$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/361919a1-fa92-3b94-8c00-00d01a9f5d90.roa File: 361919a1-fa92-3b94-8c00-00d01a9f5d90.roa (raw, json) Hash identifier: ghkkLCsoFfPSmKiy2d/fWusQ+jdnroUyHfgTaJVAbnU= Subject key identifier: 04:47:8E:A6:C6:0F:10:B2:FC:D7:8E:FB:99:D3:18:F5:8E:66:DE:F1 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584F0ED2393DFE19D284A09ECE00 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/361919a1-fa92-3b94-8c00-00d01a9f5d90.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 6597 IP address blocks: 209.195.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:39:3d:fe:19:d2:84:a0:9e:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=037d95da-c5ba-4b70-ab5c-4ec32525b4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:80:26:7c:37:75:db:cc:a2:8f:7d:02:7b: d5:b7:99:f0:50:2a:58:be:25:d7:69:e6:c1:f6:a2: ee:fb:d6:ea:42:c4:d7:e9:52:e6:fe:c3:fe:9e:a5: 81:0d:7c:13:31:08:4d:e3:62:01:01:b0:57:f4:3c: 85:97:65:37:31:65:78:84:49:f2:5a:e2:2b:3f:d9: bb:80:d6:6f:38:92:00:5f:bd:e4:20:f6:21:e6:56: b1:85:ba:dd:d5:e0:bb:1b:a8:1f:ae:e4:1a:3b:83: f9:ad:5f:fb:e7:58:a3:b8:dd:08:0b:27:ac:e1:0d: 8c:da:1d:7f:cd:ce:7c:be:9a:ed:8a:09:dc:8c:73: e1:3d:24:84:c9:0c:db:c1:f4:24:92:a2:16:fb:a5: eb:92:04:71:df:74:11:54:3d:3e:24:25:36:60:a1: 8b:b2:fa:fe:1d:63:b5:ef:7c:e6:e7:fe:be:1a:f8: 04:07:90:a3:50:e8:47:47:0a:38:67:0d:fb:8e:91: 83:ac:8c:6b:e5:50:b5:ed:94:eb:89:5e:a3:7d:06: ba:a3:94:fb:af:44:e8:91:e5:71:1d:ff:5e:76:72: f7:f1:2d:94:9c:2f:59:55:30:f8:54:93:7f:f1:b9: e6:bb:69:04:f1:24:d9:cb:47:74:70:6c:1d:28:e0: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:47:8E:A6:C6:0F:10:B2:FC:D7:8E:FB:99:D3:18:F5:8E:66:DE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/361919a1-fa92-3b94-8c00-00d01a9f5d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 209.195.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9b:43:b2:95:70:09:90:e1:77:04:41:52:98:7a:1f:c9:9c: 29:29:88:0d:03:3c:6d:89:fb:cd:b3:1b:d6:a8:4b:33:64:95: d1:4c:6f:b0:30:43:5c:2e:e8:32:2c:bd:e6:1e:0b:5d:c0:c3: f1:ee:27:a7:11:8e:1a:5d:a8:c7:f4:4f:67:0f:5c:2d:1b:20: 95:68:16:44:86:03:e6:0d:0d:58:62:2a:34:64:50:ed:8a:77: ba:04:d1:b0:a8:d1:40:2f:30:57:4b:98:75:2c:dc:a3:32:6c: 5f:eb:25:2a:19:6c:52:67:95:37:ca:32:ab:eb:b0:20:4c:a2: 9e:b3:9d:4b:81:8c:61:ad:ef:a5:41:76:6e:69:06:a3:44:aa: c1:4a:73:68:24:a1:bf:15:41:72:3a:f3:2d:20:54:82:f1:0f: 68:f0:2b:0d:d2:a1:97:ec:4b:a9:22:cd:b1:2b:53:7c:70:d6: 32:ba:f5:3e:38:67:d6:e7:78:38:79:96:d1:d3:0c:a8:8a:6f: ce:c4:45:6b:8d:07:32:05:a6:a2:12:77:c3:a0:cd:54:4d:92: 39:17:d6:c5:43:ea:47:1e:6a:05:1c:aa:35:a2:1c:f5:15:5a: 1d:18:f9:7f:67:89:d2:73:35:f8:f0:53:99:3b:29:fd:70:14: 78:f8:a0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jk9/hnShKCezgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDM3ZDk1ZGEtYzViYS00YjcwLWFiNWMtNGVjMzI1MjViNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGKAJnw3ddvMoo99AnvVt5nwUCpYviXXaebB 9qLu+9bqQsTX6VLm/sP+nqWBDXwTMQhN42IBAbBX9DyFl2U3MWV4hEnyWuIrP9m7 gNZvOJIAX73kIPYh5laxhbrd1eC7G6gfruQaO4P5rV/751ijuN0ICyes4Q2M2h1/ zc58vprtigncjHPhPSSEyQzbwfQkkqIW+6XrkgRx33QRVD0+JCU2YKGLsvr+HWO1 73zm5/6+GvgEB5CjUOhHRwo4Zw37jpGDrIxr5VC17ZTriV6jfQa6o5T7r0TokeVx Hf9ednL38S2UnC9ZVTD4VJN/8bnmu2kE8STZy0d0cGwdKOCUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARHjqbGDxCy/NeO+5nTGPWOZt7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMzYxOTE5YTEtZmE5Mi0z Yjk0LThjMDAtMDBkMDFhOWY1ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFibQ7KVcAmQ4XcEQVKYeh/JnCkpiA0DPG2J+82zG9aoSzNkldFMb7Aw Q1wu6DIsveYeC13Aw/HuJ6cRjhpdqMf0T2cPXC0bIJVoFkSGA+YNDVhiKjRkUO2K d7oE0bCo0UAvMFdLmHUs3KMybF/rJSoZbFJnlTfKMqvrsCBMop6znUuBjGGt76VB dm5pBqNEqsFKc2gkob8VQXI68y0gVILxD2jwKw3SoZfsS6kizbErU3xw1jK69T44 Z9bneDh5ltHTDKiKb87ERWuNBzIFpqISd8OgzVRNkjkX1sVD6kceagUcqjWiHPUV Wh0Y+X9nidJzNfjwU5k7Kf1wFHj4oOE= -----END CERTIFICATE-----Generated at Thu Sep 10 17:41:54 2026 by rpki-client