$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa File: 84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa (raw, json) Hash identifier: IJfcvMwjXvS2QOWN4thVcDQfvBc1D+aFI7rbOp1X+ag= Subject key identifier: 9E:F9:4D:20:39:37:D5:A1:7A:28:80:8E:8A:AD:94:A0:57:DB:89:2F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F5E62C77A300A5EED752D9800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 161.184.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c7:7a:30:0a:5e:ed:75:2d:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=2e457136-e1d4-4234-95ab-fdce179faa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:6d:be:10:17:43:a7:2f:49:ee:c0:06:04: dc:18:49:39:3a:5e:af:62:17:61:54:ac:cc:4c:a9: 96:86:01:d5:1d:e1:5e:70:48:43:d8:6d:af:df:ae: 97:6e:ed:76:2f:1f:ce:1c:02:f2:17:7b:50:60:96: e3:b4:6c:ca:6f:11:1d:88:12:98:c1:29:43:32:09: 2e:9e:fa:5d:1b:cf:a8:f7:1c:ef:53:ce:23:f0:80: 4d:91:76:47:31:fe:67:2c:09:46:95:3f:4a:47:24: f7:25:87:63:bb:7b:c3:50:a0:fa:38:91:52:0b:b3: 38:95:c3:f4:a1:f2:a1:b7:b2:30:60:ff:b1:29:0c: d3:e8:e1:68:92:4d:ff:88:6d:07:79:dd:c6:71:e0: 5b:ef:79:65:fe:44:f8:96:3d:8a:f4:f0:b0:10:90: f2:7d:03:e7:b5:4e:8b:2d:ce:9b:61:90:db:35:ad: 57:0a:67:8b:03:e2:43:d5:48:ef:06:e2:0c:97:ee: 34:49:89:ec:df:f3:d9:8f:0f:10:fd:3e:8f:c5:89: 0d:71:b6:9c:96:c5:41:d5:66:6a:0a:bf:07:38:9a: f9:c5:79:91:f6:61:bd:b2:f4:90:f8:61:b9:50:a3: 7b:d0:a4:6f:5c:ee:72:8e:56:c9:73:0f:ef:3b:e4: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F9:4D:20:39:37:D5:A1:7A:28:80:8E:8A:AD:94:A0:57:DB:89:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 161.184.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:4d:85:49:f1:d3:25:71:4f:a8:94:0d:95:03:1b:94:3b:7d: e3:8b:27:ef:60:64:0f:11:d7:2b:bc:cc:3a:5d:ef:fe:5d:55: bf:cc:64:d8:2e:7d:f8:de:61:8b:e6:55:00:94:76:c6:5f:cb: 01:21:98:26:05:08:59:cf:0b:5a:38:a9:09:77:4b:d0:d0:90: 75:58:e2:ac:63:34:4a:79:b7:38:3e:56:d0:9a:ab:25:f8:de: 7d:f9:54:aa:a3:dc:b3:e9:91:30:c0:95:22:14:7e:c5:4d:e5: 54:85:d3:db:6f:c5:c0:64:68:45:e4:59:33:ed:b1:ec:5b:97: 2e:b4:dc:0c:6a:3e:cd:4a:bb:b8:4e:6b:2c:dd:7c:0b:c9:23: 74:18:2a:08:2e:01:b5:c1:a0:3f:fc:15:24:bd:fb:80:35:c8: 7d:8a:55:ee:50:4b:c6:ca:29:a7:e5:76:4c:bb:a5:da:cb:0e: d2:51:bf:b1:a3:6d:c8:8b:ae:bf:18:33:68:20:c4:29:bf:bf: 71:4d:a7:92:20:77:5a:11:93:71:7a:ae:52:e2:7f:1e:b9:bd: 74:dc:6a:e8:6b:89:59:28:3f:19:27:44:b1:ea:35:4c:72:89: 35:42:fe:7b:94:de:14:50:99:0f:6c:46:b5:07:68:f5:00:99: d7:67:c2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsd6MApe7XUtmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MmU0NTcxMzYtZTFkNC00MjM0LTk1YWItZmRjZTE3OWZhYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxudtvhAXQ6cvSe7ABgTcGEk5Ol6vYhdhVKzM TKmWhgHVHeFecEhD2G2v366Xbu12Lx/OHALyF3tQYJbjtGzKbxEdiBKYwSlDMgku nvpdG8+o9xzvU84j8IBNkXZHMf5nLAlGlT9KRyT3JYdju3vDUKD6OJFSC7M4lcP0 ofKht7IwYP+xKQzT6OFokk3/iG0Hed3GceBb73ll/kT4lj2K9PCwEJDyfQPntU6L Lc6bYZDbNa1XCmeLA+JD1UjvBuIMl+40SYns3/PZjw8Q/T6PxYkNcbaclsVB1WZq Cr8HOJr5xXmR9mG9svSQ+GG5UKN70KRvXO5yjlbJcw/vO+RUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ75TSA5N9WheiiAjoqtlKBX24kvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODRlODQ3NmEtNmU5OC0z YjE2LWEyYjktOTliNWNlMTgzZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAobhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhNhUnx0yVxT6iUDZUDG5Q7feOLJ+9gZA8R1yu8zDpd7/5dVb/MZNgu ffjeYYvmVQCUdsZfywEhmCYFCFnPC1o4qQl3S9DQkHVY4qxjNEp5tzg+VtCaqyX4 3n35VKqj3LPpkTDAlSIUfsVN5VSF09tvxcBkaEXkWTPtsexbly603AxqPs1Ku7hO ayzdfAvJI3QYKgguAbXBoD/8FSS9+4A1yH2KVe5QS8bKKafldky7pdrLDtJRv7Gj bciLrr8YM2ggxCm/v3FNp5Igd1oRk3F6rlLifx65vXTcauhriVkoPxknRLHqNUxy iTVC/nuU3hRQmQ9sRrUHaPUAmddnwok= -----END CERTIFICATE-----Generated at Sun Oct 11 11:29:21 2026 by rpki-client