$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa File: 8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa (raw, json) Hash identifier: bU75DNB1LvApxVHQhu+2wGrY1dD5ER2ARQ8UoKGKsVA= Subject key identifier: C6:FE:E4:36:F8:BA:81:7B:72:D5:20:B8:42:07:AA:BA:9A:45:EB:48 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F857849926820E6B4C50AA2C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 8013 IP address blocks: 153.68.184.0/22 maxlen: 22 153.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:49:92:68:20:e6:b4:c5:0a:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=916edf21-b67a-45d3-86e5-d5b8f504d6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:31:99:fb:9b:9e:d7:44:bd:c2:60:40:97: 5e:9f:15:a5:a6:e7:d6:61:20:9e:66:7c:1d:2a:7f: 52:11:41:70:a1:b4:cd:19:3b:6f:f8:57:db:d4:11: fc:45:fa:f8:ec:b7:04:56:11:2d:3e:5d:b2:a8:a3: ea:a6:31:22:95:30:7d:34:ab:69:b5:cb:22:5b:a3: ab:d4:8b:20:8b:32:49:9f:c0:2b:73:77:ca:81:8d: e7:72:05:5c:f6:a0:58:0a:29:cf:f1:86:0f:c8:9f: 2d:c1:9b:45:0d:b1:96:78:a8:04:bd:bb:3d:8e:bb: 8b:a3:39:e0:1d:22:c4:63:1e:3e:38:0e:20:80:3a: 09:b2:52:e3:7c:c2:37:26:aa:a7:c8:e2:b8:90:93: 9a:74:a3:6a:87:82:de:48:14:44:f6:bf:f6:cc:12: 50:96:c3:a0:b0:dc:a9:41:74:58:8f:ba:aa:c5:0b: fe:13:b4:d1:b5:f7:eb:95:78:b6:3a:71:a0:1a:33: db:1c:8f:fc:84:7f:c2:42:f6:3f:20:f5:23:fa:ae: 49:99:0b:83:f9:70:cc:57:32:fd:b8:61:52:90:06: e8:ef:9b:c8:75:fe:0d:6d:ca:29:42:e9:18:2f:62: c7:b1:69:5f:43:29:7a:37:a8:b7:9e:de:2d:a0:22: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:E4:36:F8:BA:81:7B:72:D5:20:B8:42:07:AA:BA:9A:45:EB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 153.68.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:70:fb:c2:7b:e0:e5:fe:7f:d5:73:a5:27:49:f0:d0:7b:e6: 37:33:28:80:05:3a:88:f4:65:8e:df:7b:7d:ea:45:16:33:66: 38:18:58:5f:ff:4a:72:5f:6d:65:e1:16:2d:5c:95:75:1b:92: d8:95:a4:94:f5:23:08:a0:b9:80:2d:1e:2c:fd:23:d4:af:89: 3f:45:57:61:d8:e4:b4:8f:04:d4:0e:8f:ad:b1:68:fb:47:1a: bc:6d:48:a7:fd:0f:7e:ba:ca:88:34:f7:d3:64:7f:b0:2c:5f: 4a:8a:6e:55:07:a9:f7:e8:85:d7:64:f1:9f:dc:9a:95:08:71: ee:41:7e:4f:9d:8b:00:81:fe:fc:e7:b8:a5:d1:a7:e2:01:9e: 42:28:ff:c0:47:df:5e:a2:a8:65:a4:c2:ea:41:95:48:cf:75: c3:46:33:28:f0:88:6c:24:d9:40:b4:74:09:8e:0f:ea:86:7f: 2f:e8:af:b5:19:e8:e6:40:7d:58:f0:3b:ef:df:28:2b:a6:6a: fd:34:c0:15:ec:37:1e:7a:f1:13:07:ef:b3:d5:7c:39:a2:c6: 4f:70:59:b9:ae:df:75:17:3e:18:40:ac:be:14:1b:ee:1b:31: 02:0a:a3:71:27:ca:a0:a2:29:be:53:79:ed:73:04:c4:b1:25: af:76:9f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeEmSaCDmtMUKosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OTE2ZWRmMjEtYjY3YS00NWQzLTg2ZTUtZDViOGY1MDRkNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ExmfubntdEvcJgQJdenxWlpufWYSCeZnwd Kn9SEUFwobTNGTtv+Ffb1BH8Rfr47LcEVhEtPl2yqKPqpjEilTB9NKtptcsiW6Or 1IsgizJJn8Arc3fKgY3ncgVc9qBYCinP8YYPyJ8twZtFDbGWeKgEvbs9jruLozng HSLEYx4+OA4ggDoJslLjfMI3JqqnyOK4kJOadKNqh4LeSBRE9r/2zBJQlsOgsNyp QXRYj7qqxQv+E7TRtffrlXi2OnGgGjPbHI/8hH/CQvY/IPUj+q5JmQuD+XDMVzL9 uGFSkAbo75vIdf4NbcopQukYL2LHsWlfQyl6N6i3nt4toCIVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb+5Db4uoF7ctUguEIHqrqaRetIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQ3YjRlZGItMDk0YS0z M2E3LThmYTQtNmRlYWMxMWYyYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmUS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPhw+8J74OX+f9VzpSdJ8NB75jczKIAFOoj0ZY7fe33qRRYzZjgYWF// SnJfbWXhFi1clXUbktiVpJT1IwiguYAtHiz9I9SviT9FV2HY5LSPBNQOj62xaPtH GrxtSKf9D366yog099Nkf7AsX0qKblUHqffohddk8Z/cmpUIce5Bfk+diwCB/vzn uKXRp+IBnkIo/8BH316iqGWkwupBlUjPdcNGMyjwiGwk2UC0dAmOD+qGfy/or7UZ 6OZAfVjwO+/fKCumav00wBXsNx568RMH77PVfDmixk9wWbmu33UXPhhArL4UG+4b MQIKo3EnyqCiKb5Tee1zBMSxJa92n9M= -----END CERTIFICATE-----Generated at Sat Oct 31 12:41:58 2026 by rpki-client