$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa File: d8250a82-42c8-3463-b657-35c42e18025c.roa (raw, json) Hash identifier: +NpkbuLb3IkM9sUrlE7AziO4FobY5N1ZeYbO1h+Tszs= Subject key identifier: AC:E5:5B:BA:5B:35:24:70:62:12:0B:D2:5E:81:C5:A2:8D:0C:EA:14 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FDC23CDBDA8A18308120 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 207.194.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fd:c2:3c:db:da:8a:18:30:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca4c01e7-1008-4063-a285-f776563868e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:1d:74:37:cc:83:5b:10:ac:ab:dd:12:db: f5:d4:30:bb:f5:b6:9c:30:59:ac:4f:5e:0f:7e:2b: 8b:be:67:ac:93:63:88:ad:b1:3e:fd:43:bb:5d:fd: a1:ff:c2:84:ab:84:a4:89:63:b7:60:8f:b4:b0:ae: d6:e9:2c:58:7f:9a:40:a0:50:49:04:bc:d2:b8:bf: 4b:d0:74:ec:ec:ff:19:db:b9:df:5f:e4:36:db:7f: a3:9f:06:10:21:2f:81:e3:54:33:6d:29:fa:30:a3: 8c:d6:8e:28:e6:b0:36:18:39:b1:bd:16:bc:93:8c: cc:0f:05:a9:ab:47:c4:72:47:d8:1f:f4:2f:68:62: 53:9d:b8:46:62:06:48:af:03:7a:75:40:e5:f3:e3: a8:3a:4f:2e:f3:9f:5a:19:cd:d5:66:73:76:82:5e: 8b:60:54:83:d6:7f:61:83:ce:d9:39:24:e2:b6:dd: d4:94:2e:12:85:e4:f5:b0:5c:f8:06:f2:81:ad:a8: 9a:7c:be:3a:60:66:1a:a5:d6:4e:75:d0:30:4c:85: e7:ba:28:9a:00:25:8f:09:53:66:06:93:c2:65:25: 73:8e:6d:17:fe:aa:e4:04:36:d2:43:7b:cb:cf:dc: 26:1a:7f:82:41:e0:e7:15:a0:f8:b2:54:c3:b0:35: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E5:5B:BA:5B:35:24:70:62:12:0B:D2:5E:81:C5:A2:8D:0C:EA:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:aa:99:a1:0f:64:ec:ee:7d:2e:73:d1:84:73:fd:a6:2f:45: 6d:5a:7a:c1:47:e6:85:29:1a:49:93:8f:a0:8b:09:3a:ea:4f: 75:80:3c:4b:72:aa:cb:d9:15:5c:dc:29:ed:62:97:b0:2d:a8: d7:b4:a4:9d:8a:46:92:ae:8f:6f:f8:88:24:af:7a:91:ab:3f: f6:b1:a5:b5:73:3d:77:e9:cc:68:bd:9f:66:d1:ac:1e:55:52: 0c:31:63:5e:34:47:4e:c0:29:4b:68:39:20:c4:40:ac:84:57: 55:a6:e4:8b:84:02:73:3a:97:d4:a1:02:7a:44:ea:e7:e7:66: 1f:f7:46:d0:78:07:41:35:08:d4:44:cf:e6:ce:34:75:13:62: e1:84:11:f9:f2:5b:d1:57:78:d3:97:e4:0c:50:54:29:30:60: e1:65:38:e1:5f:d2:75:75:9d:57:dd:ff:73:58:43:15:e1:11: 1d:41:09:c6:7c:7b:57:e6:ed:83:77:4c:3f:1a:b1:e9:b3:3a: 73:81:27:0a:df:72:3a:23:7a:d9:0b:01:23:d0:34:ec:d4:8f: e9:d7:17:6e:d2:53:21:3c:bc:19:a9:b5:2a:52:1e:86:e0:b5: 65:9a:0b:10:cd:7b:ba:6a:44:86:cd:2b:c5:84:12:7a:17:1d: f7:5e:f5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/3CPNvaihgwgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E0YzAxZTctMTAwOC00MDYzLWEyODUtZjc3NjU2Mzg2OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkUddDfMg1sQrKvdEtv11DC79bacMFmsT14P fiuLvmesk2OIrbE+/UO7Xf2h/8KEq4SkiWO3YI+0sK7W6SxYf5pAoFBJBLzSuL9L 0HTs7P8Z27nfX+Q223+jnwYQIS+B41QzbSn6MKOM1o4o5rA2GDmxvRa8k4zMDwWp q0fEckfYH/QvaGJTnbhGYgZIrwN6dUDl8+OoOk8u859aGc3VZnN2gl6LYFSD1n9h g87ZOSTitt3UlC4SheT1sFz4BvKBraiafL46YGYapdZOddAwTIXnuiiaACWPCVNm BpPCZSVzjm0X/qrkBDbSQ3vLz9wmGn+CQeDnFaD4slTDsDW6ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzlW7pbNSRwYhIL0l6BxaKNDOoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDgyNTBhODItNDJjOC0z NDYzLWI2NTctMzVjNDJlMTgwMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGqmaEPZOzufS5z0YRz/aYvRW1aesFH5oUpGkmTj6CLCTrqT3WAPEty qsvZFVzcKe1il7AtqNe0pJ2KRpKuj2/4iCSvepGrP/axpbVzPXfpzGi9n2bRrB5V UgwxY140R07AKUtoOSDEQKyEV1Wm5IuEAnM6l9ShAnpE6ufnZh/3RtB4B0E1CNRE z+bONHUTYuGEEfnyW9FXeNOX5AxQVCkwYOFlOOFf0nV1nVfd/3NYQxXhER1BCcZ8 e1fm7YN3TD8asemzOnOBJwrfcjojetkLASPQNOzUj+nXF27SUyE8vBmptSpSHobg tWWaCxDNe7pqRIbNK8WEEnoXHfde9R4= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:11 2026 by rpki-client