$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/45620fa2-5dbb-3f6c-bd44-aa149301b646.roa File: 45620fa2-5dbb-3f6c-bd44-aa149301b646.roa (raw, json) Hash identifier: mshTzQj7n6t6W9q/cgJEkEVx4UFUt4tX8rI1Q/4tzFE= Subject key identifier: EF:EA:2F:61:86:F8:2D:66:88:EC:DD:A2:6A:EC:39:68:83:D3:2B:EC Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584F49873FC523FD8000454D7000 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/45620fa2-5dbb-3f6c-bd44-aa149301b646.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399672 IP address blocks: 206.174.136.0/24 maxlen: 24 206.174.137.0/24 maxlen: 24 206.174.138.0/24 maxlen: 24 206.174.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:3f:c5:23:fd:80:00:45:4d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3a12677-0e7d-4894-8004-7b3113c1f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:25:25:0c:c4:82:e8:85:a0:67:63:d8:5c: a4:8e:64:78:0e:05:0d:f4:1d:11:ca:fc:64:80:dd: 05:67:fa:2e:49:4d:7c:e8:d0:c5:1b:41:fc:de:d0: 0e:9b:e5:52:c9:65:fc:33:44:13:e9:9e:c8:03:ca: 1b:92:59:3f:7a:4c:55:9d:c5:81:cc:48:a2:04:9e: 35:c1:bd:cd:48:b5:fd:6f:0a:e3:94:62:bb:bb:8a: cd:6b:ab:46:08:83:da:14:89:05:d8:dc:db:65:f6: aa:35:8f:a7:52:db:ed:64:14:5c:18:da:2f:0d:26: 18:5b:22:1b:1f:d4:66:f6:2e:32:25:9b:89:d9:55: f3:56:a0:a1:fa:f5:6a:ed:3d:a2:76:49:35:b5:f9: 16:d7:2e:d8:77:30:0a:4d:5d:52:77:1a:cd:d8:81: a6:98:20:82:ee:ba:fa:e0:9d:c5:a4:c6:2e:7a:c2: 5e:f9:12:9e:cc:c8:47:48:8e:0e:4f:12:f3:f5:41: af:fb:5f:f0:e1:91:63:1c:aa:bf:ad:c1:b0:90:2e: 94:4e:e9:a9:f0:be:88:da:4d:cc:78:45:91:a6:33: 48:8d:0f:36:d0:cb:1c:24:f0:f9:b4:38:fd:75:cc: 56:b7:46:b6:3c:03:9e:d0:f4:46:7d:4d:56:82:bf: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:2F:61:86:F8:2D:66:88:EC:DD:A2:6A:EC:39:68:83:D3:2B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/45620fa2-5dbb-3f6c-bd44-aa149301b646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e3:5b:a6:00:14:62:59:be:dd:43:be:cc:d8:e9:29:b9:40: 66:91:7d:d1:37:07:3f:4b:a7:4c:ba:b5:30:14:ee:11:5e:b0: 8d:07:c0:51:9d:ec:bc:b6:ff:4a:23:99:a0:75:6a:b3:e5:9c: 90:ab:86:fa:a0:78:4d:b2:59:66:72:8c:4d:a9:98:ce:ed:b1: 5e:c7:b1:84:34:d2:b9:34:59:73:1b:ed:6c:7c:5b:9b:12:06: 1a:cf:dc:e7:6e:8c:f3:80:da:f4:cd:3b:3a:76:66:dd:94:2e: fa:12:f8:44:3b:85:bf:24:3b:8b:f3:91:5a:aa:4e:04:88:7f: f7:1f:3a:3f:ca:a7:59:5c:54:26:68:4c:0b:1d:c6:cf:69:dc: 8c:d3:98:95:04:0d:ff:94:46:e5:dc:00:5e:64:07:cd:19:1d: f1:a0:50:b2:12:e6:b9:08:61:f5:ca:d5:5a:01:9d:a5:a9:dd: 74:37:47:a1:68:9b:b5:4c:0f:2e:c1:e8:ac:b9:60:f4:d6:f5: 77:18:7b:8b:05:9a:f5:63:e8:3f:4a:e9:44:54:10:9d:8e:ca: fd:f5:5a:ef:89:1a:5e:01:ce:b6:bf:03:65:9e:7c:a0:fd:d8: d6:81:04:2b:ae:0b:1b:4b:16:fb:b5:43:29:a3:85:19:e9:fb: 74:f6:51:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhz/FI/2AAEVNcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNhMTI2NzctMGU3ZC00ODk0LTgwMDQtN2IzMTEzYzFmNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJslJQzEguiFoGdj2FykjmR4DgUN9B0Ryvxk gN0FZ/ouSU186NDFG0H83tAOm+VSyWX8M0QT6Z7IA8obklk/ekxVncWBzEiiBJ41 wb3NSLX9bwrjlGK7u4rNa6tGCIPaFIkF2NzbZfaqNY+nUtvtZBRcGNovDSYYWyIb H9Rm9i4yJZuJ2VXzVqCh+vVq7T2idkk1tfkW1y7YdzAKTV1SdxrN2IGmmCCC7rr6 4J3FpMYuesJe+RKezMhHSI4OTxLz9UGv+1/w4ZFjHKq/rcGwkC6UTump8L6I2k3M eEWRpjNIjQ820MscJPD5tDj9dcxWt0a2PAOe0PRGfU1Wgr9FiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/qL2GG+C1miOzdomrsOWiD0yvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvNDU2MjBmYTItNWRiYi0z ZjZjLWJkNDQtYWExNDkzMDFiNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTjW6YAFGJZvt1DvszY6Sm5QGaRfdE3Bz9Lp0y6tTAU7hFesI0HwFGd 7Ly2/0ojmaB1arPlnJCrhvqgeE2yWWZyjE2pmM7tsV7HsYQ00rk0WXMb7Wx8W5sS BhrP3OdujPOA2vTNOzp2Zt2ULvoS+EQ7hb8kO4vzkVqqTgSIf/cfOj/Kp1lcVCZo TAsdxs9p3IzTmJUEDf+URuXcAF5kB80ZHfGgULIS5rkIYfXK1VoBnaWp3XQ3R6Fo m7VMDy7B6Ky5YPTW9XcYe4sFmvVj6D9K6URUEJ2Oyv31Wu+JGl4Bzra/A2WefKD9 2NaBBCuuCxtLFvu1QymjhRnp+3T2UbE= -----END CERTIFICATE-----Generated at Tue Oct 20 18:20:06 2026 by rpki-client