$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/96b11d3d-89f0-3449-9ec1-7e4e5312c8b9.roa File: 96b11d3d-89f0-3449-9ec1-7e4e5312c8b9.roa (raw, json) Hash identifier: vCnCy7g8n1N/zpd7R347+POfG+Hu33TKeaLuud7Z92s= Subject key identifier: 20:32:FA:F5:B0:7D:D7:09:EA:9D:51:58:E9:F5:88:1C:C3:ED:3D:A3 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FE8D03B3BE8687BD70E6B00 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/96b11d3d-89f0-3449-9ec1-7e4e5312c8b9.roa Signing time: Sat 03 Oct 2026 02:06:20 +0000 ROA not before: Sat 03 Oct 2026 02:06:20 +0000 ROA not after: Fri 01 Jan 2027 03:06:20 +0000 asID: 14299 IP address blocks: 170.146.238.0/23 maxlen: 23 170.146.238.0/24 maxlen: 24 170.146.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:e8:d0:3b:3b:e8:68:7b:d7:0e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 02:06:20 2026 GMT Not After : Jan 1 03:06:20 2027 GMT Subject: CN=29ce9d7d-edd7-4f8b-8827-e5efc1145cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:c9:ad:4c:42:cb:11:ec:17:dd:ad:6c:7c: 57:7a:fa:7a:cd:01:a6:54:9f:91:2e:94:82:2f:0c: e3:67:82:6b:a6:f4:5f:1a:cd:c2:91:2f:3d:15:ae: a9:40:d2:50:8e:75:5d:a0:ca:3c:71:e9:31:e8:96: cc:2f:1b:59:12:5a:13:ed:1e:a2:81:d1:87:8f:fc: 1b:73:69:a3:f6:7e:8f:cd:ff:02:f1:2e:a5:02:b9: 2e:df:f1:bd:17:a1:57:24:d4:2f:e5:21:8e:d7:58: 75:31:72:48:f5:56:a1:4d:0b:60:b8:62:75:99:d4: 85:41:ee:c6:df:c3:be:d1:ef:13:91:f9:e7:93:98: 17:2b:4d:0e:3c:7e:51:52:30:12:61:48:c4:07:63: 08:e4:ba:51:0a:bb:62:22:64:98:e5:2b:fb:a9:95: da:f0:9d:c2:3d:a2:68:2c:10:70:a7:a7:64:c1:c9: 3a:2c:11:d1:47:8f:ce:ec:a2:bf:37:44:a4:75:19: e5:58:c4:c5:8a:68:a1:db:3f:b7:34:40:d0:2d:c5: be:83:1d:ce:6d:9d:54:0e:e5:a7:4b:87:26:f7:d0: 9b:18:0f:f8:19:e8:74:94:fe:37:b2:e5:cf:ad:27: 25:73:5e:79:92:5e:97:20:e2:04:9e:78:c7:f7:1f: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:FA:F5:B0:7D:D7:09:EA:9D:51:58:E9:F5:88:1C:C3:ED:3D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/96b11d3d-89f0-3449-9ec1-7e4e5312c8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fd:db:4d:2c:af:66:75:32:b4:b6:22:9c:23:70:da:90:e2: 3f:85:65:82:ea:b0:c8:fd:3f:8d:f0:22:ac:d7:63:82:64:63: 2f:16:e1:c5:46:9c:b5:af:ae:2a:72:b3:2a:a6:04:91:3c:03: 2f:c3:bd:82:fe:57:04:24:11:6f:05:d7:8a:43:f4:02:c6:ef: 99:8a:e2:95:a4:3c:c0:3d:fd:2f:ea:34:69:f0:9c:45:52:7d: 14:68:60:e0:68:52:6b:fd:73:38:f1:58:80:1f:df:2a:0a:d8: 97:76:7c:3c:02:96:0b:fa:f5:7c:4c:96:93:28:46:4a:34:d5: 1c:6b:31:43:2c:15:45:7e:ed:28:ac:e7:99:81:e5:5a:67:0f: 61:53:06:f4:20:7d:27:96:3f:af:5c:1f:3b:e5:69:bd:da:e6: fe:fc:25:07:30:81:03:76:a2:86:61:4e:4a:65:94:fe:53:9d: 77:f6:a3:c4:c3:2a:6c:79:9b:f7:78:7f:2e:f5:59:d5:a1:e8: 0b:19:b6:73:e6:09:7f:ee:fa:ad:07:c8:a6:1d:32:a1:96:ff: e7:c1:cb:7d:ff:d7:73:52:0a:ac:19:f0:ae:33:be:06:45:c9: 64:48:d3:28:d6:13:b0:c2:ca:bd:4f:6d:fc:e0:a7:41:27:fd: 0d:ec:f7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f6NA7O+hoe9cOawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAyMDYyMFoXDTI3MDEwMTAzMDYyMFowLzEtMCsGA1UEAxMk MjljZTlkN2QtZWRkNy00ZjhiLTg4MjctZTVlZmMxMTQ1Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVzJrUxCyxHsF92tbHxXevp6zQGmVJ+RLpSC LwzjZ4JrpvRfGs3CkS89Fa6pQNJQjnVdoMo8cekx6JbMLxtZEloT7R6igdGHj/wb c2mj9n6Pzf8C8S6lArku3/G9F6FXJNQv5SGO11h1MXJI9VahTQtguGJ1mdSFQe7G 38O+0e8Tkfnnk5gXK00OPH5RUjASYUjEB2MI5LpRCrtiImSY5Sv7qZXa8J3CPaJo LBBwp6dkwck6LBHRR4/O7KK/N0SkdRnlWMTFimih2z+3NEDQLcW+gx3ObZ1UDuWn S4cm99CbGA/4Geh0lP43suXPrSclc155kl6XIOIEnnjH9x87cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAy+vWwfdcJ6p1RWOn1iBzD7T2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvOTZiMTFkM2QtODlmMC0z NDQ5LTllYzEtN2U0ZTUzMTJjOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT9200sr2Z1MrS2IpwjcNqQ4j+FZYLqsMj9P43wIqzXY4JkYy8W4cVG nLWvripysyqmBJE8Ay/DvYL+VwQkEW8F14pD9ALG75mK4pWkPMA9/S/qNGnwnEVS fRRoYOBoUmv9czjxWIAf3yoK2Jd2fDwClgv69XxMlpMoRko01RxrMUMsFUV+7Sis 55mB5VpnD2FTBvQgfSeWP69cHzvlab3a5v78JQcwgQN2ooZhTkpllP5TnXf2o8TD Kmx5m/d4fy71WdWh6AsZtnPmCX/u+q0HyKYdMqGW/+fBy33/13NSCqwZ8K4zvgZF yWRI0yjWE7DCyr1Pbfzgp0En/Q3s98U= -----END CERTIFICATE-----Generated at Wed Oct 14 20:22:04 2026 by rpki-client