$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/3a96d8cf-3a24-324b-bc74-9e49b0c11e33.roa File: 3a96d8cf-3a24-324b-bc74-9e49b0c11e33.roa (raw, json) Hash identifier: zu/aa1PS4LQZwKlqeRzTvF2psL0bHZn3lITKosOs4H0= Subject key identifier: 9A:54:A1:7C:14:05:A4:ED:52:4D:AB:5D:93:69:06:40:00:AB:9A:91 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584F49878FD4E0A24A488EA9BA20 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/3a96d8cf-3a24-324b-bc74-9e49b0c11e33.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40934 IP address blocks: 159.48.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:8f:d4:e0:a2:4a:48:8e:a9:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a948ab28-2e58-43db-bfdd-068a6f3007ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:13:72:f6:a4:ef:28:a7:53:a9:1a:8c:af:e7: a4:b1:8c:06:09:9f:5e:62:ef:db:65:7c:8a:5a:0e: 85:37:63:21:57:40:79:3f:51:4d:e3:90:99:40:4e: bb:6d:4e:e8:20:0b:09:1f:85:c3:d1:1a:5d:75:23: f1:5c:3c:9b:52:16:b5:14:42:37:13:18:11:28:36: 52:ac:aa:5a:42:77:30:00:55:3b:51:02:d3:06:de: 44:1b:3c:86:e2:5b:0f:f9:3d:7e:2d:eb:ea:53:7e: 7f:01:b0:1b:0a:4c:d9:d5:4d:95:31:d3:8c:5b:ee: 3e:82:09:72:2e:5f:9e:3f:5f:58:44:59:6e:df:55: cb:85:ae:3a:90:51:6a:55:21:e3:2c:9b:67:89:2c: c2:a8:b1:cc:fc:04:1a:e7:d4:58:1f:3c:ce:f0:ed: 7a:99:b4:60:ba:78:ed:59:ee:13:ed:1f:36:66:10: 82:46:2c:4f:f8:bc:82:4a:9a:83:41:f5:24:d9:94: ba:04:5c:6a:52:75:ff:7b:5e:30:5a:0c:b4:56:ea: e3:d7:a4:a1:fb:70:3c:1e:e0:5d:c1:1b:24:69:f2: 89:fa:2f:5d:49:b6:5f:fb:6c:ba:89:eb:45:9f:dd: 4d:e3:c2:85:96:23:67:e9:d1:f8:d7:46:80:99:7e: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:A1:7C:14:05:A4:ED:52:4D:AB:5D:93:69:06:40:00:AB:9A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/3a96d8cf-3a24-324b-bc74-9e49b0c11e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 159.48.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e0:f8:f5:8f:19:21:c0:bf:82:22:b7:a3:e6:54:07:c9:23: 8d:9d:31:97:54:d2:4d:3b:90:6c:5c:c8:02:bf:50:0c:56:a2: 25:ce:1f:ff:18:c4:94:1b:51:dc:c0:42:10:c9:8e:4b:32:dc: 95:b1:fb:dc:f0:9a:aa:5b:a9:8a:c0:07:20:ac:24:3d:9f:7e: 4a:89:5f:48:c0:ab:1f:07:6e:a1:88:ba:9b:77:43:c8:c4:48: 26:38:49:bd:a7:a4:63:ec:9e:3a:d3:3a:f0:80:f7:ad:ab:91: 22:df:37:fe:a8:35:61:91:19:39:4c:36:7e:81:1f:88:8b:07: 0d:08:00:57:29:65:7b:05:2e:1b:7c:9b:21:d0:e3:a8:c2:13: fb:23:76:0f:13:1f:3d:28:15:d4:08:5a:f4:93:cf:36:f4:fa: bf:39:8c:f7:69:51:0c:8b:90:12:1b:f6:31:28:f1:18:43:2f: 61:83:f7:88:c0:e0:56:d7:91:b8:f9:ad:39:13:eb:c4:91:29: b7:b1:b3:1a:2b:80:21:43:45:e1:eb:8b:a3:66:c4:27:33:01: 83:fa:4f:0f:08:52:8b:d6:2b:81:5e:cf:5a:cf:c2:af:e2:17: 1f:5c:70:85:0b:a4:19:97:fd:84:38:0d:c6:64:49:0a:3e:5f: 83:2a:58:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4/U4KJKSI6puiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk0OGFiMjgtMmU1OC00M2RiLWJmZGQtMDY4YTZmMzAwN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BNy9qTvKKdTqRqMr+eksYwGCZ9eYu/bZXyK Wg6FN2MhV0B5P1FN45CZQE67bU7oIAsJH4XD0RpddSPxXDybUha1FEI3ExgRKDZS rKpaQncwAFU7UQLTBt5EGzyG4lsP+T1+LevqU35/AbAbCkzZ1U2VMdOMW+4+ggly Ll+eP19YRFlu31XLha46kFFqVSHjLJtniSzCqLHM/AQa59RYHzzO8O16mbRgunjt We4T7R82ZhCCRixP+LyCSpqDQfUk2ZS6BFxqUnX/e14wWgy0Vurj16Sh+3A8HuBd wRskafKJ+i9dSbZf+2y6ietFn91N48KFliNn6dH410aAmX68LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpUoXwUBaTtUk2rXZNpBkAAq5qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvM2E5NmQ4Y2YtM2EyNC0z MjRiLWJjNzQtOWU0OWIwYzExZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnzC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvg+PWPGSHAv4Iit6PmVAfJI42dMZdU0k07kGxcyAK/UAxWoiXOH/8Y xJQbUdzAQhDJjksy3JWx+9zwmqpbqYrAByCsJD2ffkqJX0jAqx8HbqGIupt3Q8jE SCY4Sb2npGPsnjrTOvCA962rkSLfN/6oNWGRGTlMNn6BH4iLBw0IAFcpZXsFLht8 myHQ46jCE/sjdg8THz0oFdQIWvSTzzb0+r85jPdpUQyLkBIb9jEo8RhDL2GD94jA 4FbXkbj5rTkT68SRKbexsxorgCFDReHri6NmxCczAYP6Tw8IUovWK4Fez1rPwq/i Fx9ccIULpBmX/YQ4DcZkSQo+X4MqWEo= -----END CERTIFICATE-----Generated at Sat Oct 31 15:23:50 2026 by rpki-client