:d5:f2:a1:6c:4f:0e:dd:65:14:e8:b1:2a:0d:8b:14: 37:a7:0b:0c:9a:65:92:c1:c8:78:e7:f0:71:18:d1:f9:7f:10: e9:4f:bc:59:fa:b8:a8:d7:74:a3:64:58:8d:2f:96:40:97:d6: 48:f7:47:01:ac:16:d6:3b:3c:2f:88:d1:55:da:d6:59:63:27: 12:34:d1:ee:1e:33:6b:cd:ac:ee:42:01:7c:e8:41:e5:c6:06: 5f:68:32:e3:5b:1f:55:fc:80:e5:57:6e:a2:95:39:32:91:01: af:6f:af:3f:95:5f:42:fb:64:7d:fc:32:ff:6d:0e:45:04:45: 53:98:b7:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8hS8b4PP+AFHOEHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDkxMDE1NDk0OFoXDTI2MTIwOTE2NDk0OFowLzEtMCsGA1UEAxMk ZThlODM0YWItYzlmNi00Y2IyLTkyNTItOWVhYTkxYmE4NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApES0wP6Y8RQLM0CUJsmVOU/sKGiS13HuCZCU VT01IQKQU+4MpuZ+gyZ6W4LD4/LvTxXiaYUTyNYFV/74iUxWHJMY7TIPp6sEUz7n HCCP2a3QUl/W5f/cO34m20GmesnXaiJRbyb6hqTUV8mAwZ+HNVeEgLM02qUHC/tC qsHO/D+G+yrcQVZwP9XObP2gu5jS8H8ipvZoVXjDpLMEIPYPlulwR+T3hZuDol8P ikkNW2vRfzYBz8mmey6pUmCKPkeXQI1aZWXTc7l3bIANrPsKTO5mgIX0mV0YZO9m TlYpopWkJ+8IaXUTnJ5aax4TnrlmVq6kAeoKeNiMn+U8rTg33wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDwCYNzeon+3D2hGzUgT+2a5dAonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMjBmNWJkYTUtMzA3Yy0z NGI3LThmNzEtZThlMTVjMDJlNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDpJn4AwQA zIouMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADSdV1xgLJg9dD/0qc+/kaBCDTo54y8sYo5VOdolGmsQPgzF ws0pirrgkfkSuXCcvZydS4OINXOzOM+WJUFJTDhZ/z29spkk5z5c7z6eOEmeR2me xB8u8VKHL/pjqGVAF7M+RM8jbco2HWuvfegggRV4gP+P9xoNPs96232SvTY06NXy oWxPDt1lFOixKg2LFDenCwyaZZLByHjn8HEY0fl/EOlPvFn6uKjXdKNkWI0vlkCX 1kj3RwGsFtY7PC+I0VXa1lljJxI00e4eM2vNrO5CAXzoQeXGBl9oMuNbH1X8gOVX bqKVOTKRAa9vrz+VX0L7ZH38Mv9tDkUERVOYt0s= -----END CERTIFICATE-----Generated at Tue Sep 22 23:15:35 2026 by rpki-client