$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/68e3ab9a-d970-3255-bbd1-8116aee64f35.roa File: 68e3ab9a-d970-3255-bbd1-8116aee64f35.roa (raw, json) Hash identifier: 3VVQE//CZ3RllRBC11f3WLnFqr22szqpHbJmBKJg7sA= Subject key identifier: E2:61:F0:31:E7:AF:2C:20:63:3B:BD:54:BF:0F:60:E0:49:A3:0F:0D Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FE5CABD6EC898B5383EF740 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/68e3ab9a-d970-3255-bbd1-8116aee64f35.roa Signing time: Sat 03 Oct 2026 02:00:15 +0000 ROA not before: Sat 03 Oct 2026 02:00:15 +0000 ROA not after: Fri 01 Jan 2027 03:00:15 +0000 asID: 14299 IP address blocks: 170.146.168.0/21 maxlen: 21 170.146.168.0/24 maxlen: 24 170.146.169.0/24 maxlen: 24 170.146.170.0/24 maxlen: 24 170.146.171.0/24 maxlen: 24 170.146.172.0/24 maxlen: 24 170.146.173.0/24 maxlen: 24 170.146.174.0/24 maxlen: 24 170.146.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:e5:ca:bd:6e:c8:98:b5:38:3e:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:00:15 2026 GMT Not After : Jan 1 03:00:15 2027 GMT Subject: CN=d925b281-644f-4e9b-accb-c591ee2332b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:5d:d6:68:76:d4:a4:36:b7:e0:f8:c7:cc: 8e:2a:da:32:09:02:af:81:a1:fb:bf:01:8e:c3:30: b7:ab:d4:17:6d:92:39:57:76:21:66:ad:b8:e8:57: c8:54:e0:8c:6c:bd:ef:8e:98:4a:cb:31:99:cb:9d: b2:9a:27:fa:94:f1:a4:cb:60:ca:4a:7c:a2:b8:e1: 03:dd:c7:c1:95:76:e0:51:81:f8:55:08:ba:83:1d: 2e:32:0f:36:9a:7d:db:85:61:e2:9a:87:d0:24:33: 1d:e2:95:c0:20:32:e9:9f:02:a2:59:bc:47:5c:1d: e2:b0:3b:ed:91:57:66:a1:61:c4:8e:88:05:52:1f: e9:3f:9f:fc:3a:6f:cc:a2:e4:bd:ac:25:07:9e:85: 87:5d:6d:d1:93:e6:10:bf:5e:12:df:7d:74:fa:fe: 55:38:60:84:32:2b:73:6f:d5:fd:6f:42:e4:6d:3f: 71:0a:fa:ab:ca:4e:a4:7d:75:3c:ec:8a:f7:4d:2a: d8:82:8f:7e:2d:dc:9e:1a:3f:a4:cf:72:2d:bd:db: b6:e5:8c:a8:9a:cf:01:44:ec:42:55:bb:f3:78:d6: 5e:2d:23:c1:1e:cd:0f:7b:ef:49:f3:0d:03:62:f6: ad:a8:38:ff:b0:fb:76:b4:2f:9e:51:b2:bc:d0:27: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:61:F0:31:E7:AF:2C:20:63:3B:BD:54:BF:0F:60:E0:49:A3:0F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/68e3ab9a-d970-3255-bbd1-8116aee64f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c3:cc:bb:ff:58:c8:6f:55:1e:d7:3c:e6:63:65:70:7b:da: 96:fd:da:b5:2b:6a:cd:af:81:b5:e6:a6:8e:58:7d:cd:cd:5f: e1:8a:a7:f4:3c:3a:52:94:e6:fe:63:9b:c0:cb:86:64:9e:89: 3e:5f:71:63:0d:66:cc:ec:50:9c:97:ed:85:b7:b3:ac:39:51: 6e:db:fb:a0:88:f5:2d:06:31:3f:f7:b7:96:c6:4d:4d:dc:dc: a0:48:55:e3:d9:28:a9:66:1b:01:f1:76:ba:05:d4:c1:83:d6: cd:f2:89:70:26:54:0e:4c:59:08:23:fa:e0:2c:27:b5:1e:4f: 6e:09:1f:f6:79:a6:8f:bf:fd:f6:0e:79:96:cc:4d:a7:fa:74: e9:8c:94:2f:20:54:09:5b:57:05:fa:fc:e6:e3:27:70:d5:6f: 26:6e:12:95:6f:bc:03:9f:0f:69:c0:66:d3:19:fb:ed:91:e8: 4c:e2:4d:2d:6a:8d:60:41:c2:52:38:a4:d3:07:63:1f:8f:23: e0:68:e4:d0:dc:7a:a9:be:0b:19:12:43:37:0e:28:b9:ee:5c: f9:81:cd:4c:ac:4f:de:9a:3d:b8:d8:a0:bc:a4:6a:7d:b7:97: 1f:a7:7a:74:43:88:60:e4:0b:2d:af:1e:b6:94:08:1b:ae:cc: 75:4d:bc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f5cq9bsiYtTg+90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMDAxNVoXDTI3MDEwMTAzMDAxNVowLzEtMCsGA1UEAxMk ZDkyNWIyODEtNjQ0Zi00ZTliLWFjY2ItYzU5MWVlMjMzMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho1d1mh21KQ2t+D4x8yOKtoyCQKvgaH7vwGO wzC3q9QXbZI5V3YhZq246FfIVOCMbL3vjphKyzGZy52ymif6lPGky2DKSnyiuOED 3cfBlXbgUYH4VQi6gx0uMg82mn3bhWHimofQJDMd4pXAIDLpnwKiWbxHXB3isDvt kVdmoWHEjogFUh/pP5/8Om/MouS9rCUHnoWHXW3Rk+YQv14S3310+v5VOGCEMitz b9X9b0LkbT9xCvqryk6kfXU87Ir3TSrYgo9+LdyeGj+kz3Itvdu25Yyoms8BROxC VbvzeNZeLSPBHs0Pe+9J8w0DYvatqDj/sPt2tC+eUbK80Cc1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJh8DHnrywgYzu9VL8PYOBJow8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvNjhlM2FiOWEtZDk3MC0z MjU1LWJiZDEtODExNmFlZTY0ZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3DzLv/WMhvVR7XPOZjZXB72pb92rUras2vgbXmpo5Yfc3NX+GKp/Q8 OlKU5v5jm8DLhmSeiT5fcWMNZszsUJyX7YW3s6w5UW7b+6CI9S0GMT/3t5bGTU3c 3KBIVePZKKlmGwHxdroF1MGD1s3yiXAmVA5MWQgj+uAsJ7UeT24JH/Z5po+//fYO eZbMTaf6dOmMlC8gVAlbVwX6/ObjJ3DVbyZuEpVvvAOfD2nAZtMZ++2R6EziTS1q jWBBwlI4pNMHYx+PI+Bo5NDceqm+CxkSQzcOKLnuXPmBzUysT96aPbjYoLykan23 lx+nenRDiGDkCy2vHraUCBuuzHVNvJA= -----END CERTIFICATE-----Generated at Wed Oct 14 18:46:08 2026 by rpki-client