$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/38651fd1-f1fa-3898-8ee8-736738049cc5.roa File: 38651fd1-f1fa-3898-8ee8-736738049cc5.roa (raw, json) Hash identifier: u0VTrOCNzshzjdz4Mcd41JKSGMoiv+v6rbbacMBNy9Y= Subject key identifier: 39:CD:A2:36:D9:85:52:3E:88:4D:D9:03:82:D7:CD:4B:BE:7A:C0:73 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FE752F6FFA981AA7B1A0E8E Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/38651fd1-f1fa-3898-8ee8-736738049cc5.roa Signing time: Sat 03 Oct 2026 02:03:20 +0000 ROA not before: Sat 03 Oct 2026 02:03:20 +0000 ROA not after: Fri 01 Jan 2027 03:03:20 +0000 asID: 14299 IP address blocks: 170.146.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:e7:52:f6:ff:a9:81:aa:7b:1a:0e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:03:20 2026 GMT Not After : Jan 1 03:03:20 2027 GMT Subject: CN=fe536ded-a49b-4dc6-813b-1d7625bc6f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:55:ea:59:97:a0:4b:39:17:fc:d9:00:f6: da:bf:06:24:7e:32:f5:a4:0c:87:7f:1f:aa:ad:63: d7:1c:ab:80:8a:f7:ff:62:0d:61:71:1a:18:a3:cb: c8:9e:d8:69:4c:47:21:e6:39:01:51:31:8e:0b:55: 74:86:5f:d5:e4:ed:60:90:eb:41:ee:43:48:42:48: fc:76:f6:6a:d4:23:ac:de:59:e3:ea:b7:9a:29:f2: 4e:fe:d9:a0:76:50:c9:e4:af:1d:5a:0c:a7:46:2d: 04:1c:17:f6:a7:20:1b:3f:c3:94:5f:b3:c0:01:1f: aa:50:0f:72:84:c1:f2:09:d1:b9:67:db:80:46:be: 93:db:56:5c:e2:76:d5:df:8a:04:2b:50:27:e1:4f: da:57:f7:34:32:6c:dc:c3:50:bf:4c:b6:8b:57:4f: 2e:e7:1d:72:2a:9d:f9:54:dd:54:6e:c0:d7:a9:41: 05:56:85:34:20:1a:cb:4c:8d:19:56:5b:c9:f1:85: d9:83:b0:44:5a:9b:28:5d:6b:34:6d:22:4e:de:8e: a3:05:e0:19:d3:71:89:97:d5:ac:92:21:fa:bd:d1: 53:5b:c1:95:c1:e3:50:f5:0d:26:c9:36:d8:54:69: 1c:d4:da:23:c4:8b:f6:2a:d3:18:5e:9c:79:97:2b: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:A2:36:D9:85:52:3E:88:4D:D9:03:82:D7:CD:4B:BE:7A:C0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/38651fd1-f1fa-3898-8ee8-736738049cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e3:84:87:24:9d:d4:b0:cc:e5:db:a5:89:75:62:d5:a7:dd: e5:b9:bc:ab:85:cd:29:83:48:ae:c8:4b:8d:da:8f:02:cf:33: 34:ce:87:bf:97:6b:51:dd:3b:03:a8:6a:56:d9:c2:e3:c6:be: 05:32:56:99:29:18:49:ad:5d:37:6e:9d:eb:5a:4f:cf:41:70: e1:fd:50:75:4e:aa:68:7b:79:74:1c:ff:2f:88:ae:93:5f:bc: b2:93:36:27:66:32:9b:c5:48:17:28:f7:f9:3e:77:cf:80:dc: d8:e6:b8:bf:bf:26:39:42:b9:01:49:6a:91:98:64:f8:be:33: 12:1a:33:56:22:07:b2:2b:a2:49:00:6f:d9:fa:69:92:a2:22: e0:95:cb:7e:85:44:a1:fe:88:68:5b:8b:94:15:1e:c6:6c:a1: 74:e0:5a:f7:62:c9:d2:95:82:8e:44:33:5c:6d:62:21:0e:52: 72:b7:f1:7c:5e:b1:e2:ef:c3:49:16:42:ad:6c:95:2a:af:78: 2b:1b:a2:0f:91:a1:cb:e0:6a:f8:94:45:2d:80:3d:ae:40:45: 94:47:d7:53:da:4d:1c:91:c1:6a:8b:30:8c:29:a3:ec:b5:b1: 4b:d2:8d:39:52:dd:4e:22:98:ba:2e:6a:ee:c5:2e:bd:29:d0: 20:1d:70:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f51L2/6mBqnsaDo4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMDMyMFoXDTI3MDEwMTAzMDMyMFowLzEtMCsGA1UEAxMk ZmU1MzZkZWQtYTQ5Yi00ZGM2LTgxM2ItMWQ3NjI1YmM2ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmalV6lmXoEs5F/zZAPbavwYkfjL1pAyHfx+q rWPXHKuAivf/Yg1hcRoYo8vInthpTEch5jkBUTGOC1V0hl/V5O1gkOtB7kNIQkj8 dvZq1COs3lnj6reaKfJO/tmgdlDJ5K8dWgynRi0EHBf2pyAbP8OUX7PAAR+qUA9y hMHyCdG5Z9uARr6T21Zc4nbV34oEK1An4U/aV/c0Mmzcw1C/TLaLV08u5x1yKp35 VN1UbsDXqUEFVoU0IBrLTI0ZVlvJ8YXZg7BEWpsoXWs0bSJO3o6jBeAZ03GJl9Ws kiH6vdFTW8GVweNQ9Q0myTbYVGkc1NojxIv2KtMYXpx5lyu+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnNojbZhVI+iE3ZA4LXzUu+esBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvMzg2NTFmZDEtZjFmYS0z ODk4LThlZTgtNzM2NzM4MDQ5Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzjhIckndSwzOXbpYl1YtWn3eW5vKuFzSmDSK7IS43ajwLPMzTOh7+X a1HdOwOoalbZwuPGvgUyVpkpGEmtXTdunetaT89BcOH9UHVOqmh7eXQc/y+IrpNf vLKTNidmMpvFSBco9/k+d8+A3NjmuL+/JjlCuQFJapGYZPi+MxIaM1YiB7IrokkA b9n6aZKiIuCVy36FRKH+iGhbi5QVHsZsoXTgWvdiydKVgo5EM1xtYiEOUnK38Xxe seLvw0kWQq1slSqveCsbog+RocvgaviURS2APa5ARZRH11PaTRyRwWqLMIwpo+y1 sUvSjTlS3U4imLouau7FLr0p0CAdcEU= -----END CERTIFICATE-----Generated at Wed Oct 14 18:46:36 2026 by rpki-client