$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa File: c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json) Hash identifier: JMvYHL7HbmGsX3m58r1hb6wESGoWga4jCBNqcGog0HI= Subject key identifier: 3E:94:13:C9:AB:75:4D:88:87:65:B6:5B:E4:65:5C:8E:E7:4F:E2:11 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584F4F081B67177DC7177C128900 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 40495 IP address blocks: 174.137.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:1b:67:17:7d:c7:17:7c:12:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=acfb1d69-a050-4b43-b736-ae6ccfbf0c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:68:73:a7:7b:c7:6b:8e:81:25:f3:7e:13: 5a:18:68:76:56:d7:60:23:bf:62:05:d5:4b:25:a1: c1:01:fd:5c:b0:6b:f0:86:4e:52:65:c4:2b:bf:01: ac:13:a3:04:d2:68:23:bc:2a:d6:43:a1:5d:29:f1: d8:6b:2c:a5:9c:22:bc:33:23:5b:78:c3:f9:a0:af: 97:88:f0:57:57:70:b8:d3:3d:e7:5f:a2:65:20:f7: 2b:38:73:4d:b1:c2:68:66:92:cc:01:30:63:84:41: 21:52:d1:d4:29:e4:7e:f6:55:35:7b:a4:c4:8c:a4: 15:54:6e:c4:a0:87:d7:83:e1:a0:b0:76:76:c2:d9: 12:fd:36:68:2c:32:3d:78:7e:75:50:e3:b9:9b:26: 03:b8:fd:2c:1b:c9:a2:c1:1c:9d:4c:bb:c6:f7:08: ab:45:9d:2b:83:42:26:fb:82:b8:8b:a4:11:2c:41: 2a:60:8b:c1:31:e6:1b:a7:3e:c3:9d:64:c6:76:5f: 2b:f8:81:6a:04:b0:c4:72:4a:77:8b:c3:de:65:26: a1:9b:52:cd:3d:ab:44:bf:38:8d:b9:2e:76:89:47: 4f:17:60:82:8f:fa:38:1e:2f:3b:50:e8:f7:7e:ac: 30:1a:5b:c0:2a:bb:da:54:cf:9c:3b:35:bf:81:8f: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:13:C9:AB:75:4D:88:87:65:B6:5B:E4:65:5C:8E:E7:4F:E2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:06:0d:7a:13:8d:0b:1e:47:1c:4d:7a:65:e9:24:0c:79:f7: 33:b5:1e:f9:84:bf:e1:c2:44:61:15:ef:4d:5a:60:8f:37:f2: 04:48:37:75:af:31:9a:0a:6c:72:ba:a2:d1:1a:a3:ed:0b:b4: 87:30:76:4b:ef:b3:db:8e:34:f1:72:07:d7:52:6b:d8:9f:77: 4c:2d:58:f3:82:7d:be:db:b4:85:a3:94:a8:76:e9:5d:92:d7: a3:72:c3:14:d7:5f:af:ce:42:06:c9:25:97:0a:69:40:83:5d: 46:b5:6a:fa:dc:9f:cf:dd:67:6b:28:3d:40:26:c4:28:80:15: 1b:a2:03:65:0a:ae:70:d0:49:bd:b8:1c:24:a0:ed:0f:ea:ab: 6a:eb:81:2f:d8:ff:f9:33:0e:c2:78:16:44:2f:be:23:16:f4: ae:0d:20:8c:f9:8c:f5:8f:4c:5e:9a:02:b6:e4:6e:05:96:bb: 75:07:4b:49:fc:43:cf:6b:e1:47:59:38:83:85:6d:e4:34:d5: 10:5c:66:ed:5d:80:e8:1a:5d:96:57:41:c3:89:a0:2e:4d:a6: 6b:bb:4b:28:18:ed:69:00:91:99:f0:9a:68:f1:c3:d0:ec:4d: 66:80:e4:3a:6b:79:c3:54:6e:38:e8:71:ac:69:93:d5:c9:f4: c3:ad:67:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBtnF33HF3wSiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YWNmYjFkNjktYTA1MC00YjQzLWI3MzYtYWU2Y2NmYmYwYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRoc6d7x2uOgSXzfhNaGGh2VtdgI79iBdVL JaHBAf1csGvwhk5SZcQrvwGsE6ME0mgjvCrWQ6FdKfHYayylnCK8MyNbeMP5oK+X iPBXV3C40z3nX6JlIPcrOHNNscJoZpLMATBjhEEhUtHUKeR+9lU1e6TEjKQVVG7E oIfXg+GgsHZ2wtkS/TZoLDI9eH51UOO5myYDuP0sG8miwRydTLvG9wirRZ0rg0Im +4K4i6QRLEEqYIvBMeYbpz7DnWTGdl8r+IFqBLDEckp3i8PeZSahm1LNPatEvziN uS52iUdPF2CCj/o4Hi87UOj3fqwwGlvAKrvaVM+cOzW/gY+ccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6UE8mrdU2Ih2W2W+RlXI7nT+IRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzM4NWYxNGYtY2FmMi0z MzE1LTk1N2ItNGQ5ZTA1MzgyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErolwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYGDXoTjQseRxxNemXpJAx59zO1HvmEv+HCRGEV701aYI838gRIN3Wv MZoKbHK6otEao+0LtIcwdkvvs9uONPFyB9dSa9ifd0wtWPOCfb7btIWjlKh26V2S 16NywxTXX6/OQgbJJZcKaUCDXUa1avrcn8/dZ2soPUAmxCiAFRuiA2UKrnDQSb24 HCSg7Q/qq2rrgS/Y//kzDsJ4FkQvviMW9K4NIIz5jPWPTF6aArbkbgWWu3UHS0n8 Q89r4UdZOIOFbeQ01RBcZu1dgOgaXZZXQcOJoC5Npmu7SygY7WkAkZnwmmjxw9Ds TWaA5DprecNUbjjocaxpk9XJ9MOtZ2s= -----END CERTIFICATE-----Generated at Tue Oct 13 19:10:01 2026 by rpki-client