$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa File: 946b774e-ccb3-388d-8c32-e409c858b27c.roa (raw, json) Hash identifier: tIz0KyiQAt42pdDjvc1T1rfgHmLE6LwHQIe71YRvk0g= Subject key identifier: 50:31:40:66:31:98:65:CD:3D:85:7D:12:F3:F4:22:8B:42:30:ED:2D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F498BF205632CE6E5AA0DD040 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54004 IP address blocks: 68.182.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f2:05:63:2c:e6:e5:aa:0d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32b0f83d-777f-4ad3-83ba-161418fa44b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:f4:1a:12:14:f3:30:c2:24:2a:7f:ab:f9: 52:98:71:bf:57:42:bc:12:de:15:83:2c:6c:6c:44: bd:63:6d:f3:07:e3:6b:0b:90:53:55:4c:de:1b:d3: 94:8c:8f:11:e4:70:2d:9c:a1:f3:78:69:2c:f8:65: 0c:87:8a:11:5c:63:fa:ae:4d:02:1b:bc:5c:c8:eb: c8:49:d1:b7:73:6c:dd:9c:68:b5:58:df:fe:52:11: 57:d3:01:fe:35:6c:bc:ff:9d:7f:c4:03:04:d9:a9: e5:51:a1:52:93:f9:2b:dd:bd:1a:70:94:9f:e7:95: 05:c0:f3:63:ef:9c:b3:a6:d1:07:8e:81:f1:2f:3c: b8:5c:6d:07:84:1d:a7:f7:66:00:10:56:f0:3f:37: e9:33:4d:2c:7d:5c:31:b6:f3:4b:d9:81:0f:c5:9d: 51:28:c8:52:c3:4d:6b:68:b9:aa:4f:bf:f7:8d:40: 82:a2:dd:39:ea:3a:eb:b0:5e:be:11:c2:b8:31:96: 54:c8:2e:58:0c:cc:89:83:0f:2e:0a:a5:72:e7:72: 72:88:e8:be:13:3c:fc:a0:ae:1c:ab:27:98:a6:8e: 3d:cd:be:4f:d6:35:92:a5:d8:07:bf:56:b5:13:86: e2:0f:4c:40:85:cb:a3:26:8b:98:31:53:88:2f:84: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:40:66:31:98:65:CD:3D:85:7D:12:F3:F4:22:8B:42:30:ED:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:08:88:25:42:bd:52:db:ad:aa:d8:36:e2:e8:77:ab:7f:c7: f3:16:a8:3c:8b:51:db:10:ef:dd:3b:fb:1e:c5:0c:a9:08:93: c8:7e:c8:b3:a9:b9:9d:bc:7a:bd:70:b6:92:0e:0c:9b:73:c9: 47:3f:df:2e:64:87:ca:50:7e:ff:2f:36:0a:19:2c:98:51:9b: 85:00:cc:a3:36:99:7f:82:84:b2:7e:d5:d7:28:57:0d:51:9a: 0b:89:eb:59:12:81:8e:53:2c:f3:72:b7:66:6a:54:45:eb:81: 37:e7:68:55:08:a4:04:eb:91:2f:3e:33:95:c2:1c:5c:f2:e8: e6:d3:bc:b7:ec:ae:46:8b:c5:7e:20:0c:46:50:c1:6e:1a:71: ff:b6:dd:50:a3:54:85:c1:46:b6:b8:54:0b:46:9c:4a:60:c2: 79:49:b1:05:db:0d:a0:6b:2f:1e:39:b4:67:04:3e:53:a0:6f: 00:94:3a:cb:5a:bd:4f:f9:c4:85:63:3a:24:74:0a:eb:4f:d5: f6:71:38:f1:4c:43:e4:a2:eb:9f:ff:50:d3:5e:5a:66:f0:79: 2d:6f:f1:74:b1:a4:62:2b:5b:47:b9:aa:68:ff:76:69:e5:41: 87:c3:6a:57:6c:30:90:ec:a6:cf:aa:cc:09:86:89:20:cc:a4: 7e:16:94:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/IFYyzm5aoN0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJiMGY4M2QtNzc3Zi00YWQzLTgzYmEtMTYxNDE4ZmE0NGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4T0GhIU8zDCJCp/q/lSmHG/V0K8Et4Vgyxs bES9Y23zB+NrC5BTVUzeG9OUjI8R5HAtnKHzeGks+GUMh4oRXGP6rk0CG7xcyOvI SdG3c2zdnGi1WN/+UhFX0wH+NWy8/51/xAME2anlUaFSk/kr3b0acJSf55UFwPNj 75yzptEHjoHxLzy4XG0HhB2n92YAEFbwPzfpM00sfVwxtvNL2YEPxZ1RKMhSw01r aLmqT7/3jUCCot056jrrsF6+EcK4MZZUyC5YDMyJgw8uCqVy53JyiOi+Ezz8oK4c qyeYpo49zb5P1jWSpdgHv1a1E4biD0xAhcujJouYMVOIL4TnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAxQGYxmGXNPYV9EvP0IotCMO0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTQ2Yjc3NGUtY2NiMy0z ODhkLThjMzItZTQwOWM4NThiMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUIiCVCvVLbrarYNuLod6t/x/MWqDyLUdsQ7907+x7FDKkIk8h+yLOp uZ28er1wtpIODJtzyUc/3y5kh8pQfv8vNgoZLJhRm4UAzKM2mX+ChLJ+1dcoVw1R mguJ61kSgY5TLPNyt2ZqVEXrgTfnaFUIpATrkS8+M5XCHFzy6ObTvLfsrkaLxX4g DEZQwW4acf+23VCjVIXBRra4VAtGnEpgwnlJsQXbDaBrLx45tGcEPlOgbwCUOsta vU/5xIVjOiR0CutP1fZxOPFMQ+Si65//UNNeWmbweS1v8XSxpGIrW0e5qmj/dmnl QYfDaldsMJDsps+qzAmGiSDMpH4WlDE= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:14 2026 by rpki-client