$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/46a5597b-5149-380b-adeb-90a6b76bc778.roa File: 46a5597b-5149-380b-adeb-90a6b76bc778.roa (raw, json) Hash identifier: 4FUVz+JPsf2m/e8TQq4j4vQXEej3LVxzKefh1lW3jns= Subject key identifier: 87:BC:A0:F1:4F:AA:07:A9:35:B5:57:01:95:7E:35:EB:F5:68:E8:93 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FF075623A8C1A0886C1D280 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/46a5597b-5149-380b-adeb-90a6b76bc778.roa Signing time: Sat 03 Oct 2026 02:21:44 +0000 ROA not before: Sat 03 Oct 2026 02:21:44 +0000 ROA not after: Fri 01 Jan 2027 03:21:44 +0000 asID: 14299 IP address blocks: 170.146.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:f0:75:62:3a:8c:1a:08:86:c1:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:21:44 2026 GMT Not After : Jan 1 03:21:44 2027 GMT Subject: CN=4b18faa4-5b80-458e-9066-fc41a557fdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:d0:a1:38:30:d4:9b:03:9f:73:f2:7c:cb: 74:2d:18:54:1a:4a:ff:45:a9:e7:3f:75:9d:38:74: d6:9d:6e:8e:a9:c8:35:85:62:ac:1c:3a:c7:84:ea: 27:28:38:90:45:7e:9b:b9:40:1b:8e:b5:50:cd:b8: 3f:e5:9b:7a:5f:7b:bd:32:1c:3b:34:84:fa:56:e3: de:7f:26:01:7b:0b:48:7e:82:86:b9:8a:9a:f4:32: 30:8b:7b:92:e2:89:14:b9:a5:61:c6:8a:ec:3d:db: cd:d2:db:fe:0d:58:d4:57:a2:2e:6b:77:bc:49:6a: 15:22:4b:e8:49:83:b4:6e:01:1d:ad:2e:75:e3:a9: c7:62:ba:6a:0d:45:3c:d4:4c:4b:a0:64:e6:e3:ae: 41:41:13:ce:34:9d:ce:95:84:d7:a1:9f:59:b4:e7: 61:62:b3:5c:3b:69:dd:3d:f6:7b:2c:a1:6b:04:f6: 1c:30:0f:73:d4:a8:5d:e8:e8:40:b7:ac:82:24:49: b4:b7:21:52:c4:f0:a9:29:69:64:83:96:e5:6b:cc: 4c:16:fd:1b:1e:39:02:6c:44:20:ef:a0:55:8c:ae: d0:7b:cc:d6:88:cd:45:d6:2a:94:d7:64:a4:02:8c: c5:39:64:dd:74:ad:34:e1:00:7e:43:f1:31:05:07: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:A0:F1:4F:AA:07:A9:35:B5:57:01:95:7E:35:EB:F5:68:E8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/46a5597b-5149-380b-adeb-90a6b76bc778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:84:03:4c:99:f4:7c:6e:37:13:fe:a9:8c:d2:e2:e9:56:c6: ed:c4:6d:66:44:d7:88:e4:6f:eb:53:8d:57:47:23:be:f1:a2: 24:37:1a:a5:f2:0a:30:16:64:36:e1:e2:70:ed:be:ee:3b:96: 06:32:59:b3:5b:5d:00:4e:4b:d5:cd:3b:6e:65:fd:d0:dc:3d: 2b:78:d7:e3:8f:94:03:be:2c:b5:16:85:64:83:1d:09:32:16: ed:5f:e3:76:2b:12:c1:35:a4:ef:31:84:d8:f4:62:45:21:59: da:ec:b5:46:20:79:29:1b:37:1a:85:07:80:c6:e8:c8:b2:ad: 29:ca:67:23:c4:d8:14:40:62:cc:f6:fb:ad:ca:de:5e:96:3c: ec:db:a6:42:85:74:52:f4:d9:29:ff:83:85:8e:11:7e:af:6b: 38:df:62:12:74:d2:ee:c6:c4:17:23:1d:f8:b9:27:f5:b5:d9: 32:68:c4:c4:91:bc:35:24:b1:ce:62:23:4a:3e:88:70:13:b7: e1:30:2a:46:7f:8b:40:61:40:42:84:ba:d9:83:9a:ca:f9:9d: ac:70:8b:73:c3:48:77:e5:52:61:f5:51:ce:16:4b:c1:37:03: 48:92:55:fe:0f:90:46:dd:89:c6:37:18:09:8b:b3:e1:43:1f: d5:45:47:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f8HViOowaCIbB0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMjE0NFoXDTI3MDEwMTAzMjE0NFowLzEtMCsGA1UEAxMk NGIxOGZhYTQtNWI4MC00NThlLTkwNjYtZmM0MWE1NTdmZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpfQoTgw1JsDn3PyfMt0LRhUGkr/RannP3Wd OHTWnW6Oqcg1hWKsHDrHhOonKDiQRX6buUAbjrVQzbg/5Zt6X3u9Mhw7NIT6VuPe fyYBewtIfoKGuYqa9DIwi3uS4okUuaVhxorsPdvN0tv+DVjUV6Iua3e8SWoVIkvo SYO0bgEdrS5146nHYrpqDUU81ExLoGTm465BQRPONJ3OlYTXoZ9ZtOdhYrNcO2nd PfZ7LKFrBPYcMA9z1Khd6OhAt6yCJEm0tyFSxPCpKWlkg5bla8xMFv0bHjkCbEQg 76BVjK7Qe8zWiM1F1iqU12SkAozFOWTddK004QB+Q/ExBQc4JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe8oPFPqgepNbVXAZV+Nev1aOiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvNDZhNTU5N2ItNTE0OS0z ODBiLWFkZWItOTBhNmI3NmJjNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOEA0yZ9HxuNxP+qYzS4ulWxu3EbWZE14jkb+tTjVdHI77xoiQ3GqXy CjAWZDbh4nDtvu47lgYyWbNbXQBOS9XNO25l/dDcPSt41+OPlAO+LLUWhWSDHQky Fu1f43YrEsE1pO8xhNj0YkUhWdrstUYgeSkbNxqFB4DG6MiyrSnKZyPE2BRAYsz2 +63K3l6WPOzbpkKFdFL02Sn/g4WOEX6vazjfYhJ00u7GxBcjHfi5J/W12TJoxMSR vDUksc5iI0o+iHATt+EwKkZ/i0BhQEKEutmDmsr5naxwi3PDSHflUmH1Uc4WS8E3 A0iSVf4PkEbdicY3GAmLs+FDH9VFR40= -----END CERTIFICATE-----Generated at Thu Oct 15 10:27:42 2026 by rpki-client