$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1af164c-e50e-3f2a-9ece-6469a3b4ce48.roa File: f1af164c-e50e-3f2a-9ece-6469a3b4ce48.roa (raw, json) Hash identifier: w6BXBQ2Hpzv0ckKn9xR17vDirhwBmBCo9y28WE3ffxg= Subject key identifier: 31:4A:BF:FE:2F:08:57:C6:7D:72:9C:40:BC:F1:FC:16:11:67:29:A3 Certificate issuer: /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Certificate serial: 010D0C9F4328584F123508DDEA0F7E35606FE2C4 Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1af164c-e50e-3f2a-9ece-6469a3b4ce48.roa Signing time: Sat 05 Sep 2026 06:06:51 +0000 ROA not before: Sat 05 Sep 2026 06:06:51 +0000 ROA not after: Fri 04 Dec 2026 07:06:51 +0000 asID: 11179 IP address blocks: 146.12.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:12:35:08:dd:ea:0f:7e:35:60:6f:e2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Validity Not Before: Sep 5 06:06:51 2026 GMT Not After : Dec 4 07:06:51 2026 GMT Subject: CN=fd1c5dc7-22a1-4cd6-ba99-7b08588eb432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:86:b5:c3:87:4a:3f:78:1c:46:91:18:70: db:67:ab:67:87:7e:40:6f:27:14:06:b6:65:6e:67: f8:88:fc:13:56:ed:6b:2f:28:bc:04:8a:10:7d:1f: 8c:23:08:b5:a4:d0:af:d1:b1:20:cb:13:75:f6:bb: 7d:cf:08:ac:fb:47:35:fb:41:70:2e:cf:55:f0:f4: dd:f9:27:f9:62:2f:73:79:2d:4d:21:a5:8c:d2:bb: 49:02:16:8a:70:d3:4f:b3:91:b0:88:13:ec:5a:13: 94:15:82:da:48:03:9d:e6:dd:45:74:ee:9a:60:04: 93:0c:f4:f6:05:89:ec:92:52:6d:3d:29:b5:3f:70: 08:e4:c7:58:e1:ae:1d:c1:9c:1a:24:e3:1e:10:5e: 92:17:d5:52:51:46:52:61:30:21:f2:a8:0c:27:0e: e1:f5:33:5e:7c:db:07:d9:16:cb:df:88:a1:39:21: e7:20:72:6b:54:8f:22:23:a2:57:e7:b4:72:65:84: f4:d0:13:ba:b3:4c:3f:7f:91:09:33:23:8b:f2:35: fa:39:42:57:af:bc:1f:17:52:b1:02:01:f7:06:13: a0:98:4f:6e:e5:df:f5:96:b5:53:76:97:4c:68:66: 0a:15:8e:bf:62:bd:a7:ef:e8:bf:c6:de:f7:1a:4b: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:BF:FE:2F:08:57:C6:7D:72:9C:40:BC:F1:FC:16:11:67:29:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1af164c-e50e-3f2a-9ece-6469a3b4ce48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl X509v3 Authority Key Identifier: keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer sbgp-ipAddrBlock: critical IPv4: 146.12.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:42:eb:50:ac:81:23:d5:4f:63:e3:f8:b0:da:cf:32:b0:18: bd:9b:40:56:88:ec:7a:bc:f6:6b:63:c0:e6:5d:16:98:72:3b: 7d:ae:d2:e1:22:02:dc:12:d8:1b:33:df:d6:b6:60:2b:4d:6a: 4a:e3:a0:4c:9d:5f:38:1f:7f:4f:f1:43:f7:53:f7:aa:f3:2c: ba:33:fb:9b:1a:3a:9d:9d:b4:c3:09:61:e8:f5:c9:f9:77:dd: 14:22:95:23:6a:dc:30:51:d4:5f:72:5a:5f:9a:de:42:44:d8: c3:50:d8:2d:70:1a:29:5b:ef:33:8f:70:dd:57:dd:ff:7e:7b: b1:86:b5:88:75:b9:e2:82:74:3e:12:67:66:11:04:da:76:5e: bc:35:fc:74:5d:5a:da:a8:ed:d6:3a:e2:f5:8d:18:9a:ce:e4: cd:c9:3c:63:44:68:9b:59:3b:fe:df:16:f4:0e:ef:20:9a:a3: 5c:69:be:17:d3:0b:c4:c3:d3:51:24:ba:87:fd:1a:0d:97:77: d6:5b:fc:15:9a:d0:b4:d2:b5:b6:7b:4b:83:56:56:e3:83:16: 2c:e8:46:33:16:46:4d:95:47:0f:03:ba:26:57:2a:08:28:af: 16:21:e3:e0:f5:cf:09:af:ab:53:ba:ed:a7:bf:cb:7d:bd:6c: 0c:0e:ff:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8SNQjd6g9+NWBv4sQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm N2VjMB4XDTI2MDkwNTA2MDY1MVoXDTI2MTIwNDA3MDY1MVowLzEtMCsGA1UEAxMk ZmQxYzVkYzctMjJhMS00Y2Q2LWJhOTktN2IwODU4OGViNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQGGtcOHSj94HEaRGHDbZ6tnh35AbycUBrZl bmf4iPwTVu1rLyi8BIoQfR+MIwi1pNCv0bEgyxN19rt9zwis+0c1+0FwLs9V8PTd +Sf5Yi9zeS1NIaWM0rtJAhaKcNNPs5GwiBPsWhOUFYLaSAOd5t1FdO6aYASTDPT2 BYnsklJtPSm1P3AI5MdY4a4dwZwaJOMeEF6SF9VSUUZSYTAh8qgMJw7h9TNefNsH 2RbL34ihOSHnIHJrVI8iI6JX57RyZYT00BO6s0w/f5EJMyOL8jX6OUJXr7wfF1Kx AgH3BhOgmE9u5d/1lrVTdpdMaGYKFY6/Yr2n7+i/xt73GkusfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFKv/4vCFfGfXKcQLzx/BYRZymjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvZjFhZjE2NGMtZTUwZS0z ZjJhLTllY2UtNjQ2OWEzYjRjZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4 ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkgzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBC61CsgSPVT2Pj+LDazzKwGL2bQFaI7Hq89mtjwOZdFphyO32u0uEi AtwS2Bsz39a2YCtNakrjoEydXzgff0/xQ/dT96rzLLoz+5saOp2dtMMJYej1yfl3 3RQilSNq3DBR1F9yWl+a3kJE2MNQ2C1wGilb7zOPcN1X3f9+e7GGtYh1ueKCdD4S Z2YRBNp2Xrw1/HRdWtqo7dY64vWNGJrO5M3JPGNEaJtZO/7fFvQO7yCao1xpvhfT C8TD01Ekuof9Gg2Xd9Zb/BWa0LTStbZ7S4NWVuODFizoRjMWRk2VRw8DuiZXKggo rxYh4+D1zwmvq1O67ae/y329bAwO/10= -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:42 2026 by rpki-client