$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa File: 3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa (raw, json) Hash identifier: oZ1Qfy9lN+zDkcma5nNoaj/sYB7kZCToemFjNQ9fIjE= Subject key identifier: 63:33:BA:DC:7A:04:2F:C4:35:C7:14:AB:5B:2E:89:BC:6A:B2:35:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB3AAE0EE06E1A9FD6C3BFB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 146.235.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:aa:e0:ee:06:e1:a9:fd:6c:3b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=c121b9c2-366b-4df1-8f7d-656c5874e8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:a6:d4:47:b1:8b:e6:c1:2c:ed:05:9d:ea: 62:03:0c:36:0e:4b:1f:1a:19:9f:c3:4b:ea:bd:29: 9a:ea:e1:3f:7a:87:88:f7:de:93:33:6e:9e:a6:7d: 74:09:b3:7a:53:3d:df:db:4f:58:cd:67:9d:85:83: 33:87:be:f5:2d:8b:e6:63:09:9d:c7:c4:bf:2c:6f: 81:aa:ae:4a:b7:f3:ae:2d:36:90:43:52:16:31:7c: 6e:a2:99:b1:83:92:c4:bc:87:6c:5a:04:25:a0:36: 01:d1:55:59:43:9f:fd:7a:24:98:1a:2c:17:22:07: d1:8a:fc:b3:fc:f3:92:ab:ce:18:08:1a:d1:81:ed: c2:6a:b5:c4:ab:23:8a:6a:0c:08:82:50:c9:a3:fe: df:84:f7:ce:4b:54:c2:d0:e1:31:f2:ca:54:9f:94: bf:e4:06:ba:b0:db:0f:3d:6d:e5:ac:72:63:46:45: 45:21:56:66:5a:a2:16:33:bf:1e:5e:53:7b:3d:f2: 38:f0:69:58:7b:ae:e3:6c:72:15:09:5c:51:b5:42: 8e:bd:42:f2:d3:5b:56:86:55:30:2e:c1:ee:45:ce: e0:ad:c3:ff:b8:46:41:fb:ad:54:57:0f:bc:13:71: 2d:fe:5c:28:8a:ef:63:a3:12:ee:de:64:ba:aa:73: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:BA:DC:7A:04:2F:C4:35:C7:14:AB:5B:2E:89:BC:6A:B2:35:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:93:d0:41:d0:56:16:91:0a:da:9e:b2:65:10:4a:6a:19:18: 93:b4:bf:45:50:ef:2b:1f:7d:7f:ec:7d:32:d8:8d:b8:3d:1a: c0:1e:54:ef:13:77:93:35:69:f2:8d:b3:11:e8:20:b8:87:42: 43:a5:68:19:bb:3f:3b:db:25:de:61:57:d9:11:81:f6:8c:f4: 38:d9:5b:96:3e:81:d4:c8:b3:9a:59:ae:64:2a:fb:29:17:69: 9b:bf:27:e7:34:31:1d:ea:c0:e6:a1:09:6b:2b:e3:69:51:b6: e6:fa:8a:5d:3f:b0:12:9b:a4:09:5c:c7:c1:9c:5a:88:0d:47: 92:52:1e:45:e0:55:64:b0:06:a8:ca:a9:8b:97:53:c7:9a:c1: 00:0a:01:55:6b:ab:48:30:4d:8a:70:db:ae:9c:4a:14:5c:38: 97:ce:ae:38:b7:91:f5:82:da:c1:64:48:96:e0:b1:a4:87:e5: d1:94:df:0f:26:19:07:38:c8:2e:89:0a:0b:97:7e:2b:c7:36: 0f:8a:70:dd:6b:18:82:87:49:af:81:4c:d4:03:5c:32:9c:98: 23:8c:63:13:40:4f:6a:05:a2:28:1b:ab:ac:12:3d:70:ed:be: d6:be:ab:e0:36:b7:da:c0:b7:83:f7:4e:b8:e1:85:a7:9c:75: e4:e5:42:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zquDuBuGp/Ww7+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YzEyMWI5YzItMzY2Yi00ZGYxLThmN2QtNjU2YzU4NzRlOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+6m1Eexi+bBLO0FnepiAww2DksfGhmfw0vq vSma6uE/eoeI996TM26epn10CbN6Uz3f209YzWedhYMzh771LYvmYwmdx8S/LG+B qq5Kt/OuLTaQQ1IWMXxuopmxg5LEvIdsWgQloDYB0VVZQ5/9eiSYGiwXIgfRivyz /POSq84YCBrRge3CarXEqyOKagwIglDJo/7fhPfOS1TC0OEx8spUn5S/5Aa6sNsP PW3lrHJjRkVFIVZmWqIWM78eXlN7PfI48GlYe67jbHIVCVxRtUKOvULy01tWhlUw LsHuRc7grcP/uEZB+61UVw+8E3Et/lwoiu9joxLu3mS6qnOVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMzutx6BC/ENccUq1suibxqsjWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2E0YzRlMjItZTJkNi0z OTYyLWFkOGItZThkZDI4ODBhN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkuvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaT0EHQVhaRCtqesmUQSmoZGJO0v0VQ7ysffX/sfTLYjbg9GsAeVO8T d5M1afKNsxHoILiHQkOlaBm7PzvbJd5hV9kRgfaM9DjZW5Y+gdTIs5pZrmQq+ykX aZu/J+c0MR3qwOahCWsr42lRtub6il0/sBKbpAlcx8GcWogNR5JSHkXgVWSwBqjK qYuXU8eawQAKAVVrq0gwTYpw266cShRcOJfOrji3kfWC2sFkSJbgsaSH5dGU3w8m GQc4yC6JCguXfivHNg+KcN1rGIKHSa+BTNQDXDKcmCOMYxNAT2oFoigbq6wSPXDt vta+q+A2t9rAt4P3TrjhhaecdeTlQmA= -----END CERTIFICATE-----Generated at Thu Nov 5 11:07:54 2026 by rpki-client