$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa File: 11a34b76-748f-3912-9a1d-5a4242816489.roa (raw, json) Hash identifier: itCRIYMCmlToDdiInpwtmww4qt/a0QqKk39xrkDiYlY= Subject key identifier: 4D:4C:B3:83:4F:38:1E:F7:99:56:28:D8:45:B3:06:90:19:91:40:33 Certificate issuer: /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Certificate serial: 010D0C9F4328584F119CEF9241CA30D5193A8B80 Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 18780 IP address blocks: 173.0.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ef:92:41:ca:30:d5:19:3a:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=57e70653-e187-4204-a33a-1ce65e06df80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:21:58:7f:95:14:c8:9c:c5:09:e4:07:0f: 8d:e2:95:a6:55:e8:83:07:96:e4:42:14:65:ca:a4: 20:21:8d:aa:bf:f1:7b:ca:81:23:ea:a7:ec:e9:3f: 26:6e:a2:93:d0:38:00:d1:4e:c7:3c:5b:95:2a:70: 7c:bf:d4:b3:1a:ce:fc:e6:7f:22:58:88:24:06:ed: 1a:9c:2d:9b:a2:d3:a3:1d:51:d5:e3:95:f6:39:e6: 2b:0d:7a:09:ae:70:54:21:56:69:8e:32:ba:d8:3a: 74:45:df:40:da:74:b0:c3:74:9c:f4:96:f1:09:e4: 36:c6:95:84:80:51:d7:a5:bd:6e:60:4d:a5:5f:da: de:93:40:c6:47:24:fc:2d:3e:53:3a:cf:1a:5c:60: 13:34:fc:24:9a:e0:49:8b:47:d9:c6:ba:c7:ca:e7: 41:5f:56:42:10:74:9d:c0:cd:14:96:1f:a8:d9:ef: bc:16:52:13:46:13:60:00:fe:39:de:76:90:bf:18: 5d:59:dc:92:6e:d1:e8:91:dc:00:9a:45:d4:fe:dd: 26:12:9a:7b:dc:d7:e5:64:11:55:aa:31:49:3b:33: f2:61:b4:9f:f9:5b:a2:2b:65:9a:2e:ca:3b:66:66: 33:5a:40:ba:a5:cc:44:a0:0f:96:73:b2:49:cc:9f: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:B3:83:4F:38:1E:F7:99:56:28:D8:45:B3:06:90:19:91:40:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl X509v3 Authority Key Identifier: keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer sbgp-ipAddrBlock: critical IPv4: 173.0.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:87:b8:74:0e:e1:19:9c:40:ff:36:b5:91:5c:ac:44:9e:a0: 51:7c:30:32:f4:c2:54:ca:41:cb:0a:5c:19:bd:5a:14:13:66: ab:97:4b:a3:48:36:ff:03:e1:fa:e0:69:71:72:02:92:5e:cd: 9e:aa:41:fd:cb:2e:28:c7:67:5c:5c:4e:f7:d8:ff:0b:2e:6e: f7:e3:2d:8a:5e:f8:05:30:9f:f0:59:55:51:da:7e:04:5c:e8: 89:1e:29:ca:cd:45:3e:72:8e:32:67:e9:ad:ea:eb:74:d5:04: f2:3b:47:77:ec:b4:26:7a:91:50:5e:79:2a:fe:e6:15:f7:03: 4c:e3:74:44:ac:8d:90:c9:6f:0a:91:2e:a9:a8:f8:27:d6:9d: 18:ce:a0:1a:ef:52:78:8d:8a:10:1f:01:81:bb:c4:78:1d:04: fe:78:e2:98:74:3a:d1:c1:ab:84:9d:af:07:2f:9d:02:40:8b: 17:b2:2e:89:1c:6a:1b:63:68:1a:8d:ea:9d:d5:8f:b8:29:a4: 9d:b4:7a:ec:b0:bd:51:fd:83:9e:ea:56:09:d3:64:f6:6b:22: 75:82:03:04:5d:c6:66:24:26:f2:8c:4b:71:c7:18:9e:46:e5: cc:a7:bb:86:7f:ec:e7:9a:89:bf:1e:2b:55:80:00:f9:4a:3d: 6b:f9:1b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO+SQcow1Rk6i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjZWZmYTQtMTUxMy00NTJlLTkxYjgtOGQwYTBiNTFm OTIwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdlNzA2NTMtZTE4Ny00MjA0LWEzM2EtMWNlNjVlMDZkZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGEhWH+VFMicxQnkBw+N4pWmVeiDB5bkQhRl yqQgIY2qv/F7yoEj6qfs6T8mbqKT0DgA0U7HPFuVKnB8v9SzGs785n8iWIgkBu0a nC2botOjHVHV45X2OeYrDXoJrnBUIVZpjjK62Dp0Rd9A2nSww3Sc9JbxCeQ2xpWE gFHXpb1uYE2lX9rek0DGRyT8LT5TOs8aXGATNPwkmuBJi0fZxrrHyudBX1ZCEHSd wM0Ulh+o2e+8FlITRhNgAP453naQvxhdWdySbtHokdwAmkXU/t0mEpp73NflZBFV qjFJOzPyYbSf+VuiK2WaLso7ZmYzWkC6pcxEoA+Wc7JJzJ9fjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Ms4NPOB73mVYo2EWzBpAZkUAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNl ZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBhMGI1MWY5MjAvMTFhMzRiNzYtNzQ4Zi0z OTEyLTlhMWQtNWE0MjQyODE2NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWVjZWZmYTQtMTUxMy00NTJlLTkx YjgtOGQwYTBiNTFmOTIwLzFlY2VmZmE0LTE1MTMtNDUyZS05MWI4LThkMGEwYjUx ZjkyMC5jcmwwHwYDVR0jBBgwFoAUzk8tSTH2YFFhfyV/MTIcHpbLfA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNlZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBh MGI1MWY5MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErQAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKHuHQO4RmcQP82tZFcrESeoFF8MDL0wlTKQcsKXBm9WhQTZquXS6NI Nv8D4frgaXFyApJezZ6qQf3LLijHZ1xcTvfY/wsubvfjLYpe+AUwn/BZVVHafgRc 6IkeKcrNRT5yjjJn6a3q63TVBPI7R3fstCZ6kVBeeSr+5hX3A0zjdESsjZDJbwqR Lqmo+CfWnRjOoBrvUniNihAfAYG7xHgdBP544ph0OtHBq4SdrwcvnQJAixeyLokc ahtjaBqN6p3Vj7gppJ20euywvVH9g57qVgnTZPZrInWCAwRdxmYkJvKMS3HHGJ5G 5cynu4Z/7Oeaib8eK1WAAPlKPWv5G0A= -----END CERTIFICATE-----Generated at Mon Oct 12 11:35:18 2026 by rpki-client