$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa File: 842693eb-4702-3883-bba3-0d1ad1693ec9.roa (raw, json) Hash identifier: 1k4xCfmDaDWbE1QK0jmuOy3yD9P6nPIhbdmY5Az0l8I= Subject key identifier: 66:87:00:9B:31:8B:3E:8B:67:6C:1E:59:C2:F8:87:D4:F8:4D:D5:CF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F71ED7A9EDA78E6137CFDC1C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 201106 IP address blocks: 75.153.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7a:9e:da:78:e6:13:7c:fd:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=e72ad11d-589d-442c-bb6a-d28b4c8c1f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:c9:d6:38:8c:40:6c:ce:1e:9d:12:44:e4: 04:f6:39:a5:4d:97:29:0b:92:a5:3d:ae:dd:39:fb: 15:f6:1d:23:b9:a4:c2:8d:18:fb:2b:f7:97:0f:7c: 1f:12:93:74:af:c4:31:84:67:a8:6c:b0:52:93:e4: 82:c8:7f:a9:e1:60:7b:b1:a2:9b:e2:fa:94:2d:10: 4b:a8:52:92:46:a7:56:6a:8c:82:2d:7d:34:5c:1b: 9a:22:60:d6:a3:78:09:67:c7:21:d5:f2:05:1c:b5: 08:11:43:05:9e:13:01:f4:6b:4b:d5:81:12:f6:cf: 17:5a:2a:21:2d:c1:77:26:4e:6c:fe:9e:8c:6f:a7: dd:6d:7b:fe:3e:7e:e8:3c:59:99:e0:1f:76:92:21: c2:e1:1d:31:63:c7:8b:c4:5a:36:94:c9:db:d5:59: 0c:7f:f7:9d:a0:80:8d:f6:e0:b9:4a:17:c0:38:04: ab:fc:cf:a3:ee:5e:ec:8f:96:4f:da:28:da:78:2f: 0d:82:c9:26:08:54:d4:0b:11:56:d7:8e:ea:f5:d0: c0:5a:4c:16:30:56:42:94:58:fb:45:49:11:7f:eb: 56:16:0c:ab:d9:23:d1:ae:30:7c:69:6a:d3:4b:d6: dd:33:35:46:5e:f9:17:e4:93:9c:d8:0b:f4:59:41: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:00:9B:31:8B:3E:8B:67:6C:1E:59:C2:F8:87:D4:F8:4D:D5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6b:9c:95:5d:e0:04:37:c7:a8:18:91:cd:99:d3:39:1b:9e: 63:d2:49:23:d1:2a:97:fc:59:26:1b:33:3c:08:25:9f:06:83: 35:56:f3:65:5c:7b:3b:4f:5c:0f:33:2e:25:3b:28:e3:86:d0: 37:89:ea:e2:e8:fd:84:fe:29:99:0c:41:8c:12:e6:0a:f6:90: 12:8f:15:b1:8f:1d:43:70:7d:58:a5:82:12:47:ea:6d:c1:19: f9:de:72:e2:67:d3:0d:7d:8b:da:3e:a1:a4:49:aa:92:2c:82: c4:8c:b7:25:e0:39:34:2d:b0:da:fd:cc:57:a1:b6:67:1a:86: 7e:88:e4:f1:35:5c:45:8a:f4:62:f0:a0:d5:14:7f:ac:14:91: 3d:e9:bd:ca:ad:b1:3f:4d:f5:0c:23:76:30:a4:26:c7:0f:a2: 97:3a:c0:db:cf:88:de:3f:f0:10:c5:5f:ed:dd:6f:41:02:f3: 56:02:c1:23:b4:cf:02:28:dc:31:23:8d:18:0b:5c:d1:bd:69: 29:00:65:0e:e8:4f:bc:69:b3:cb:7f:d7:03:69:d7:7e:68:c8: ba:a0:40:cd:4d:b4:38:b4:93:6f:c2:db:a9:16:c6:2f:13:ae: 5e:0b:fb:f8:14:58:46:04:40:32:70:7f:ac:f3:5a:d9:d0:be: 77:28:75:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Xqe2njmE3z9wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZTcyYWQxMWQtNTg5ZC00NDJjLWJiNmEtZDI4YjRjOGMxZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vXJ1jiMQGzOHp0SROQE9jmlTZcpC5KlPa7d OfsV9h0juaTCjRj7K/eXD3wfEpN0r8QxhGeobLBSk+SCyH+p4WB7saKb4vqULRBL qFKSRqdWaoyCLX00XBuaImDWo3gJZ8ch1fIFHLUIEUMFnhMB9GtL1YES9s8XWioh LcF3Jk5s/p6Mb6fdbXv+Pn7oPFmZ4B92kiHC4R0xY8eLxFo2lMnb1VkMf/edoICN 9uC5ShfAOASr/M+j7l7sj5ZP2ijaeC8NgskmCFTUCxFW147q9dDAWkwWMFZClFj7 RUkRf+tWFgyr2SPRrjB8aWrTS9bdMzVGXvkX5JOc2Av0WUGMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaHAJsxiz6LZ2weWcL4h9T4TdXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODQyNjkzZWItNDcwMi0z ODgzLWJiYTMtMGQxYWQxNjkzZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS5lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlrnJVd4AQ3x6gYkc2Z0zkbnmPSSSPRKpf8WSYbMzwIJZ8GgzVW82Vc eztPXA8zLiU7KOOG0DeJ6uLo/YT+KZkMQYwS5gr2kBKPFbGPHUNwfVilghJH6m3B GfnecuJn0w19i9o+oaRJqpIsgsSMtyXgOTQtsNr9zFehtmcahn6I5PE1XEWK9GLw oNUUf6wUkT3pvcqtsT9N9QwjdjCkJscPopc6wNvPiN4/8BDFX+3db0EC81YCwSO0 zwIo3DEjjRgLXNG9aSkAZQ7oT7xps8t/1wNp135oyLqgQM1NtDi0k2/C26kWxi8T rl4L+/gUWEYEQDJwf6zzWtnQvncodRM= -----END CERTIFICATE-----Generated at Sat Oct 10 13:37:50 2026 by rpki-client