$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa File: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (raw, json) Hash identifier: BHyAYb/jl19dv9wkB7ZydQUX9wAPgWVe1qeKs/KvXY8= Subject key identifier: 36:7C:77:ED:F1:77:4E:DD:70:49:06:D6:42:3F:07:76:97:42:75:BC Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584F225D1F52EBCBDD1473D56C80 Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 25968 IP address blocks: 147.174.0.0/16 maxlen: 16 147.174.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:1f:52:eb:cb:dd:14:73:d5:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=b899e291-56e7-4404-89ed-f8199abe62aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:fd:93:22:8d:5a:70:3e:2d:c1:97:17:0a: c0:a3:67:09:bf:4b:f1:b2:d0:23:60:77:58:f8:06: 70:63:49:66:d1:92:f4:53:10:d7:eb:4d:0e:e5:c9: f3:c0:d5:3f:07:23:3b:e8:d6:5b:d8:36:2a:bc:2c: 08:f2:1d:5f:d4:d5:f3:a2:61:96:6e:e5:08:67:a3: 89:4f:f0:09:91:77:1b:93:ff:ab:a4:16:a0:29:a9: 5b:f0:bd:ef:33:b8:70:10:a7:26:c9:5d:ad:4c:7e: 14:15:93:a2:7a:19:96:46:f6:ac:72:5d:a6:fd:83: 03:18:af:97:d6:f3:9d:7b:87:29:19:04:e1:3a:f0: cc:09:05:88:aa:c1:d9:6b:26:2d:16:68:8f:0e:c7: 11:bb:46:65:9c:91:cb:fb:c9:18:1b:9c:68:44:20: c8:29:78:e3:ca:1b:ba:a7:c7:03:58:fa:6e:f8:15: fa:b4:5d:f5:63:62:d8:96:f4:88:15:6c:2c:3b:6e: 9d:ea:51:20:a1:39:fe:61:02:7a:7e:92:6f:22:29: 6c:15:d2:ce:dd:f2:9f:2d:aa:c9:31:63:ab:75:80: 77:a6:08:1f:05:31:86:ab:72:ea:da:49:6e:4b:1c: 45:ce:3e:73:ab:51:e1:24:cf:f6:03:76:16:b6:69: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:77:ED:F1:77:4E:DD:70:49:06:D6:42:3F:07:76:97:42:75:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: 147.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2e:5e:6f:fd:61:ef:19:2f:3e:23:2a:43:9b:17:4d:50:89: 1b:39:6a:f6:d2:44:b0:e9:09:29:60:85:c6:ef:a8:9e:f3:85: 50:b4:74:f8:02:a8:4e:2c:1f:e3:ef:28:53:bc:18:53:a2:a0: 2a:e6:34:44:0f:fe:c2:00:e8:b6:1f:1b:29:32:11:87:d4:8a: ee:63:24:d0:9a:a0:48:94:d0:f9:0d:b1:c0:93:a9:1c:54:ed: 01:1c:1f:07:d1:2e:e9:8a:dd:6b:a7:b1:aa:b9:e2:51:dc:78: f4:4e:89:67:94:e0:dc:12:3f:48:06:01:c1:93:ad:51:99:d1: 00:0e:05:64:27:cf:f9:62:2e:22:ca:e9:d2:e0:29:04:57:b7: 62:85:68:fc:02:f5:6c:57:58:6c:37:c3:69:23:04:00:ea:6e: f5:50:78:45:49:8a:70:5d:8e:15:9e:3a:e4:88:b9:96:47:f0: 03:3c:35:54:f2:62:2a:e2:f4:1c:b8:33:43:d5:66:26:77:aa: 8f:b4:88:b5:b9:1f:fd:86:ac:64:8b:ad:f1:ca:61:3c:92:14: 93:f6:79:31:e1:7a:d4:09:e9:ff:98:60:04:d9:31:3d:99:4d: 0e:6a:53:c0:1c:3f:b5:54:8b:38:b7:4e:05:3a:cd:6a:5e:7e: 24:74:2c:43 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8iXR9S68vdFHPVbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg5OWUyOTEtNTZlNy00NDA0LTg5ZWQtZjgxOTlhYmU2MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzr9kyKNWnA+LcGXFwrAo2cJv0vxstAjYHdY +AZwY0lm0ZL0UxDX600O5cnzwNU/ByM76NZb2DYqvCwI8h1f1NXzomGWbuUIZ6OJ T/AJkXcbk/+rpBagKalb8L3vM7hwEKcmyV2tTH4UFZOiehmWRvascl2m/YMDGK+X 1vOde4cpGQThOvDMCQWIqsHZayYtFmiPDscRu0ZlnJHL+8kYG5xoRCDIKXjjyhu6 p8cDWPpu+BX6tF31Y2LYlvSIFWwsO26d6lEgoTn+YQJ6fpJvIilsFdLO3fKfLarJ MWOrdYB3pggfBTGGq3Lq2kluSxxFzj5zq1HhJM/2A3YWtmnb0wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDZ8d+3xd07dcEkG1kI/B3aXQnW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvODVmNmIxZTEtODM0NS0z M2IyLTljMmEtNGM1OWVjOWQ0NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk64wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARy5eb/1h7xkvPiMqQ5sXTVCJGzlq9tJEsOkJKWCFxu+onvOFULR0+AKo Tiwf4+8oU7wYU6KgKuY0RA/+wgDoth8bKTIRh9SK7mMk0JqgSJTQ+Q2xwJOpHFTt ARwfB9Eu6Yrda6exqrniUdx49E6JZ5Tg3BI/SAYBwZOtUZnRAA4FZCfP+WIuIsrp 0uApBFe3YoVo/AL1bFdYbDfDaSMEAOpu9VB4RUmKcF2OFZ465Ii5lkfwAzw1VPJi KuL0HLgzQ9VmJneqj7SItbkf/YasZIut8cphPJIUk/Z5MeF61Anp/5hgBNkxPZlN DmpTwBw/tVSLOLdOBTrNal5+JHQsQw== -----END CERTIFICATE-----Generated at Tue Sep 29 04:36:55 2026 by rpki-client