$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa File: d4c36706-7a07-30a3-8ac0-4f853f76d634.roa (raw, json) Hash identifier: He1rnO7DIdE8rC3o+5k8mleGUFP98zcI97XfjjKZGlk= Subject key identifier: 75:34:1C:F0:EA:07:90:E0:EC:42:44:BF:3C:76:39:64:C4:FF:9C:47 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584EF18208BED07E6FE1A859E880 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 54203 IP address blocks: 173.255.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:08:be:d0:7e:6f:e1:a8:59:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=91a98e4b-a941-4af9-bb74-060e29ae2c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:82:a8:3a:29:9a:85:cb:c1:6e:a5:4b:5d: a9:2f:cb:25:47:55:1f:08:fb:1e:44:25:b9:47:47: 00:35:0a:d4:8d:f9:d5:d5:57:5e:52:a6:15:d0:90: de:19:6e:c4:13:31:d3:31:6c:be:4d:29:8e:5c:e0: 3c:a6:0c:cd:20:af:b0:89:ae:29:17:95:cd:78:79: 12:05:df:d0:6d:28:0d:e4:ba:c1:04:a9:d2:c2:7d: 84:25:ce:58:71:ae:08:1b:21:fe:df:b6:ac:6b:a8: d9:ab:69:e5:f4:ba:20:5a:f4:f3:49:c3:35:8e:49: e9:59:b2:d4:98:d7:8d:fb:7d:b3:4d:73:0c:b1:6e: c3:0b:87:0b:ba:79:b3:1c:87:2f:5f:c8:52:71:4f: ba:91:e7:08:41:0e:e7:c9:bd:4d:e4:30:35:d0:22: 28:56:40:96:8e:02:df:79:bb:b9:32:29:e4:da:85: 71:a0:84:46:78:c9:9c:9f:d4:f9:1f:9c:56:e1:36: 53:30:7f:02:ce:3d:f0:22:f5:73:76:a0:80:ec:a8: e0:42:0b:e1:48:77:47:e0:2f:f5:40:1b:f6:4a:be: f2:ce:10:a5:1c:36:4c:84:67:bb:15:ba:f4:d0:9d: cb:e6:5f:47:e1:df:73:b9:f9:2b:c0:bf:bc:9c:46: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:34:1C:F0:EA:07:90:E0:EC:42:44:BF:3C:76:39:64:C4:FF:9C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:15:6d:0b:f3:0f:c0:68:5d:69:72:f6:71:3c:d6:ac:b3:0f: cd:fb:e7:75:57:f0:da:c7:e2:fd:07:a9:58:dd:d2:d6:6f:94: 3b:1a:d7:ba:bf:1b:1c:c9:41:35:a4:bd:5c:fe:97:e7:03:57: 5c:ef:00:2f:db:da:51:42:6c:46:ae:aa:38:cb:14:5e:77:f0: 34:39:b0:d9:b4:58:d0:a7:d1:93:6a:54:0c:8d:f9:b8:e2:36: 16:8b:c2:d7:69:f8:cc:33:5f:c2:35:8b:bc:5c:e0:4a:af:3c: aa:08:96:65:52:40:c3:61:16:c6:b2:8b:92:7d:00:df:ff:26: 5f:69:89:43:3b:9b:9c:87:78:6d:2a:3b:96:d1:2e:3d:e5:62: 4b:0f:ef:dc:8f:21:8c:c0:50:60:c8:59:5d:78:68:0c:aa:4d: 07:6f:e4:9f:7a:50:9f:5d:e7:62:a9:29:bf:88:99:36:d4:04: 4e:e6:35:56:86:a9:f4:9f:a4:1f:23:98:09:73:2e:5d:f7:1e: 80:aa:1f:5f:e4:7c:ab:6a:6a:af:d6:cb:93:f5:cb:51:2a:69: f2:ac:fd:12:3f:91:bc:99:3f:af:ad:05:4c:87:4f:f4:26:52: 2d:7b:c2:0d:67:91:72:0a:68:ae:de:af:67:03:3f:36:2b:ed: 95:a3:05:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggi+0H5v4ahZ6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OTFhOThlNGItYTk0MS00YWY5LWJiNzQtMDYwZTI5YWUyYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknWCqDopmoXLwW6lS12pL8slR1UfCPseRCW5 R0cANQrUjfnV1VdeUqYV0JDeGW7EEzHTMWy+TSmOXOA8pgzNIK+wia4pF5XNeHkS Bd/QbSgN5LrBBKnSwn2EJc5Yca4IGyH+37asa6jZq2nl9LogWvTzScM1jknpWbLU mNeN+32zTXMMsW7DC4cLunmzHIcvX8hScU+6kecIQQ7nyb1N5DA10CIoVkCWjgLf ebu5Mink2oVxoIRGeMmcn9T5H5xW4TZTMH8Czj3wIvVzdqCA7KjgQgvhSHdH4C/1 QBv2Sr7yzhClHDZMhGe7Fbr00J3L5l9H4d9zufkrwL+8nEb7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU0HPDqB5Dg7EJEvzx2OWTE/5xHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzY3MDYtN2EwNy0z MGEzLThhYzAtNGY4NTNmNzZkNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEVbQvzD8BoXWly9nE81qyzD83753VX8NrH4v0HqVjd0tZvlDsa17q/ GxzJQTWkvVz+l+cDV1zvAC/b2lFCbEauqjjLFF538DQ5sNm0WNCn0ZNqVAyN+bji NhaLwtdp+MwzX8I1i7xc4EqvPKoIlmVSQMNhFsayi5J9AN//Jl9piUM7m5yHeG0q O5bRLj3lYksP79yPIYzAUGDIWV14aAyqTQdv5J96UJ9d52KpKb+ImTbUBE7mNVaG qfSfpB8jmAlzLl33HoCqH1/kfKtqaq/Wy5P1y1EqafKs/RI/kbyZP6+tBUyHT/Qm Ui17wg1nkXIKaK7er2cDPzYr7ZWjBVs= -----END CERTIFICATE-----Generated at Fri Sep 18 22:14:18 2026 by rpki-client