$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa File: cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa (raw, json) Hash identifier: AtzRyO9RySHz8OJBtBUFtFqJFzgiIaCDnij0i3m4MTY= Subject key identifier: 36:08:4C:7C:7D:60:11:64:D1:BE:73:7D:9A:E5:70:B7:D5:69:31:3B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F8DD88D739B4D4F1B7511E6C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 852 IP address blocks: 216.198.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8d:73:9b:4d:4f:1b:75:11:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=2b662512-df9a-4869-bb76-db54faf00a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:8b:08:59:df:db:17:e3:e2:3d:dc:cf:70: a5:9f:64:51:e0:1b:17:8c:b3:8c:45:cc:c1:d4:16: 98:15:c1:bc:b3:10:3a:42:01:06:14:18:4a:56:58: fa:f5:07:3a:78:45:24:e6:4a:2c:99:58:5e:5e:a1: 58:61:2a:2d:bd:86:17:f2:b5:15:98:6f:46:46:e2: 34:37:6c:15:b1:7e:06:fb:98:3d:c2:cf:7a:05:06: 15:1c:f7:40:ab:e0:fd:c6:fc:96:6b:6c:60:fc:04: 59:1e:28:4d:e1:98:95:f0:1c:53:a8:47:2b:ca:fb: 70:50:36:44:ed:d6:b7:6f:9b:4d:a0:7d:a8:09:e0: b8:0b:d2:98:c8:28:87:05:6e:b0:b0:52:14:22:ac: 30:ff:75:c8:eb:e0:fa:50:53:f8:47:ce:a9:86:b4: 6c:95:04:15:ef:10:2f:7a:31:8b:72:38:f5:7d:8f: 05:71:86:da:8b:c1:e1:6d:38:4c:8b:63:af:b0:7d: 2c:8c:b9:6e:81:58:a7:97:c4:33:d9:43:a4:55:23: 15:8f:ea:97:83:63:32:a0:aa:1c:08:f8:4a:aa:fb: 2a:db:f9:9f:c0:72:05:28:0d:78:50:55:1f:e3:7d: cc:03:39:7a:e9:46:71:98:58:d4:bc:3c:3f:9f:6d: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:4C:7C:7D:60:11:64:D1:BE:73:7D:9A:E5:70:B7:D5:69:31:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.198.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:66:7f:42:ee:03:89:6e:3a:94:5a:cd:08:60:23:16:64:e1: e8:45:e1:5e:24:95:b3:7f:24:37:3e:a4:32:bd:32:bd:d1:d1: 64:1c:6d:1a:c5:5e:33:a4:e9:5c:47:ed:ff:9e:15:b2:a5:81: 29:fe:b1:f1:04:88:21:be:14:dd:62:d0:23:8e:c0:14:43:99: 63:f3:22:97:ee:4f:14:0d:12:d1:9f:ef:45:c2:af:84:d3:8a: ca:a7:89:5d:77:65:f0:23:8f:82:d2:b2:be:10:67:0c:eb:e6: 38:c8:e0:5b:24:03:16:76:1d:bd:d1:f9:bb:67:a6:dd:66:5a: 50:a9:24:0d:c9:a5:6f:5e:21:eb:f4:ee:21:b2:25:3b:56:76: 27:5a:04:56:9d:62:1d:cd:10:31:25:60:3f:c9:ab:2c:c2:a4: 04:95:c4:66:18:7e:f5:d9:b1:a8:f6:80:ac:4d:b6:67:45:fa: 26:9e:4b:bb:52:47:34:f4:89:c6:af:64:c5:db:a6:dd:a8:35: 59:a9:6e:05:f4:05:4f:9f:fe:15:9a:c7:b1:4a:8c:33:44:2b: ec:f1:23:d1:8c:ea:fa:26:0d:e5:b1:1b:01:0c:eb:9a:b6:85: 12:6e:34:67:f8:35:40:a6:18:ab:88:ad:d6:b4:34:41:60:86: 62:0b:fc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2I1zm01PG3UR5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MmI2NjI1MTItZGY5YS00ODY5LWJiNzYtZGI1NGZhZjAwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTmLCFnf2xfj4j3cz3Cln2RR4BsXjLOMRczB 1BaYFcG8sxA6QgEGFBhKVlj69Qc6eEUk5kosmVheXqFYYSotvYYX8rUVmG9GRuI0 N2wVsX4G+5g9ws96BQYVHPdAq+D9xvyWa2xg/ARZHihN4ZiV8BxTqEcryvtwUDZE 7da3b5tNoH2oCeC4C9KYyCiHBW6wsFIUIqww/3XI6+D6UFP4R86phrRslQQV7xAv ejGLcjj1fY8FcYbai8HhbThMi2OvsH0sjLlugVinl8Qz2UOkVSMVj+qXg2MyoKoc CPhKqvsq2/mfwHIFKA14UFUf433MAzl66UZxmFjUvDw/n20D6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYITHx9YBFk0b5zfZrlcLfVaTE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YWYzY2EtNDRmYy0z NzhmLThhOGQtNjdlNTk2MTNjYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2MaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9mf0LuA4luOpRazQhgIxZk4ehF4V4klbN/JDc+pDK9Mr3R0WQcbRrF XjOk6VxH7f+eFbKlgSn+sfEEiCG+FN1i0COOwBRDmWPzIpfuTxQNEtGf70XCr4TT isqniV13ZfAjj4LSsr4QZwzr5jjI4FskAxZ2Hb3R+btnpt1mWlCpJA3JpW9eIev0 7iGyJTtWdidaBFadYh3NEDElYD/JqyzCpASVxGYYfvXZsaj2gKxNtmdF+iaeS7tS RzT0icavZMXbpt2oNVmpbgX0BU+f/hWax7FKjDNEK+zxI9GM6vomDeWxGwEM65q2 hRJuNGf4NUCmGKuIrda0NEFghmIL/G4= -----END CERTIFICATE-----Generated at Wed Nov 4 20:26:43 2026 by rpki-client