$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d74bbdc-e2bb-367f-89a8-4ece419a54e0.roa File: 8d74bbdc-e2bb-367f-89a8-4ece419a54e0.roa (raw, json) Hash identifier: vjxZCP8BWoT1eNcgIHD6b9KvlGHJaVHo5CxoYL7yA6A= Subject key identifier: D8:4B:33:8B:87:B2:CE:24:77:79:E3:68:38:1E:82:4E:D0:5E:C9:1C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4975C6B0D1FB28D9D888F400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d74bbdc-e2bb-367f-89a8-4ece419a54e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14663 IP address blocks: 161.184.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:c6:b0:d1:fb:28:d9:d8:88:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=010d4459-096d-4730-a34e-33ecb56fe655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:94:f3:11:90:86:48:23:b1:88:60:33:d0: 03:f4:02:e9:53:b4:1a:50:37:56:1d:9a:ff:e0:01: 76:bf:bb:1f:05:2f:79:41:ff:05:95:61:8c:a1:73: b4:d2:13:f8:4d:19:37:1f:4f:39:ca:32:d6:76:75: cf:31:59:cc:0c:ca:41:2a:c0:5c:f4:07:88:ff:d4: 8a:76:bd:9c:45:08:7a:4a:d7:31:28:0f:63:de:48: 11:78:59:d9:4a:ae:29:b5:3e:d9:17:2b:98:83:8b: 2b:42:d9:65:53:68:57:25:14:4c:cd:2c:09:0c:77: 8b:0b:c8:f2:21:65:9c:eb:ec:03:1e:28:0c:8c:6f: 0c:95:a9:28:d7:07:5c:a6:57:58:a9:b8:5c:fa:2c: 9e:fc:de:5f:de:31:f9:f2:33:d7:c6:99:fa:b1:0c: 87:8c:fa:1b:a0:2a:74:12:1c:f3:9f:a5:a9:a6:be: 06:69:c4:86:b0:d2:4d:19:12:6a:78:84:3a:32:07: c8:63:84:f0:10:28:35:f9:d2:cc:ef:3c:e6:86:d3: ee:54:21:f5:6c:c3:25:ec:32:f3:33:11:2e:58:8f: 07:52:f5:6b:c6:21:6f:47:70:ed:4e:e1:0a:0d:c2: 5a:ae:1d:df:fd:d7:24:5d:95:2d:ca:31:b9:49:11: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:33:8B:87:B2:CE:24:77:79:E3:68:38:1E:82:4E:D0:5E:C9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d74bbdc-e2bb-367f-89a8-4ece419a54e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 161.184.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ad:df:bd:83:05:6f:4b:fb:d3:b5:c6:29:c5:12:91:a1:92: c4:18:1a:1a:4e:58:63:81:fd:aa:fe:cf:41:bd:c3:f2:c8:8b: 9c:37:38:22:c6:bd:b1:15:aa:87:ca:23:02:24:fe:b0:d0:cd: 92:ca:eb:fe:45:aa:73:9f:cb:5d:95:28:6c:e3:1e:fd:14:1e: ea:93:bb:05:e1:4d:a9:b8:a4:ce:1b:e3:68:29:9a:70:fc:e5: ed:d0:e5:87:a0:f8:f3:9e:3d:5b:96:b1:e3:5b:db:cf:50:98: 41:d5:98:be:27:59:67:0c:c1:cc:a2:7e:55:9c:cb:69:43:b9: d2:19:05:34:5b:a0:02:4a:ff:2d:b7:0a:75:56:4e:df:d0:fe: c2:8e:05:7c:e2:48:16:cb:0b:6c:5c:6b:14:c0:74:01:30:e3: 31:5b:57:45:28:1e:15:45:ca:4c:11:0b:5c:dd:db:9f:8d:41: 1c:8e:8c:8d:c2:38:5f:ed:6f:26:30:7b:df:4b:94:7b:b0:95: 96:b1:e1:c4:23:60:45:e3:b8:0f:a2:cb:41:ac:eb:0b:53:84: 3b:70:86:f2:c1:65:a6:bc:4e:ee:ac:df:82:f3:ee:f3:a9:f5: d3:20:18:22:c4:a5:e6:f2:a1:a5:34:0e:dc:35:90:07:ae:10: a1:a2:c5:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdcaw0fso2diI9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDEwZDQ0NTktMDk2ZC00NzMwLWEzNGUtMzNlY2I1NmZlNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cWU8xGQhkgjsYhgM9AD9ALpU7QaUDdWHZr/ 4AF2v7sfBS95Qf8FlWGMoXO00hP4TRk3H085yjLWdnXPMVnMDMpBKsBc9AeI/9SK dr2cRQh6StcxKA9j3kgReFnZSq4ptT7ZFyuYg4srQtllU2hXJRRMzSwJDHeLC8jy IWWc6+wDHigMjG8Mlako1wdcpldYqbhc+iye/N5f3jH58jPXxpn6sQyHjPoboCp0 Ehzzn6Wppr4GacSGsNJNGRJqeIQ6MgfIY4TwECg1+dLM7zzmhtPuVCH1bMMl7DLz MxEuWI8HUvVrxiFvR3DtTuEKDcJarh3f/dckXZUtyjG5SRGCSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhLM4uHss4kd3njaDgegk7QXskcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQ3NGJiZGMtZTJiYi0z NjdmLTg5YTgtNGVjZTQxOWE1NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAobhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGt372DBW9L+9O1xinFEpGhksQYGhpOWGOB/ar+z0G9w/LIi5w3OCLG vbEVqofKIwIk/rDQzZLK6/5FqnOfy12VKGzjHv0UHuqTuwXhTam4pM4b42gpmnD8 5e3Q5Yeg+POePVuWseNb289QmEHVmL4nWWcMwcyiflWcy2lDudIZBTRboAJK/y23 CnVWTt/Q/sKOBXziSBbLC2xcaxTAdAEw4zFbV0UoHhVFykwRC1zd25+NQRyOjI3C OF/tbyYwe99LlHuwlZax4cQjYEXjuA+iy0Gs6wtThDtwhvLBZaa8Tu6s34Lz7vOp 9dMgGCLEpebyoaU0Dtw1kAeuEKGixQo= -----END CERTIFICATE-----Generated at Tue Sep 29 08:19:01 2026 by rpki-client