$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a3eeeee6-f068-3704-b417-7b12affa85fc.roa File: a3eeeee6-f068-3704-b417-7b12affa85fc.roa (raw, json) Hash identifier: KTJmkplPcQH9WjvEUTEHanMzd+/VovIo/fs6KuQsxIU= Subject key identifier: 07:6A:3D:7D:FD:0B:A3:0F:D6:C8:33:8A:7E:8E:DD:A7:B6:E4:FE:E4 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584F5EC336FBA460811C49756A20 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a3eeeee6-f068-3704-b417-7b12affa85fc.roa Signing time: Fri 02 Oct 2026 16:14:46 +0000 ROA not before: Fri 02 Oct 2026 16:14:46 +0000 ROA not after: Thu 31 Dec 2026 17:14:46 +0000 asID: 15830 IP address blocks: 159.182.12.0/24 maxlen: 24 159.182.14.0/24 maxlen: 24 168.146.68.0/22 maxlen: 24 168.146.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:c3:36:fb:a4:60:81:1c:49:75:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 2 16:14:46 2026 GMT Not After : Dec 31 17:14:46 2026 GMT Subject: CN=60674f3b-86c1-44ad-bed7-7993edd2e277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:23:47:45:54:8f:f3:b9:6c:b5:44:ca:b0: ee:df:65:f0:0a:35:95:c3:ec:1b:39:bb:ce:b0:90: 7b:e0:94:31:6e:47:eb:4a:5c:90:a1:0c:50:0d:1c: c7:1b:2b:e4:ef:ad:5a:ec:08:d0:25:67:ff:cf:a7: 05:3f:2c:2f:70:09:62:5f:d2:9c:5b:4d:d0:f2:45: 96:fa:28:46:84:e5:92:b0:52:22:ff:29:be:2e:03: 44:d0:93:30:f1:65:e1:af:ed:c8:de:b5:26:1e:2d: 23:a1:c2:06:a4:14:66:13:f5:e8:f0:37:50:da:89: d7:98:be:b1:f9:10:e2:52:a2:aa:88:d0:f6:63:31: cf:47:f4:44:e6:2b:4e:f3:c4:58:9b:4d:a5:0a:ae: f9:75:a0:6a:4c:19:dc:47:60:d3:5e:87:36:97:5a: 3a:0b:d5:2d:d4:1a:c0:c6:07:de:6e:f2:03:94:99: 2d:95:62:2e:a9:9b:d3:91:04:7b:db:84:ca:f2:21: 92:19:a7:30:6b:c0:6d:5f:c4:17:f4:b6:26:e1:a1: 4b:e8:aa:f5:95:20:03:c1:46:c6:07:19:14:96:2b: af:76:15:a3:95:c0:4b:35:1a:24:1e:eb:7d:ba:5c: a2:ec:11:b3:fd:7a:d3:a7:98:62:97:9c:45:ae:0d: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6A:3D:7D:FD:0B:A3:0F:D6:C8:33:8A:7E:8E:DD:A7:B6:E4:FE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a3eeeee6-f068-3704-b417-7b12affa85fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.12.0/24 159.182.14.0/24 168.146.68.0/22 168.146.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:aa:eb:d0:6d:41:20:17:d7:ae:81:86:08:38:cd:e9:ac:c4: 0d:00:dc:d5:e2:85:33:32:16:32:40:44:88:a0:6b:8f:5f:3a: 38:4c:87:9d:c8:ff:0d:9b:ff:5a:ae:ec:dd:d0:09:86:91:d8: 06:d9:ca:4a:a3:8e:2c:b9:89:c3:dd:cd:40:b0:05:12:a9:b4: 38:ad:83:7b:cb:0c:c7:43:27:a6:30:2b:fc:fd:95:f6:f7:cd: df:7a:30:1b:d6:de:b3:44:23:12:1e:1d:4c:67:82:14:24:ae: b2:38:c7:76:60:27:f9:c1:de:5c:07:aa:49:82:a7:91:1c:80: a2:d5:9e:77:c0:9d:40:c3:3c:6e:ce:97:a4:81:47:92:2e:e0: 98:3a:6c:1e:2d:df:2a:dc:3c:b4:5b:ed:8d:24:7c:38:06:e0: af:d4:72:d8:ed:bf:4e:00:d8:3b:a7:f3:36:45:bd:78:67:a4: 2d:e6:bf:d2:a2:a0:a4:89:c5:c2:89:80:52:c2:ef:21:d2:a2: 25:fa:f7:bb:85:67:ce:db:50:46:63:c8:c3:10:5f:10:ab:4d: 78:65:d2:21:a0:5f:fe:cf:23:44:a4:6f:74:57:20:45:79:05: 22:48:41:e9:cf:38:39:bc:25:5c:5d:b7:ff:2a:4f:6b:34:ba: c4:22:43:ed -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9ewzb7pGCBHEl1aiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MTAwMjE2MTQ0NloXDTI2MTIzMTE3MTQ0NlowLzEtMCsGA1UEAxMk NjA2NzRmM2ItODZjMS00NGFkLWJlZDctNzk5M2VkZDJlMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP8jR0VUj/O5bLVEyrDu32XwCjWVw+wbObvO sJB74JQxbkfrSlyQoQxQDRzHGyvk761a7AjQJWf/z6cFPywvcAliX9KcW03Q8kWW +ihGhOWSsFIi/ym+LgNE0JMw8WXhr+3I3rUmHi0jocIGpBRmE/Xo8DdQ2onXmL6x +RDiUqKqiND2YzHPR/RE5itO88RYm02lCq75daBqTBncR2DTXoc2l1o6C9Ut1BrA xgfebvIDlJktlWIuqZvTkQR724TK8iGSGacwa8BtX8QX9LYm4aFL6Kr1lSADwUbG BxkUliuvdhWjlcBLNRokHut9ulyi7BGz/XrTp5hil5xFrg3EsQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFAdqPX39C6MP1sgzin6O3ae25P7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvYTNlZWVlZTYtZjA2OC0z NzA0LWI0MTctN2IxMmFmZmE4NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAn7YMAwQA n7YOAwQCqJJEAwQAqJJtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACWq69BtQSAX166Bhgg4zemsxA0A3NXi hTMyFjJARIiga49fOjhMh53I/w2b/1qu7N3QCYaR2AbZykqjjiy5icPdzUCwBRKp tDitg3vLDMdDJ6YwK/z9lfb3zd96MBvW3rNEIxIeHUxnghQkrrI4x3ZgJ/nB3lwH qkmCp5EcgKLVnnfAnUDDPG7Ol6SBR5Iu4Jg6bB4t3yrcPLRb7Y0kfDgG4K/Uctjt v04A2Dun8zZFvXhnpC3mv9KioKSJxcKJgFLC7yHSoiX697uFZ87bUEZjyMMQXxCr TXhl0iGgX/7PI0Skb3RXIEV5BSJIQenPODm8JVxdt/8qT2s0usQiQ+0= -----END CERTIFICATE-----Generated at Sun Oct 11 08:47:53 2026 by rpki-client