$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa File: c3a4120a-832f-3d49-9b46-e10f35565a99.roa (raw, json) Hash identifier: KIgTaTr4hLi24eTii35mqu0rAcGTjwxGaIbBiGllg7k= Subject key identifier: 8F:37:9F:AE:D8:95:3E:81:77:30:BC:29:A1:AE:52:F4:A0:92:AA:81 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584F612D678FAAAA518CF612AC00 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 174.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:67:8f:aa:aa:51:8c:f6:12:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=0a3cd878-dac8-4e5d-907c-8c3de8236b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:91:8d:88:c6:a0:71:7a:33:ab:ef:ac:f4: 67:23:c7:ae:d0:0f:bc:c1:cf:b1:f2:ee:ed:c8:a4: 92:de:e3:e1:c3:23:24:54:b4:a7:21:5e:65:d9:9d: 00:50:6e:6d:5b:55:2a:a1:dd:23:4a:28:f9:f4:48: e3:91:b0:9f:e8:66:da:f8:95:5a:d2:cd:c2:fc:de: cc:da:9e:57:79:c8:be:cd:a5:40:e1:c8:7c:d7:e0: fd:00:ac:4e:95:2c:18:6f:ac:7d:d2:8e:98:31:02: 2d:25:63:c9:65:a1:de:e9:3d:47:32:3b:50:18:35: d3:35:f2:57:e1:39:e4:d8:4e:60:18:0b:e9:76:56: 35:f4:21:23:e0:3a:e3:5e:e2:54:86:69:1a:7f:36: 52:eb:f1:5e:b2:66:78:ac:4c:af:ed:6f:8d:97:e1: c3:21:ca:5f:51:da:f1:91:50:78:82:c0:9a:46:1e: f9:0a:f8:ce:10:be:5c:3a:1b:62:24:57:ea:0e:38: 0c:27:2a:b6:8e:3d:4d:17:72:ce:05:79:f2:8e:6f: ac:75:89:96:4f:20:a2:f0:83:da:89:df:9c:87:63: ad:83:e4:f3:d9:8c:ed:c7:5f:f5:58:74:4c:1a:c1: f6:52:7f:0b:fd:c0:85:2c:32:29:50:28:79:75:12: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:9F:AE:D8:95:3E:81:77:30:BC:29:A1:AE:52:F4:A0:92:AA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:23:6b:67:62:73:ff:33:04:65:c1:aa:b6:8a:47:6d:59:8a: 73:cd:ae:1d:21:eb:dd:24:f5:a7:d9:5b:25:87:ac:62:e2:a4: ba:6d:e9:bf:e8:d1:cf:6a:3c:81:c9:fa:40:81:2c:db:1b:d6: 8c:c2:40:a5:7a:ce:ba:c8:77:a0:e8:b7:73:0b:6f:44:d9:3e: 5d:fe:d5:d5:79:bc:68:1d:0c:9b:9f:49:28:da:64:28:5c:f5: bf:b6:82:90:df:42:f3:39:06:11:8b:2a:21:3d:8e:3c:d8:e4: a9:fc:2b:e6:36:df:25:25:5f:f4:43:c4:6e:e7:8b:da:01:3e: d8:c1:63:a5:96:aa:71:be:e5:16:d6:8a:c5:37:21:cb:eb:f6: 2c:d1:f9:68:8a:17:a0:e9:5a:bf:06:a4:cb:57:09:3b:65:05: c7:a4:6b:2c:e8:51:06:86:28:35:63:ee:b3:73:6c:2d:16:93: 2d:e1:0b:74:86:3d:71:23:e0:00:50:55:56:61:7b:24:91:e8: c8:73:77:71:ba:b6:bd:06:73:65:34:bc:db:9a:6a:aa:0b:32: af:72:e2:12:77:f7:0f:c8:eb:42:7f:8b:8f:a0:b3:8a:8a:8f: f4:dc:5c:01:0a:b0:62:5b:ba:cf:c3:2a:da:f2:c1:49:0a:b6: 6b:0e:a0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWePqqpRjPYSrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MGEzY2Q4NzgtZGFjOC00ZTVkLTkwN2MtOGMzZGU4MjM2YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/iRjYjGoHF6M6vvrPRnI8eu0A+8wc+x8u7t yKSS3uPhwyMkVLSnIV5l2Z0AUG5tW1Uqod0jSij59EjjkbCf6Gba+JVa0s3C/N7M 2p5Xeci+zaVA4ch81+D9AKxOlSwYb6x90o6YMQItJWPJZaHe6T1HMjtQGDXTNfJX 4Tnk2E5gGAvpdlY19CEj4DrjXuJUhmkafzZS6/FesmZ4rEyv7W+Nl+HDIcpfUdrx kVB4gsCaRh75CvjOEL5cOhtiJFfqDjgMJyq2jj1NF3LOBXnyjm+sdYmWTyCi8IPa id+ch2Otg+Tz2Yztx1/1WHRMGsH2Un8L/cCFLDIpUCh5dRIi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI83n67YlT6BdzC8KaGuUvSgkqqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzNhNDEyMGEtODMyZi0z ZDQ5LTliNDYtZTEwZjM1NTY1YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcja2dic/8zBGXBqraKR21ZinPNrh0h690k9afZWyWHrGLipLpt6b/o 0c9qPIHJ+kCBLNsb1ozCQKV6zrrId6Dot3MLb0TZPl3+1dV5vGgdDJufSSjaZChc 9b+2gpDfQvM5BhGLKiE9jjzY5Kn8K+Y23yUlX/RDxG7ni9oBPtjBY6WWqnG+5RbW isU3Icvr9izR+WiKF6DpWr8GpMtXCTtlBcekayzoUQaGKDVj7rNzbC0Wky3hC3SG PXEj4ABQVVZheySR6Mhzd3G6tr0Gc2U0vNuaaqoLMq9y4hJ39w/I60J/i4+gs4qK j/TcXAEKsGJbus/DKtrywUkKtmsOoBQ= -----END CERTIFICATE-----Generated at Thu Oct 8 19:29:16 2026 by rpki-client