$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa File: 842ce387-8918-38c2-8a38-4d294a77d361.roa (raw, json) Hash identifier: aspOHuYU1Uy5dYuEkyM4wp+i3j1roKVdH/0CSlDLaKk= Subject key identifier: BA:72:96:25:7F:C4:8B:3C:16:91:CE:40:39:D8:54:89:97:1A:9A:32 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584EFCACCC0C1DC9D18369C7FBC0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 91 IP address blocks: 146.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cc:0c:1d:c9:d1:83:69:c7:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=3a9342e1-5a51-4d81-a748-d3e3dc64647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:15:23:5d:ce:32:d5:40:8f:27:e2:6a:41:bc: be:cf:f0:1d:10:b2:cd:f6:0f:07:2b:5b:87:93:bc: f6:58:37:c1:f5:68:19:c2:50:cc:43:58:41:79:2d: 50:ed:01:2d:88:b1:ed:e8:4f:79:b5:d2:1e:70:10: 28:db:e0:fc:71:16:1b:cf:94:16:b8:6d:19:30:df: 53:f6:96:0a:0d:b4:c2:e7:ba:14:5c:9b:09:f5:c7: 74:1e:bd:ab:3d:6e:2b:d3:20:d5:ca:35:0d:21:89: c9:52:be:58:3a:cb:27:3c:96:74:07:a0:52:d6:13: fe:48:2e:d3:26:96:ad:59:c0:41:7d:1e:1f:f6:d8: 1e:d7:36:09:22:fd:85:7d:17:22:cc:f5:56:c2:89: fb:f4:59:f7:7e:7e:e6:f3:10:42:f4:1b:46:5e:41: ca:67:db:70:6d:53:93:1e:97:01:6d:98:4b:06:7b: 99:cb:b4:10:51:6b:a1:e5:2a:43:96:ca:34:e4:ea: 55:4d:93:6e:d6:db:e9:55:fe:f5:95:d7:f1:d6:33: 9c:01:10:98:97:9d:6e:5b:34:08:a8:55:74:2d:aa: 94:62:27:d5:27:84:83:d1:af:f6:7f:dc:51:25:2f: a5:df:64:8d:fc:14:27:2e:a1:37:02:d1:fc:99:64: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:96:25:7F:C4:8B:3C:16:91:CE:40:39:D8:54:89:97:1A:9A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 146.8.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:57:b0:35:48:e5:53:7e:4d:90:2b:38:fe:cc:00:82:fd:30: 06:5a:84:9e:04:5d:6a:5f:d3:4b:11:86:c2:29:db:7f:19:2d: cb:6b:b0:22:0f:fe:3f:1d:1f:aa:aa:34:85:18:d2:6d:4d:17: 98:c1:b7:a3:f8:ae:0a:79:cd:27:b0:54:2a:d8:3f:d7:a6:bf: c6:ae:db:25:a3:23:cf:4d:94:05:15:ca:93:ca:c2:3d:70:5b: f6:47:ec:80:78:06:01:23:0f:1f:0b:c9:90:84:23:12:d6:81: cc:9f:8c:f0:5a:e4:7b:7a:7e:89:b4:22:02:c5:42:8a:40:ff: d5:cb:fa:d9:70:8d:2e:f6:55:8d:17:45:ee:15:2f:43:ab:e6: 7a:bf:c6:71:e6:31:27:f2:bb:04:6e:5b:49:ff:59:40:a1:dc: 70:6e:6d:27:ea:33:7c:19:5d:09:ef:45:11:a7:6d:29:43:34: fb:4f:65:ee:ef:92:0d:5f:1d:0a:d0:ce:28:62:0e:57:ca:2d: 6c:7a:ec:51:9e:ed:09:8f:50:f3:c4:47:43:4e:93:59:f1:03: 94:0a:3d:ab:2f:f5:89:cd:aa:f1:39:86:2c:f5:33:f7:e2:dd: a4:bb:9d:47:0e:9d:ca:2b:9e:ff:6c:b1:5f:c6:91:c9:84:ff: 1e:aa:71:b8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE78rMwMHcnRg2nH+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2E5MzQyZTEtNWE1MS00ZDgxLWE3NDgtZDNlM2RjNjQ2NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhUjXc4y1UCPJ+JqQby+z/AdELLN9g8HK1uH k7z2WDfB9WgZwlDMQ1hBeS1Q7QEtiLHt6E95tdIecBAo2+D8cRYbz5QWuG0ZMN9T 9pYKDbTC57oUXJsJ9cd0Hr2rPW4r0yDVyjUNIYnJUr5YOssnPJZ0B6BS1hP+SC7T JpatWcBBfR4f9tge1zYJIv2FfRcizPVWwon79Fn3fn7m8xBC9BtGXkHKZ9twbVOT HpcBbZhLBnuZy7QQUWuh5SpDlso05OpVTZNu1tvpVf71ldfx1jOcARCYl51uWzQI qFV0LaqUYifVJ4SD0a/2f9xRJS+l32SN/BQnLqE3AtH8mWT+fQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLpyliV/xIs8FpHOQDnYVImXGpoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvODQyY2UzODctODkxOC0z OGMyLThhMzgtNGQyOTRhNzdkMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkggwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACFewNUjlU35NkCs4/swAgv0wBlqEngRdal/TSxGGwinbfxkty2uwIg/+ Px0fqqo0hRjSbU0XmMG3o/iuCnnNJ7BUKtg/16a/xq7bJaMjz02UBRXKk8rCPXBb 9kfsgHgGASMPHwvJkIQjEtaBzJ+M8Frke3p+ibQiAsVCikD/1cv62XCNLvZVjRdF 7hUvQ6vmer/GceYxJ/K7BG5bSf9ZQKHccG5tJ+ozfBldCe9FEadtKUM0+09l7u+S DV8dCtDOKGIOV8otbHrsUZ7tCY9Q88RHQ06TWfEDlAo9qy/1ic2q8TmGLPUz9+Ld pLudRw6dyiue/2yxX8aRyYT/HqpxuA== -----END CERTIFICATE-----Generated at Mon Sep 14 01:22:53 2026 by rpki-client