$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20343032383537.roa File: 3137332e302e3131312e302f32342d3234203d3e20343032383537.roa (raw, json) Hash identifier: sXfJGNAy+EHDQP/oUiqi2n/IFpcWcJjrjUyzwb0xxKc= Subject key identifier: E6:E2:24:7F:E9:5A:C2:78:1B:58:12:DA:A5:AD:B8:09:97:4F:47:14 Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272 Certificate serial: 3AF5ECBE36E1348B216F4A22D33B44F696D18928 Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20343032383537.roa Signing time: Wed 30 Sep 2026 09:14:20 +0000 ROA not before: Wed 30 Sep 2026 09:09:20 +0000 ROA not after: Wed 29 Sep 2027 09:14:20 +0000 asID: 402857 IP address blocks: 173.0.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 12:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f5:ec:be:36:e1:34:8b:21:6f:4a:22:d3:3b:44:f6:96:d1:89:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272 Validity Not Before: Sep 30 09:09:20 2026 GMT Not After : Sep 29 09:14:20 2027 GMT Subject: CN=E6E2247FE95AC2781B5812DAA5ADB809974F4714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:0a:84:bc:b3:35:5d:c0:ce:b5:9b:80:9c: 5d:a8:eb:d8:8f:c8:03:fc:ad:1e:58:c9:e7:e5:35: 7a:23:68:6d:4a:53:9e:c3:66:16:f4:b3:33:02:d5: f2:94:54:42:e4:27:6b:db:60:00:9f:7e:92:42:66: e6:b8:ad:5c:f2:04:96:e4:17:e7:18:1d:33:c4:0b: e7:b6:b0:63:41:51:0a:0c:47:d0:7d:46:51:2d:55: 05:5e:b4:39:c6:6e:92:b8:e3:35:9a:9d:fc:96:47: 80:dd:61:f8:ae:78:32:c3:ff:2a:db:93:38:73:66: c6:fc:cf:41:21:12:b2:7d:f1:67:48:8f:59:9b:53: 6c:40:31:3c:d5:a3:0f:f8:5c:e2:1b:e1:e9:5a:e0: 61:9c:bf:f6:b9:87:a4:47:4a:9f:b8:a8:dd:17:d0: e7:80:4e:d3:5b:72:f7:b4:93:bf:10:41:d5:7e:80: 46:20:ba:62:eb:27:7f:4b:b0:b1:46:c4:14:63:05: 43:cf:fc:11:6a:6f:84:89:9b:3d:bf:a4:49:d3:10: 2a:98:76:71:d4:29:5f:05:ea:b0:7f:97:79:5f:d5: c3:c3:6c:56:1c:5e:13:50:d7:9d:9d:b8:82:7d:72: 78:10:85:d5:de:ee:0a:9e:9f:92:39:5e:ad:7d:af: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:24:7F:E9:5A:C2:78:1B:58:12:DA:A5:AD:B8:09:97:4F:47:14 X509v3 Authority Key Identifier: keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20343032383537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.0.111.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a2:ec:42:3c:79:e6:ed:d8:29:7d:9d:b1:13:cf:18:64:1c: 1c:28:97:6d:21:5f:0e:e5:c1:a7:5d:03:18:a9:61:66:12:de: f9:3c:43:69:fb:80:49:48:f8:21:0d:47:54:15:b2:67:c3:a8: 97:98:fd:c7:3e:4c:51:e7:7c:e4:9f:d4:58:53:e5:f7:27:d5: 1b:2d:f5:6c:6e:a5:c7:c6:71:35:36:f3:24:7f:e8:16:7f:c1: 7a:7a:e4:1a:6e:51:79:90:70:96:ae:35:91:d9:a7:2a:5d:a1: c5:6e:21:72:bb:1f:ff:09:69:2f:a5:ec:2e:95:47:9f:fe:af: 90:ea:fa:c2:4b:86:a1:cd:bf:08:f3:70:6a:11:35:2b:68:eb: 47:3c:a0:db:f6:e3:fc:5c:d8:96:6d:21:3e:51:a1:0c:6b:0c: b1:67:a1:61:95:85:74:7c:c8:c7:26:eb:1c:6a:07:15:e1:4e: 5b:84:97:6a:a7:bb:fe:bb:a2:82:65:85:af:e6:6f:fd:ec:ef: 53:91:73:54:f6:36:91:e4:cc:33:2c:e1:fd:55:79:8e:d6:bc: aa:76:04:17:97:85:8f:04:df:0d:41:d6:46:65:2b:ed:85:db: 9d:16:cf:b4:db:60:75:6b:6a:74:1b:16:95:c9:ef:11:6e:e7: 66:ac:4b:de -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUOvXsvjbhNIshb0oi0ztE9pbRiSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYwOTMwMDkwOTIwWhcNMjcwOTI5MDkxNDIw WjAzMTEwLwYDVQQDEyhFNkUyMjQ3RkU5NUFDMjc4MUI1ODEyREFBNUFEQjgwOTk3 NEY0NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4YKhLyzNV3A zrWbgJxdqOvYj8gD/K0eWMnn5TV6I2htSlOew2YW9LMzAtXylFRC5Cdr22AAn36S QmbmuK1c8gSW5BfnGB0zxAvntrBjQVEKDEfQfUZRLVUFXrQ5xm6SuOM1mp38lkeA 3WH4rngyw/8q25M4c2bG/M9BIRKyffFnSI9Zm1NsQDE81aMP+FziG+HpWuBhnL/2 uYekR0qfuKjdF9DngE7TW3L3tJO/EEHVfoBGILpi6yd/S7CxRsQUYwVDz/wRam+E iZs9v6RJ0xAqmHZx1ClfBeqwf5d5X9XDw2xWHF4TUNednbiCfXJ4EIXV3u4Knp+S OV6tfa8tfQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFObiJH/pWsJ4G1gS2qWtuAmX T0cUMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0 OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hZmIwMWY2ZTAxZGU0MmEyOWViZmMz OWMwMmRkNTM2OC8wLzMxMzczMzJlMzAyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzAzMjM4MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK0AbzANBgkqhkiG9w0BAQsF AAOCAQEAgKLsQjx55u3YKX2dsRPPGGQcHCiXbSFfDuXBp10DGKlhZhLe+TxDafuA SUj4IQ1HVBWyZ8Ool5j9xz5MUed85J/UWFPl9yfVGy31bG6lx8ZxNTbzJH/oFn/B enrkGm5ReZBwlq41kdmnKl2hxW4hcrsf/wlpL6XsLpVHn/6vkOr6wkuGoc2/CPNw ahE1K2jrRzyg2/bj/FzYlm0hPlGhDGsMsWehYZWFdHzIxybrHGoHFeFOW4SXaqe7 /ruigmWFr+Zv/ezvU5FzVPY2keTMMyzh/VV5jta8qnYEF5eFjwTfDUHWRmUr7YXb nRbPtNtgdWtqdBsWlcnvEW7nZqxL3g== -----END CERTIFICATE-----Generated at Wed Oct 7 04:16:26 2026 by rpki-client