$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/89e9f9f0-ccbd-3133-84cc-ff499bdfa6be.roa File: 89e9f9f0-ccbd-3133-84cc-ff499bdfa6be.roa (raw, json) Hash identifier: td3KCDneSX9QAEQdFaPwLjc0ASvtnARXitTnJT6hons= Subject key identifier: A1:12:31:2F:4A:5C:06:CB:65:1F:1A:30:49:24:11:A8:B9:40:D3:11 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FECE4E003659A0320E3A100 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/89e9f9f0-ccbd-3133-84cc-ff499bdfa6be.roa Signing time: Sat 03 Oct 2026 02:14:33 +0000 ROA not before: Sat 03 Oct 2026 02:14:33 +0000 ROA not after: Fri 01 Jan 2027 03:14:33 +0000 asID: 14299 IP address blocks: 170.146.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:ec:e4:e0:03:65:9a:03:20:e3:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:14:33 2026 GMT Not After : Jan 1 03:14:33 2027 GMT Subject: CN=e281d722-c5ff-4470-9345-bcd0f3cb624a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:2c:bb:6c:ba:98:b6:fc:62:41:fb:aa:7c: c0:b6:36:95:5d:92:7e:53:66:c1:b9:ca:65:70:b0: d9:cc:03:af:da:66:bd:e6:f8:db:1e:7a:0a:cd:ec: 67:86:fe:c1:99:75:f7:5a:8a:53:13:bd:2e:95:29: cf:63:42:d1:26:90:98:26:88:35:ad:3b:94:d9:73: 14:1d:a0:28:5d:ef:78:9e:36:12:52:66:0c:2a:e6: d8:32:ef:bb:84:8d:aa:79:34:c9:4b:80:11:78:c9: 27:89:0d:8a:dc:34:9b:64:77:13:8f:a7:30:d7:e7: 77:ba:f0:f0:2f:fc:2b:a9:88:c6:0d:ba:0d:a8:9a: 5d:80:17:4f:de:79:ff:53:64:a0:b0:30:60:cd:9f: 3e:db:c4:fc:54:fa:2a:1e:29:dd:78:69:a2:93:1f: 42:37:b7:d3:68:ea:3d:f7:08:12:d3:15:b6:67:44: e4:be:30:a9:42:5a:d0:87:3f:02:b3:16:37:d8:70: ca:1b:55:5f:eb:c5:9a:b0:f1:dc:3b:1b:12:eb:39: 02:c2:7e:88:95:5b:c5:9d:7c:db:97:2e:93:6a:ad: 1e:da:6e:81:b6:29:0a:f9:c6:99:f2:35:44:b2:7f: f4:b2:69:a0:83:42:ca:54:1e:0f:3f:f3:7a:ba:5a: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:31:2F:4A:5C:06:CB:65:1F:1A:30:49:24:11:A8:B9:40:D3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/89e9f9f0-ccbd-3133-84cc-ff499bdfa6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:06:f1:87:6d:77:b8:aa:f2:eb:45:41:35:cd:53:42:f5:c9: 20:2a:3b:0a:cf:6e:10:33:76:12:15:98:bd:c7:35:e3:01:fd: 78:6e:8b:8b:ee:49:17:5a:b1:8d:d4:9c:5f:09:d2:18:50:ed: 07:2e:e2:9c:c4:3a:54:5c:8e:17:16:1a:b6:8f:a6:24:f0:f7: 1d:73:03:43:9b:1e:ab:cf:6d:e3:7d:91:b1:59:53:17:0f:b4: 48:c7:49:9e:73:a3:f6:64:1c:ca:fd:77:ab:ea:54:70:66:f5: bf:70:37:27:38:11:68:20:9d:83:5f:bb:74:29:a7:ec:6b:fb: 2a:c2:63:31:25:fa:84:b3:52:e6:88:23:74:0e:29:1f:9a:30: 56:dc:0a:e9:12:4c:5e:b8:d9:a4:0a:2c:dd:22:2c:ac:c6:10: 41:d4:8d:b2:19:65:4d:27:96:66:fc:a3:4f:fe:fa:cc:18:8a: 16:a6:0e:2a:45:05:05:ac:38:fd:2a:9f:7c:55:e7:52:70:ad: 5a:4a:e5:d3:a2:b4:ee:2e:22:99:ae:d2:1b:b1:7c:68:2c:18: 32:31:72:30:de:8d:cf:e3:96:1f:fc:6c:e8:48:ef:d9:68:b1: ed:a5:3a:a2:f2:0c:4b:e4:7c:60:26:bb:82:89:0b:d6:08:8a: 77:2a:2f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f7OTgA2WaAyDjoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMTQzM1oXDTI3MDEwMTAzMTQzM1owLzEtMCsGA1UEAxMk ZTI4MWQ3MjItYzVmZi00NDcwLTkzNDUtYmNkMGYzY2I2MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBwsu2y6mLb8YkH7qnzAtjaVXZJ+U2bBucpl cLDZzAOv2ma95vjbHnoKzexnhv7BmXX3WopTE70ulSnPY0LRJpCYJog1rTuU2XMU HaAoXe94njYSUmYMKubYMu+7hI2qeTTJS4AReMkniQ2K3DSbZHcTj6cw1+d3uvDw L/wrqYjGDboNqJpdgBdP3nn/U2SgsDBgzZ8+28T8VPoqHindeGmikx9CN7fTaOo9 9wgS0xW2Z0TkvjCpQlrQhz8CsxY32HDKG1Vf68WasPHcOxsS6zkCwn6IlVvFnXzb ly6Taq0e2m6BtikK+caZ8jVEsn/0smmgg0LKVB4PP/N6ulrwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKESMS9KXAbLZR8aMEkkEai5QNMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvODllOWY5ZjAtY2NiZC0z MTMzLTg0Y2MtZmY0OTliZGZhNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpIVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMG8Ydtd7iq8utFQTXNU0L1ySAqOwrPbhAzdhIVmL3HNeMB/Xhui4vu SRdasY3UnF8J0hhQ7Qcu4pzEOlRcjhcWGraPpiTw9x1zA0ObHqvPbeN9kbFZUxcP tEjHSZ5zo/ZkHMr9d6vqVHBm9b9wNyc4EWggnYNfu3Qpp+xr+yrCYzEl+oSzUuaI I3QOKR+aMFbcCukSTF642aQKLN0iLKzGEEHUjbIZZU0nlmb8o0/++swYihamDipF BQWsOP0qn3xV51JwrVpK5dOitO4uIpmu0huxfGgsGDIxcjDejc/jlh/8bOhI79lo se2lOqLyDEvkfGAmu4KJC9YIincqL7A= -----END CERTIFICATE-----Generated at Wed Oct 14 20:22:40 2026 by rpki-client