$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/bf8da76e-0b83-37a9-bd0d-80496e3bf260.roa File: bf8da76e-0b83-37a9-bd0d-80496e3bf260.roa (raw, json) Hash identifier: dbn44neQrGAlopBhLe1xkMD0Rss0cE6VGLcSPXLm1ko= Subject key identifier: 17:6B:B5:D4:91:2A:C8:18:7A:F8:01:2C:73:27:26:AC:C9:59:96:31 Certificate issuer: /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Certificate serial: 010D0C9F4328584F5FDBD6F31AE02FE2E811E400 Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/bf8da76e-0b83-37a9-bd0d-80496e3bf260.roa Signing time: Sat 03 Oct 2026 01:40:12 +0000 ROA not before: Sat 03 Oct 2026 01:40:12 +0000 ROA not after: Fri 01 Jan 2027 02:40:12 +0000 asID: 14299 IP address blocks: 170.146.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:db:d6:f3:1a:e0:2f:e2:e8:11:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5 Validity Not Before: Oct 3 01:40:12 2026 GMT Not After : Jan 1 02:40:12 2027 GMT Subject: CN=5f9ed6ed-e658-41b5-ab46-38fe55d79261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:3d:c2:fc:4b:3d:ba:7e:38:d0:32:86:9e: 42:be:d7:f8:ed:51:28:09:e5:97:2c:54:e3:8d:a2: 05:a3:38:2b:3c:43:e1:01:04:bd:5b:0c:5f:70:0c: a1:6a:f4:2b:3d:8b:9a:d4:0d:f0:4e:14:f9:8c:44: bb:f1:32:3f:fa:a0:75:a0:9e:32:66:e1:c8:52:5b: c8:49:8e:22:63:27:30:f8:d6:ad:e4:33:aa:82:2d: 2a:23:9d:41:1a:a2:10:88:aa:1d:06:c0:23:2b:27: e1:8b:72:f8:a0:7c:d9:9d:91:ba:14:d5:fd:49:ac: 4c:d8:58:e1:4d:bc:52:28:7d:fa:ad:f8:aa:26:72: cd:f1:4d:57:e6:65:f7:fe:78:7f:3b:8d:85:c0:bc: 7c:db:a4:87:29:34:e5:61:c0:67:9c:c5:7e:41:19: 5d:89:37:c7:e4:37:02:75:48:4e:bf:af:5b:de:89: ec:c3:d5:bb:5b:77:dc:59:fe:92:ff:47:df:2f:41: be:e7:d8:eb:f7:63:e1:c2:af:bc:50:36:64:a3:fb: 0b:02:71:01:dd:5b:c0:27:7e:03:44:31:f1:f0:98: 02:2e:cb:26:cd:62:67:3b:38:91:e0:72:e0:6f:91: 01:19:6e:3b:71:51:7c:8f:29:d0:6d:c0:0a:eb:f0: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6B:B5:D4:91:2A:C8:18:7A:F8:01:2C:73:27:26:AC:C9:59:96:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/bf8da76e-0b83-37a9-bd0d-80496e3bf260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl X509v3 Authority Key Identifier: keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer sbgp-ipAddrBlock: critical IPv4: 170.146.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b3:d2:fe:c3:5d:d6:68:cc:13:a4:19:40:20:9f:30:03:b0: 36:de:3b:ba:54:cc:31:5a:46:7b:96:e9:eb:4c:b7:c1:c5:18: b4:f5:a1:3a:5b:24:7c:0c:61:60:e5:56:6f:99:4f:bb:68:56: 00:40:0f:c9:78:cc:e0:ed:37:47:23:c9:94:74:44:74:3d:df: cd:88:b0:89:ad:c0:86:b5:96:88:36:e0:52:56:97:0a:07:0d: 36:2a:4d:b5:00:01:82:ce:a4:cc:01:51:57:c8:0e:d9:01:b9: e2:d9:1e:e4:97:d0:65:a2:24:fe:86:5d:b5:1d:05:6f:5a:27: df:85:55:80:8b:31:e4:53:5e:2b:7c:6a:ff:4f:f3:b3:9c:5f: d3:51:74:f3:d1:f7:90:cc:30:e2:e0:ca:49:4f:a8:7f:e9:aa: 37:bc:65:7d:d2:a0:d6:4c:26:6a:55:69:b6:2b:92:02:2b:ed: f0:0a:f1:50:a1:77:c9:0f:2d:aa:15:9a:2d:d9:d2:9e:db:fe: b9:76:2e:1c:9e:36:d4:56:ff:94:f5:a4:68:70:75:1f:a9:23: 93:84:b3:89:92:8f:c0:8c:65:40:61:ae:cb:a6:10:46:92:d0: f3:a9:ce:dd:2a:0d:14:35:57:5c:56:cd:c0:54:c9:8b:e7:5a: e8:26:cc:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f29bzGuAv4ugR5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1 OWI1MB4XDTI2MTAwMzAxNDAxMloXDTI3MDEwMTAyNDAxMlowLzEtMCsGA1UEAxMk NWY5ZWQ2ZWQtZTY1OC00MWI1LWFiNDYtMzhmZTU1ZDc5MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp89wvxLPbp+ONAyhp5Cvtf47VEoCeWXLFTj jaIFozgrPEPhAQS9WwxfcAyhavQrPYua1A3wThT5jES78TI/+qB1oJ4yZuHIUlvI SY4iYycw+Nat5DOqgi0qI51BGqIQiKodBsAjKyfhi3L4oHzZnZG6FNX9SaxM2Fjh TbxSKH36rfiqJnLN8U1X5mX3/nh/O42FwLx826SHKTTlYcBnnMV+QRldiTfH5DcC dUhOv69b3onsw9W7W3fcWf6S/0ffL0G+59jr92Phwq+8UDZko/sLAnEB3VvAJ34D RDHx8JgCLssmzWJnOziR4HLgb5EBGW47cVF8jynQbcAK6/CYFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdrtdSRKsgYevgBLHMnJqzJWZYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvYmY4ZGE3NmUtMGI4My0z N2E5LWJkMGQtODA0OTZlM2JmMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpJvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJez0v7DXdZozBOkGUAgnzADsDbeO7pUzDFaRnuW6etMt8HFGLT1oTpb JHwMYWDlVm+ZT7toVgBAD8l4zODtN0cjyZR0RHQ9382IsImtwIa1log24FJWlwoH DTYqTbUAAYLOpMwBUVfIDtkBueLZHuSX0GWiJP6GXbUdBW9aJ9+FVYCLMeRTXit8 av9P87OcX9NRdPPR95DMMOLgyklPqH/pqje8ZX3SoNZMJmpVabYrkgIr7fAK8VCh d8kPLaoVmi3Z0p7b/rl2LhyeNtRW/5T1pGhwdR+pI5OEs4mSj8CMZUBhrsumEEaS 0POpzt0qDRQ1V1xWzcBUyYvnWugmzA8= -----END CERTIFICATE-----Generated at Wed Oct 14 20:22:49 2026 by rpki-client