$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa File: cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa (raw, json) Hash identifier: 80LRmg5JteS9/VPm28BknoAVH1YQatwg+hSwSTrkGYg= Subject key identifier: 52:D4:1B:F9:F8:CB:B9:1D:00:00:AD:41:AA:A1:50:24:FA:AF:9C:83 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C425DA8624BD3F7C6880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 137.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c4:25:da:86:24:bd:3f:7c:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c22f5ac2-144f-4934-8636-f295705e0739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:2b:c6:ad:98:1e:d2:58:7b:94:16:69:26: b5:ef:73:26:35:d5:97:ca:c3:1e:7f:f4:06:82:29: b6:fc:83:19:f6:55:e4:f7:0e:bf:aa:3d:1c:62:d8: fa:9d:9c:b5:32:ae:a9:d1:af:21:1e:93:64:c3:a0: dc:3b:39:ac:a4:be:8d:9e:22:07:fb:36:df:13:81: f7:17:fc:0d:fd:09:6f:d1:91:79:7e:c0:39:72:0b: aa:49:3c:cd:8d:6f:4a:a0:49:da:de:95:8d:40:b6: 9b:55:2a:6b:fa:11:57:ea:0c:a5:d8:59:1e:b5:0f: 5d:e2:36:df:6b:51:97:b8:bb:98:80:f1:23:a3:2e: b3:45:ea:5a:ea:ea:62:2e:13:b0:80:46:53:0e:88: 08:5c:0b:59:b9:54:38:f1:2a:86:6c:66:b8:f9:20: ca:60:cd:dc:db:92:f4:92:4a:48:4c:98:69:c3:08: a4:97:65:f1:8e:ea:37:77:e0:4d:1e:a2:0d:ed:20: a4:ac:aa:b0:2b:cf:58:f8:28:ee:43:5e:d8:aa:e0: 8e:fa:a6:49:1f:c7:b0:42:c8:97:49:f4:34:bf:79: 93:d7:a7:bc:7c:20:21:69:d1:3f:e8:bb:b5:a7:36: 87:00:47:1b:64:b3:6f:99:1e:e0:00:3b:67:e7:7f: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D4:1B:F9:F8:CB:B9:1D:00:00:AD:41:AA:A1:50:24:FA:AF:9C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:43:41:af:ca:c6:4b:6d:e2:07:58:f7:db:e3:df:04:e9:f3: 00:aa:0b:58:6e:ba:8b:b9:62:80:6d:0a:df:f6:1a:ae:61:c4: 58:e1:ed:5d:7f:f8:04:75:29:96:c7:f6:ae:61:a4:a7:93:45: a3:fa:ee:47:9f:76:ba:b6:55:0c:59:fd:5a:38:2a:9f:75:45: 4b:73:d3:23:0b:20:89:51:32:3f:19:9f:ec:43:a9:e8:38:4a: 16:4d:88:cc:74:6f:6c:1a:89:c0:19:af:70:9f:3b:b3:98:be: 92:b9:0a:e2:30:9a:03:0c:c9:1d:a8:7c:d6:72:3c:09:54:e1: 6b:40:80:b4:93:4b:af:bb:db:e0:17:86:fe:2e:59:b0:9f:f6: 7c:a9:d4:6c:d0:d5:4b:2e:98:2b:7a:93:f4:0a:28:d3:7d:07: f1:8d:fd:4d:d3:29:f2:52:60:7e:72:aa:b8:d1:a3:78:db:3f: 82:89:05:15:ed:08:c1:9d:51:18:5d:40:67:f2:3f:26:78:39: 36:c9:13:ca:40:e5:84:84:6e:85:e6:82:d9:41:ad:5e:ea:e7: 32:33:1b:c6:11:0c:86:d9:5f:d5:cc:ce:61:ab:b0:ef:d6:77: 30:10:c9:23:4d:13:7d:9a:b5:5a:c0:d4:21:4f:d4:94:bb:21: 46:ca:b1:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8Ql2oYkvT98aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzIyZjVhYzItMTQ0Zi00OTM0LTg2MzYtZjI5NTcwNWUwNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqorxq2YHtJYe5QWaSa173MmNdWXysMef/QG gim2/IMZ9lXk9w6/qj0cYtj6nZy1Mq6p0a8hHpNkw6DcOzmspL6NniIH+zbfE4H3 F/wN/Qlv0ZF5fsA5cguqSTzNjW9KoEna3pWNQLabVSpr+hFX6gyl2FketQ9d4jbf a1GXuLuYgPEjoy6zRepa6upiLhOwgEZTDogIXAtZuVQ48SqGbGa4+SDKYM3c25L0 kkpITJhpwwikl2Xxjuo3d+BNHqIN7SCkrKqwK89Y+CjuQ17YquCO+qZJH8ewQsiX SfQ0v3mT16e8fCAhadE/6Lu1pzaHAEcbZLNvmR7gADtn53+fFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLUG/n4y7kdAACtQaqhUCT6r5yDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Y1ZTUwNWMtOGQyYS0z Y2ZkLWI4OGEtYjcwNmM1ZTc1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiboUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOFDQa/Kxktt4gdY99vj3wTp8wCqC1huuou5YoBtCt/2Gq5hxFjh7V1/ +AR1KZbH9q5hpKeTRaP67kefdrq2VQxZ/Vo4Kp91RUtz0yMLIIlRMj8Zn+xDqeg4 ShZNiMx0b2waicAZr3CfO7OYvpK5CuIwmgMMyR2ofNZyPAlU4WtAgLSTS6+72+AX hv4uWbCf9nyp1GzQ1UsumCt6k/QKKNN9B/GN/U3TKfJSYH5yqrjRo3jbP4KJBRXt CMGdURhdQGfyPyZ4OTbJE8pA5YSEboXmgtlBrV7q5zIzG8YRDIbZX9XMzmGrsO/W dzAQySNNE32atVrA1CFP1JS7IUbKscU= -----END CERTIFICATE-----Generated at Sat Oct 31 10:05:15 2026 by rpki-client