$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa File: cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa (raw, json) Hash identifier: suzVUb39fcr5TqOY7nZ3/cxN/ceA0p/2+bbqESuzeUA= Subject key identifier: A6:48:28:B5:F8:1F:5F:69:36:CD:47:7A:A8:07:99:8B:67:39:95:79 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EEA8789063160AF4235791840 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 852 IP address blocks: 216.198.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:89:06:31:60:af:42:35:79:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7c9ad128-9915-4663-9209-ceb6a1da53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:fa:af:ac:63:5d:a8:58:22:84:36:d6:c4: 55:0c:34:6e:68:d4:12:45:04:6f:d4:de:2f:f0:6d: 59:35:20:48:98:2b:e1:38:d1:f8:61:0f:2e:c0:37: 12:30:6d:2e:c8:70:1e:bd:8d:db:c3:14:d5:11:c5: b2:f5:86:04:0d:cd:96:f4:b9:bf:f7:ca:af:de:b7: 42:48:29:16:1a:69:45:55:e5:28:94:64:09:8f:f6: 01:4e:89:45:a2:85:63:3b:0e:2b:2e:05:71:d0:3c: 4d:8f:2a:69:62:de:e7:c5:33:90:1a:f4:f0:c7:c9: b7:de:6a:47:68:69:33:d9:35:8d:67:ab:78:d1:6a: 45:cc:08:dd:b8:79:13:25:90:ef:0e:61:43:7e:31: fd:77:89:f3:7e:8d:d1:15:85:bc:bd:52:7a:c2:fb: 4b:df:f1:a5:45:93:97:89:fe:73:ca:17:e0:23:b3: 8e:4b:92:c8:00:e8:55:04:01:e2:e2:74:7b:25:4d: 6c:66:96:ef:92:8a:de:49:2d:73:0a:a1:22:2d:2f: ba:e5:13:eb:8d:34:a7:ed:02:2d:50:27:91:c7:1e: 58:7d:96:ed:e4:64:13:58:0c:fd:46:f4:e8:6d:df: 8a:76:2a:b6:4c:b0:41:2b:e5:db:64:bf:de:58:7b: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:48:28:B5:F8:1F:5F:69:36:CD:47:7A:A8:07:99:8B:67:39:95:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.198.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:eb:20:5e:bd:c3:db:bb:11:aa:e2:f2:41:fa:54:dd:1f:e7: 3b:62:8e:df:57:45:1e:29:d5:c8:45:d0:c3:aa:e6:b2:93:06: 82:cc:74:8c:ad:63:5e:1d:0d:ad:a3:fd:76:db:a3:87:6d:89: d3:53:53:19:b7:ca:21:79:8f:9a:61:ee:93:69:0a:da:20:0c: 30:02:81:9e:c9:56:bd:6f:2f:01:c3:ff:c0:c0:f4:2e:b8:06: e9:00:d1:b4:ac:ab:2b:2d:4a:3a:02:9f:72:7f:fe:34:3d:4f: 93:e3:e3:77:3d:0e:d6:46:2b:a4:9f:22:0e:57:32:2b:5a:58: f2:2b:a4:07:12:55:1f:44:35:37:e9:82:bc:b8:0d:1b:24:f8: 41:22:e6:c2:2d:16:f9:f1:b4:3d:89:95:86:71:7d:67:4f:f6: d7:ae:2d:2c:51:98:81:9f:5f:98:ca:7f:2b:53:72:11:0c:06: 22:4c:bb:82:df:5c:4f:23:0d:0c:7a:6d:86:fe:e4:d6:2c:0a: 56:5d:b4:b9:dc:54:1f:1b:ae:fa:63:b0:00:5e:18:0c:64:91: 10:ac:9a:f9:68:a9:83:04:37:b6:96:81:1b:69:24:12:b9:c9: cb:07:34:01:ac:79:04:0b:ad:f5:1d:77:a5:c4:28:e1:9f:d7: 49:43:c5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4kGMWCvQjV5GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2M5YWQxMjgtOTkxNS00NjYzLTkyMDktY2ViNmExZGE1M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc76r6xjXahYIoQ21sRVDDRuaNQSRQRv1N4v 8G1ZNSBImCvhONH4YQ8uwDcSMG0uyHAevY3bwxTVEcWy9YYEDc2W9Lm/98qv3rdC SCkWGmlFVeUolGQJj/YBTolFooVjOw4rLgVx0DxNjyppYt7nxTOQGvTwx8m33mpH aGkz2TWNZ6t40WpFzAjduHkTJZDvDmFDfjH9d4nzfo3RFYW8vVJ6wvtL3/GlRZOX if5zyhfgI7OOS5LIAOhVBAHi4nR7JU1sZpbvkoreSS1zCqEiLS+65RPrjTSn7QIt UCeRxx5YfZbt5GQTWAz9RvTobd+Kdiq2TLBBK+XbZL/eWHv9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZIKLX4H19pNs1HeqgHmYtnOZV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YWYzY2EtNDRmYy0z NzhmLThhOGQtNjdlNTk2MTNjYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2MaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDrIF69w9u7Eari8kH6VN0f5ztijt9XRR4p1chF0MOq5rKTBoLMdIyt Y14dDa2j/Xbbo4dtidNTUxm3yiF5j5ph7pNpCtogDDACgZ7JVr1vLwHD/8DA9C64 BukA0bSsqystSjoCn3J//jQ9T5Pj43c9DtZGK6SfIg5XMitaWPIrpAcSVR9ENTfp gry4DRsk+EEi5sItFvnxtD2JlYZxfWdP9teuLSxRmIGfX5jKfytTchEMBiJMu4Lf XE8jDQx6bYb+5NYsClZdtLncVB8brvpjsABeGAxkkRCsmvloqYMEN7aWgRtpJBK5 ycsHNAGseQQLrfUdd6XEKOGf10lDxTA= -----END CERTIFICATE-----Generated at Mon Sep 14 21:51:24 2026 by rpki-client