$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa File: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (raw, json) Hash identifier: XyA3g30vNlZi9H+v6Q+UPGreLqDDmORGlVepos9UYBE= Subject key identifier: 7C:FB:40:01:68:DC:C4:95:F0:7B:AA:54:3D:32:E8:EF:32:54:C9:3C Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F4328584F4973B8A26D9477803F33A340 Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 137.22.245.0/24 maxlen: 24 137.22.246.0/24 maxlen: 24 223.165.113.0/24 maxlen: 24 223.165.115.0/24 maxlen: 24 223.165.118.0/24 maxlen: 24 223.165.119.0/24 maxlen: 24 223.165.120.0/24 maxlen: 24 223.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b8:a2:6d:94:77:80:3f:33:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e917f866-9b53-47b1-8236-ba1793519c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:74:07:bf:6f:94:fc:6f:09:b6:55:98:6c: e7:95:f2:9b:a6:87:06:3d:74:5d:ed:96:f0:cb:83: 85:a8:f0:ac:a5:48:ec:10:4c:0b:3a:ab:0e:48:7a: e3:45:e9:df:71:15:77:2a:c5:92:8d:e6:59:ad:3d: b1:a7:fc:73:06:de:1b:76:d3:6d:c2:ff:0a:1c:a2: e4:e3:57:29:f4:4a:94:d2:d7:c4:12:bd:8a:5e:2d: d3:b3:8b:6f:23:21:dc:ed:f9:74:35:45:57:7a:05: 40:d3:33:28:22:d4:1b:cb:19:8f:8c:0e:80:79:0c: bf:b3:ff:14:46:a3:7e:42:83:23:bf:47:04:20:e4: 46:6c:10:e7:f6:36:3e:13:c2:07:b4:1e:58:12:04: 40:a0:3e:c2:3f:82:d8:78:2d:54:80:04:60:94:7f: 61:d3:5d:3e:94:ce:32:70:b7:42:4f:56:34:b2:09: ac:34:22:bb:3b:0b:5d:bb:72:1f:1d:b6:f7:39:0b: b4:78:be:cf:d0:72:96:94:20:37:ae:3a:4b:8b:b4: e2:e9:96:bd:e1:db:cb:ab:78:8c:94:ce:ca:4f:a1: bb:bc:ed:10:8f:4a:cf:e9:67:40:a7:81:3c:b0:66: 05:b0:f2:59:2b:c3:c5:49:63:53:41:06:88:2e:50: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:40:01:68:DC:C4:95:F0:7B:AA:54:3D:32:E8:EF:32:54:C9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: 137.22.245.0-137.22.246.255 223.165.113.0/24 223.165.115.0/24 223.165.118.0-223.165.121.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b4:19:f1:3c:6c:8d:b1:89:9b:92:39:ba:0e:d9:48:4c:15: 12:5a:25:c0:29:8d:81:a2:a2:5c:5a:d6:d1:65:6f:91:82:45: 6d:07:2a:fc:cd:4e:65:e0:64:3d:52:07:81:b0:2e:98:fd:82: 30:41:9e:85:51:70:b7:b1:65:39:7d:65:ae:22:c6:49:56:dc: ac:87:1e:09:b6:23:5a:53:67:53:c7:83:04:23:35:74:de:3f: e3:c8:98:5d:98:c0:29:16:1a:13:bb:64:24:4e:53:78:a1:b4: 55:0a:d3:2c:a6:75:c3:45:d7:6c:d7:cf:17:89:05:31:b2:06: a3:8d:b1:3a:6c:ae:85:db:65:ba:5d:cd:08:ae:5a:bf:16:2a: d7:cb:e2:33:af:09:fd:86:d8:50:8b:b7:44:27:86:18:7a:be: 03:fd:a2:fa:c7:27:7a:a7:93:db:e5:8e:f7:1a:c5:08:69:64: e5:1c:67:7e:5e:b4:e4:e0:e6:45:34:68:db:76:94:e8:52:dd: cd:c8:f0:a4:ab:41:22:27:2e:3b:e9:f2:2c:2b:90:2d:51:c8: ca:98:96:17:2f:db:ed:21:32:6f:09:38:1d:12:7f:d3:c1:fc: b7:38:41:c8:20:8e:25:e0:3b:c9:31:ba:63:7b:0b:7e:2e:ca: 34:50:6d:f3 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE9Jc7iibZR3gD8zo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTkxN2Y4NjYtOWI1My00N2IxLTgyMzYtYmExNzkzNTE5YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHh0B79vlPxvCbZVmGznlfKbpocGPXRd7Zbw y4OFqPCspUjsEEwLOqsOSHrjRenfcRV3KsWSjeZZrT2xp/xzBt4bdtNtwv8KHKLk 41cp9EqU0tfEEr2KXi3Ts4tvIyHc7fl0NUVXegVA0zMoItQbyxmPjA6AeQy/s/8U RqN+QoMjv0cEIORGbBDn9jY+E8IHtB5YEgRAoD7CP4LYeC1UgARglH9h010+lM4y cLdCT1Y0sgmsNCK7Owtdu3IfHbb3OQu0eL7P0HKWlCA3rjpLi7Ti6Za94dvLq3iM lM7KT6G7vO0Qj0rP6WdAp4E8sGYFsPJZK8PFSWNTQQaILlDHdQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFHz7QAFo3MSV8HuqVD0y6O8yVMk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvNDNlYjhhZmItNGVjMC0z YTdmLThjOWEtMmNhMmNiZmY0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACJFvUD BACJFvYDBADfpXEDBADfpXMwDAMEAd+ldgMEAd+leDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWtBnxPGyN sYmbkjm6DtlITBUSWiXAKY2BoqJcWtbRZW+RgkVtByr8zU5l4GQ9UgeBsC6Y/YIw QZ6FUXC3sWU5fWWuIsZJVtyshx4JtiNaU2dTx4MEIzV03j/jyJhdmMApFhoTu2Qk TlN4obRVCtMspnXDRdds188XiQUxsgajjbE6bK6F22W6Xc0Irlq/FirXy+Izrwn9 hthQi7dEJ4YYer4D/aL6xyd6p5Pb5Y73GsUIaWTlHGd+XrTk4OZFNGjbdpToUt3N yPCkq0EiJy476fIsK5AtUcjKmJYXL9vtITJvCTgdEn/Twfy3OEHIII4l4DvJMbpj ewt+Lso0UG3z -----END CERTIFICATE-----Generated at Fri Sep 25 08:15:28 2026 by rpki-client