$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa File: ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json) Hash identifier: bsFzPiojGpibko9HWgONQe7hn2qYzSVx1QBxwUBjLZM= Subject key identifier: 05:DD:5B:B8:B2:C8:34:FF:50:68:F9:44:23:DF:1B:19:89:55:D3:AA Certificate issuer: /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Certificate serial: 010D0C9F4328584F8F3DC9D1F319D33C9FE51200 Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 21693 IP address blocks: 170.152.0.0/16 maxlen: 24 192.234.136.0/24 maxlen: 24 192.234.137.0/24 maxlen: 24 192.234.138.0/24 maxlen: 24 192.234.139.0/24 maxlen: 24 192.234.140.0/24 maxlen: 24 198.179.151.0/24 maxlen: 24 198.179.152.0/24 maxlen: 24 198.179.153.0/24 maxlen: 24 198.179.154.0/24 maxlen: 24 198.179.155.0/24 maxlen: 24 198.179.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c9:d1:f3:19:d3:3c:9f:e5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=14f620b4-20b6-4d4a-8f04-ced0e4685448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:54:f1:d4:f1:f5:26:8a:b8:8b:7b:cd:4b: c5:68:92:c6:5c:32:5f:74:df:2a:cb:37:f2:94:b1: 24:3d:78:0e:27:52:a3:1e:c4:b2:40:a3:63:6a:fb: 79:1a:8b:5d:34:db:d4:a6:fd:ed:05:e1:b4:5c:af: bf:49:8e:c3:8b:29:20:75:05:d6:25:cd:97:d6:07: 4e:72:4b:0b:0e:3f:f4:04:23:ea:1e:86:b5:f6:db: d2:16:f2:1f:1e:8f:c2:41:e9:ca:d6:01:9d:87:23: 84:c0:a2:bb:05:f1:30:18:07:ec:8c:a5:c0:99:04: 09:c9:b4:6a:06:18:73:70:97:fa:99:6a:d9:18:90: c6:ef:7c:fc:48:f9:fc:fd:39:fa:30:c2:5e:79:c4: 5c:30:76:df:1b:02:d1:82:2c:3c:de:a0:28:c6:f1: 5e:10:0d:a0:55:c2:c0:2c:7e:01:a0:1c:96:84:69: 17:93:6a:37:55:48:54:85:37:22:58:57:d6:b6:f5: 1d:38:f1:74:41:72:54:30:15:41:58:73:89:49:47: 82:45:ed:c3:64:b2:af:cf:e8:40:ef:05:f0:89:b0: ea:7a:00:43:a5:16:de:da:8d:8c:ac:46:63:b0:a3: 14:75:8a:fe:15:01:45:ea:c3:e4:72:2d:9d:02:74: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:5B:B8:B2:C8:34:FF:50:68:F9:44:23:DF:1B:19:89:55:D3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl X509v3 Authority Key Identifier: keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer sbgp-ipAddrBlock: critical IPv4: 170.152.0.0/16 192.234.136.0-192.234.140.255 198.179.151.0-198.179.156.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9d:fc:91:45:ab:c0:75:8b:e2:08:c8:91:b3:e9:a3:5d:f6: e2:82:c1:f4:ff:5a:dc:be:4b:77:ae:d7:f1:a7:a9:c3:88:1c: 81:83:0b:41:c8:48:f5:c0:ea:9c:66:82:fa:2e:01:37:fc:c9: 2e:4e:42:f0:28:63:20:b4:bb:8b:f3:9c:2b:31:2d:4c:2d:27: 99:5b:c7:21:69:07:bc:5b:e1:3e:09:ca:34:41:c4:5c:3b:06: 05:b1:23:ce:b9:2c:10:4d:e7:fa:30:94:62:d6:b2:a4:b1:2c: 13:58:e4:04:4c:12:e5:9c:35:df:20:d3:b6:d8:15:84:bc:79: 07:b2:68:c0:77:7f:fa:4e:10:38:38:44:b4:bf:f3:98:82:07: a5:dd:90:74:e9:f0:9c:b5:01:13:92:3b:9b:35:b8:0c:b1:d1: b8:bf:cd:aa:a6:25:d4:61:b6:d6:f4:fb:97:0e:b9:a0:0f:9f: 8c:ed:23:04:b1:98:c4:e4:d2:9a:2c:4e:c7:11:7f:76:67:d6: dd:2f:7e:82:0d:09:25:76:19:2c:f8:e6:ae:56:02:a1:87:ca: 95:22:21:55:03:7a:8a:4e:40:e8:bd:4e:1d:7f:bf:f6:77:d1: e2:14:04:2c:31:51:69:05:be:77:56:8e:32:ec:11:88:65:e0: 94:1f:e1:e3 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE+PPcnR8xnTPJ/lEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh ZGIxMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MTRmNjIwYjQtMjBiNi00ZDRhLThmMDQtY2VkMGU0Njg1NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpU8dTx9SaKuIt7zUvFaJLGXDJfdN8qyzfy lLEkPXgOJ1KjHsSyQKNjavt5GotdNNvUpv3tBeG0XK+/SY7DiykgdQXWJc2X1gdO cksLDj/0BCPqHoa19tvSFvIfHo/CQenK1gGdhyOEwKK7BfEwGAfsjKXAmQQJybRq BhhzcJf6mWrZGJDG73z8SPn8/Tn6MMJeecRcMHbfGwLRgiw83qAoxvFeEA2gVcLA LH4BoByWhGkXk2o3VUhUhTciWFfWtvUdOPF0QXJUMBVBWHOJSUeCRe3DZLKvz+hA 7wXwibDqegBDpRbe2o2MrEZjsKMUdYr+FQFF6sPkci2dAnQSGwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFAXdW7iyyDT/UGj5RCPfGxmJVdOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvZWM5NjhhNDMtYTNiYy0z NWNkLTljYWUtMjk4ZDA2NDNjMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2 YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji NDRkMmFkYjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAqpgwDAME A8DqiAMEAMDqjDAMAwQAxrOXAwQAxrOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADKd/JFFq8B1i+IIyJGz 6aNd9uKCwfT/Wty+S3eu1/GnqcOIHIGDC0HISPXA6pxmgvouATf8yS5OQvAoYyC0 u4vznCsxLUwtJ5lbxyFpB7xb4T4JyjRBxFw7BgWxI865LBBN5/owlGLWsqSxLBNY 5ARMEuWcNd8g07bYFYS8eQeyaMB3f/pOEDg4RLS/85iCB6XdkHTp8Jy1AROSO5s1 uAyx0bi/zaqmJdRhttb0+5cOuaAPn4ztIwSxmMTk0posTscRf3Zn1t0vfoINCSV2 GSz45q5WAqGHypUiIVUDeopOQOi9Th1/v/Z30eIUBCwxUWkFvndWjjLsEYhl4JQf 4eM= -----END CERTIFICATE-----Generated at Mon Nov 2 12:43:26 2026 by rpki-client