$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/44985011-906c-3f63-bce9-d9ce8083aec7.roa File: 44985011-906c-3f63-bce9-d9ce8083aec7.roa (raw, json) Hash identifier: QOkKv2h6BRCRZJIsLgi9xN4X6h5/9oqWv8FLL4mesgw= Subject key identifier: CA:98:B4:6E:81:F7:E6:66:2B:1E:D2:1F:78:72:37:71:F9:C9:D7:B2 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584F5B880279E7F6B1CD20E35600 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/44985011-906c-3f63-bce9-d9ce8083aec7.roa Signing time: Thu 01 Oct 2026 12:28:03 +0000 ROA not before: Thu 01 Oct 2026 12:28:03 +0000 ROA not after: Wed 30 Dec 2026 13:28:03 +0000 asID: 4983 IP address blocks: 146.152.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:88:02:79:e7:f6:b1:cd:20:e3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Oct 1 12:28:03 2026 GMT Not After : Dec 30 13:28:03 2026 GMT Subject: CN=7b306ff4-6ab7-4da0-ab7e-1777e5c6773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:b9:a5:60:e1:a6:17:1f:01:68:1a:45:50: b2:2e:c4:08:18:fa:fb:ab:50:40:6b:69:fb:e4:12: a1:00:38:b5:42:45:38:21:fe:20:49:c6:54:4b:b7: 18:3c:04:b0:65:dd:65:14:53:14:e4:aa:3a:7d:05: d2:4e:c3:b5:f1:d8:0a:6f:27:92:cc:68:07:2f:1a: 0f:a9:6c:cc:bb:57:94:a2:65:25:3c:1a:48:ce:35: 0f:2e:d1:51:52:50:00:88:ac:2c:63:10:17:f8:0b: 67:9b:ef:31:10:0c:57:0b:7d:cb:96:a4:78:98:12: 47:62:41:37:98:cc:3e:71:87:38:c5:46:78:b1:95: cc:a5:63:34:55:c9:76:f1:ca:52:ce:90:4c:57:87: 61:5e:38:a4:08:6b:87:14:56:5d:f9:df:6e:cd:3f: 0f:f9:20:19:e0:21:e3:71:55:d4:1b:f6:71:4e:b3: 19:75:56:da:fc:44:bb:f3:54:12:02:dd:b7:22:9c: 37:e1:ad:33:4f:a0:90:a1:56:f6:96:a2:17:b0:d1: fb:51:ba:c7:a7:a1:67:56:5b:69:b1:f2:94:de:68: 2e:e4:c7:0e:94:e7:6c:02:54:8a:06:6d:90:5a:c0: 91:49:37:dd:58:aa:95:30:28:6c:29:47:b3:52:71: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:B4:6E:81:F7:E6:66:2B:1E:D2:1F:78:72:37:71:F9:C9:D7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/44985011-906c-3f63-bce9-d9ce8083aec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: 146.152.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:50:1f:b2:59:2c:13:13:97:cd:47:8e:f7:b6:89:ea:e2:24: 73:3c:7f:33:11:49:95:8d:6f:3c:77:72:1d:fa:54:9a:dd:f7: 6a:e4:0e:31:9a:ac:dd:28:ee:bb:25:33:48:8f:50:17:98:d1: da:a8:ce:10:d1:f8:be:2d:40:2d:31:44:5b:42:c3:b5:b4:64: d7:ed:7d:ae:3c:e8:6f:77:d9:9a:7d:3c:46:b9:1d:2c:50:ea: 81:1d:7e:ce:07:7b:ac:37:47:9d:65:21:fe:ac:d4:b4:40:d1: 0d:92:3b:1c:e1:de:c1:c6:2e:7f:09:78:24:7c:c2:7c:06:b3: 8e:12:31:c3:c9:40:54:b1:cd:ed:2a:15:20:9e:b0:6e:b1:c2: f4:0e:34:de:ca:41:4c:b0:85:03:02:c8:ce:85:73:5b:63:58: 49:45:7a:d7:6f:5f:eb:f9:80:c4:60:94:9a:22:34:c3:8a:03: cc:23:ac:52:8f:05:66:e9:58:af:6a:75:c4:65:ea:74:b8:fb: 97:a5:99:54:62:41:5a:71:8d:c2:3a:a0:9c:c3:0f:d4:1e:ad: 39:c7:49:2a:bc:f4:fc:c9:5d:a4:31:2b:32:7e:70:78:aa:14: 42:7e:cd:8d:55:0b:50:29:d6:72:a0:0c:78:fa:26:eb:30:6c: c0:76:d7:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9biAJ55/axzSDjVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MTAwMTEyMjgwM1oXDTI2MTIzMDEzMjgwM1owLzEtMCsGA1UEAxMk N2IzMDZmZjQtNmFiNy00ZGEwLWFiN2UtMTc3N2U1YzY3NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLy5pWDhphcfAWgaRVCyLsQIGPr7q1BAa2n7 5BKhADi1QkU4If4gScZUS7cYPASwZd1lFFMU5Ko6fQXSTsO18dgKbyeSzGgHLxoP qWzMu1eUomUlPBpIzjUPLtFRUlAAiKwsYxAX+Atnm+8xEAxXC33LlqR4mBJHYkE3 mMw+cYc4xUZ4sZXMpWM0Vcl28cpSzpBMV4dhXjikCGuHFFZd+d9uzT8P+SAZ4CHj cVXUG/ZxTrMZdVba/ES781QSAt23Ipw34a0zT6CQoVb2lqIXsNH7UbrHp6FnVltp sfKU3mgu5McOlOdsAlSKBm2QWsCRSTfdWKqVMChsKUezUnElLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqYtG6B9+ZmKx7SH3hyN3H5ydeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNDQ5ODUwMTEtOTA2Yy0z ZjYzLWJjZTktZDljZTgwODNhZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkpjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRQH7JZLBMTl81Hjve2ieriJHM8fzMRSZWNbzx3ch36VJrd92rkDjGa rN0o7rslM0iPUBeY0dqozhDR+L4tQC0xRFtCw7W0ZNftfa486G932Zp9PEa5HSxQ 6oEdfs4He6w3R51lIf6s1LRA0Q2SOxzh3sHGLn8JeCR8wnwGs44SMcPJQFSxze0q FSCesG6xwvQONN7KQUywhQMCyM6Fc1tjWElFetdvX+v5gMRglJoiNMOKA8wjrFKP BWbpWK9qdcRl6nS4+5elmVRiQVpxjcI6oJzDD9QerTnHSSq89PzJXaQxKzJ+cHiq FEJ+zY1VC1Ap1nKgDHj6JuswbMB214U= -----END CERTIFICATE-----Generated at Thu Oct 29 18:16:46 2026 by rpki-client