$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa File: ad879128-7b27-384f-86e9-2c8ebc8566ff.roa (raw, json) Hash identifier: 43IDH0sRLlj4NIDsDxvXmNsNyZpYj/dIxCAj6DgU/fY= Subject key identifier: 60:46:3E:0C:C2:B8:1B:04:FF:07:E8:48:1C:1A:FB:EB:84:E0:80:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973BCF08B542DAE658AC700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21723 IP address blocks: 208.181.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:bc:f0:8b:54:2d:ae:65:8a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d423ad11-b74d-4f05-b157-400c3ee06067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:ce:a9:64:de:9d:2a:31:d0:5b:a3:8e:8a: 53:e0:72:69:1b:87:6c:43:82:66:64:fa:14:4b:26: d7:33:60:06:37:7f:73:57:d7:ef:ed:f2:1b:be:23: 0e:82:8c:95:f8:09:ad:9a:91:ad:0c:f6:88:83:c0: 5e:ff:72:20:2b:ce:08:da:81:da:2d:66:4e:03:2b: ef:35:10:87:20:58:8a:30:dc:9e:81:32:95:83:b5: b5:52:8d:9e:c4:bb:62:a9:1e:a6:87:99:1e:2e:12: 3d:a4:79:2d:d3:2f:5a:1e:43:d5:a8:c9:9b:0a:26: 86:be:50:41:31:80:a3:f5:6c:5a:6e:c2:0d:4d:dc: fe:2e:64:96:bf:ec:ab:d2:ea:e8:d3:5d:78:57:a9: b5:80:e7:7b:2d:98:4d:b2:64:c3:a8:3d:c5:8d:15: 32:c1:91:c6:c7:66:71:c3:8d:b3:41:5a:f2:52:50: 83:84:ea:92:00:94:84:2c:ec:f3:a5:cd:e2:1a:85: fe:67:1d:c3:51:dc:d3:f2:3b:61:28:68:0b:98:32: 9f:15:25:4c:53:3b:84:e1:09:2f:b8:f6:37:96:ca: 6f:01:de:f3:ae:9c:7d:17:c0:0a:c3:cb:19:44:7b: ce:86:c6:1e:d3:33:cf:02:7b:58:d8:89:bb:21:b8: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:46:3E:0C:C2:B8:1B:04:FF:07:E8:48:1C:1A:FB:EB:84:E0:80:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:16:63:04:1f:5c:d3:7f:8e:12:de:7a:51:44:8d:89:32:ef: d8:2b:63:3a:6a:32:64:7c:3a:84:da:77:b5:0d:e8:b3:2a:68: b6:76:77:f1:08:b2:35:64:1a:73:0b:7b:58:b1:bc:de:38:85: 07:f2:d6:41:44:87:1c:be:60:d5:42:23:83:eb:92:ab:b0:58: da:51:f5:14:d8:94:8f:83:e4:35:cd:ea:a7:cd:c2:ed:47:83: aa:57:64:3c:b0:99:70:c1:04:57:fe:40:d8:4d:e2:a5:95:80: 45:c1:7c:1b:16:e7:9d:f2:f9:38:f3:8c:00:52:b7:55:3b:e9: 41:40:92:07:0f:68:1e:4d:55:ce:54:b8:16:6e:7e:87:5e:bd: 38:81:bc:74:25:a6:c7:70:24:6c:60:b9:bf:1e:8f:19:aa:be: 87:e1:bf:9a:bb:85:72:da:d1:9a:26:ce:d1:75:90:6c:1f:00: 85:18:23:1e:7c:4f:33:b7:eb:7c:5c:6d:86:9f:ea:1a:48:af: f1:5d:d9:d6:89:bf:e5:b4:9e:81:ec:d9:54:96:74:92:db:d3: 59:b6:2a:20:be:89:96:71:6b:80:60:ac:4f:11:6c:18:20:6a: 6d:a7:f3:67:a8:47:ff:59:87:3d:44:9f:ad:db:b5:a2:e4:43: ed:76:e2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7zwi1QtrmWKxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQyM2FkMTEtYjc0ZC00ZjA1LWIxNTctNDAwYzNlZTA2MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAnOqWTenSox0FujjopT4HJpG4dsQ4JmZPoU SybXM2AGN39zV9fv7fIbviMOgoyV+AmtmpGtDPaIg8Be/3IgK84I2oHaLWZOAyvv NRCHIFiKMNyegTKVg7W1Uo2exLtiqR6mh5keLhI9pHkt0y9aHkPVqMmbCiaGvlBB MYCj9WxabsINTdz+LmSWv+yr0uro0114V6m1gOd7LZhNsmTDqD3FjRUywZHGx2Zx w42zQVryUlCDhOqSAJSELOzzpc3iGoX+Zx3DUdzT8jthKGgLmDKfFSVMUzuE4Qkv uPY3lspvAd7zrpx9F8AKw8sZRHvOhsYe0zPPAntY2Im7IbjmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBGPgzCuBsE/wfoSBwa++uE4IApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWQ4NzkxMjgtN2IyNy0z ODRmLTg2ZTktMmM4ZWJjODU2NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8WYwQfXNN/jhLeelFEjYky79grYzpqMmR8OoTad7UN6LMqaLZ2d/EI sjVkGnMLe1ixvN44hQfy1kFEhxy+YNVCI4PrkquwWNpR9RTYlI+D5DXN6qfNwu1H g6pXZDywmXDBBFf+QNhN4qWVgEXBfBsW553y+TjzjABSt1U76UFAkgcPaB5NVc5U uBZufodevTiBvHQlpsdwJGxgub8ejxmqvofhv5q7hXLa0ZomztF1kGwfAIUYIx58 TzO363xcbYaf6hpIr/Fd2daJv+W0noHs2VSWdJLb01m2KiC+iZZxa4BgrE8RbBgg am2n82eoR/9Zhz1En63btaLkQ+124gk= -----END CERTIFICATE-----Generated at Thu Oct 8 19:29:24 2026 by rpki-client