$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json) Hash identifier: Z8ajWvmH0u+Qk9uo9trAaftnw63xP4/LpoZ8yYfNyGw= Subject key identifier: 6C:C2:2E:A1:74:E1:04:CC:A6:14:1E:B7:62:99:A7:79:52:BF:EC:FA Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F43DD59A589880DD82080C980 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 173.231.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:59:a5:89:88:0d:d8:20:80:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=cc9afddb-1842-44eb-90b1-523cb078d9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:82:ed:b6:23:7f:74:2f:39:27:2d:8b:2b: 04:7a:33:f8:fd:19:43:76:f5:42:21:11:26:82:59: 5f:6a:c1:a6:c6:a8:ad:e1:5f:cd:c6:f7:87:5d:af: de:11:9e:5c:ee:13:89:8e:a2:ca:30:85:5b:6d:b0: f8:86:60:82:e1:31:b2:dd:7c:05:fa:18:82:49:49: 04:75:32:ad:96:28:34:83:41:9a:de:20:ef:03:06: 95:77:b6:b9:5f:01:12:83:5d:bb:63:a9:8d:df:c9: 32:fe:4c:8c:c7:4c:b0:d8:02:25:30:d9:17:d8:5c: 4a:b4:60:f9:ce:37:96:64:87:ce:08:9c:39:b9:bf: 94:7a:81:1e:bc:a8:24:ce:62:4c:c5:42:8e:d0:db: 65:02:1e:10:85:88:35:8e:d0:47:97:d4:ce:71:bc: ae:a7:e7:7a:ec:7f:4f:9c:48:7b:0b:46:63:3f:92: 0a:1a:03:b6:b6:19:98:9d:6a:d2:89:7e:de:fa:38: dc:c6:27:eb:41:44:16:a9:c5:8d:5e:68:c6:2b:fb: 4d:4c:65:23:8c:b9:10:38:9e:5e:e7:2f:4d:be:7f: ab:40:cf:36:97:23:82:26:64:0c:49:af:c0:4f:99: 4d:4b:c2:86:4b:7f:51:5c:1c:f7:bd:bd:57:a1:5e: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:2E:A1:74:E1:04:CC:A6:14:1E:B7:62:99:A7:79:52:BF:EC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ae:03:8f:67:1b:0a:10:c2:c2:fb:a6:09:c8:60:fb:e4:db: b7:6d:c8:3d:af:c8:2e:73:e2:e7:1a:f3:00:89:f2:ac:ed:43: 02:16:35:be:df:65:b6:d5:02:71:92:2e:8c:b8:b3:41:2c:be: f2:bb:ee:95:16:02:3c:17:24:2c:49:e6:6f:ee:05:46:6d:4a: e5:f2:86:5e:ea:25:2f:c7:61:94:e7:c0:55:c3:7e:ff:a8:c3: 69:a1:20:db:05:95:34:14:25:29:a3:ed:b9:2e:ce:a3:b1:d8: 00:8d:fb:55:49:e5:65:5f:ef:ef:b5:98:5d:a3:89:f1:c6:31: 6a:0e:8b:81:2d:c7:b8:44:7d:9b:4e:8b:60:51:c5:8b:cf:13: 05:e2:59:77:28:60:c8:4f:29:d8:c4:00:bc:66:cb:7f:7a:e2: 6e:4a:b8:40:10:13:08:27:af:21:98:ee:d9:2e:e7:81:5d:eb: e9:b9:93:f7:bb:d4:3e:59:3c:cb:7f:1f:a3:ee:a4:60:01:3f: 49:27:db:2e:cf:94:f2:a3:3e:d7:85:f0:7d:c7:e5:47:43:41: b5:17:f0:a9:eb:9f:81:dc:80:b1:7c:c3:84:83:f9:6a:00:dd: 9b:ae:2c:93:7c:39:65:ec:89:cf:2f:c6:d9:6c:86:c2:b4:b9: c4:49:fa:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VmliYgN2CCAyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2M5YWZkZGItMTg0Mi00NGViLTkwYjEtNTIzY2IwNzhkOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE2C7bYjf3QvOSctiysEejP4/RlDdvVCIREm gllfasGmxqit4V/NxveHXa/eEZ5c7hOJjqLKMIVbbbD4hmCC4TGy3XwF+hiCSUkE dTKtlig0g0Ga3iDvAwaVd7a5XwESg127Y6mN38ky/kyMx0yw2AIlMNkX2FxKtGD5 zjeWZIfOCJw5ub+UeoEevKgkzmJMxUKO0NtlAh4QhYg1jtBHl9TOcbyup+d67H9P nEh7C0ZjP5IKGgO2thmYnWrSiX7e+jjcxifrQUQWqcWNXmjGK/tNTGUjjLkQOJ5e 5y9Nvn+rQM82lyOCJmQMSa/AT5lNS8KGS39RXBz3vb1XoV4mXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzCLqF04QTMphQet2KZp3lSv+z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmE0NDhhMzctMGEyMS0z NjNlLWJlZjMtMmY5ZWU3ZGM1NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAredsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGuA49nGwoQwsL7pgnIYPvk27dtyD2vyC5z4uca8wCJ8qztQwIWNb7f ZbbVAnGSLoy4s0EsvvK77pUWAjwXJCxJ5m/uBUZtSuXyhl7qJS/HYZTnwFXDfv+o w2mhINsFlTQUJSmj7bkuzqOx2ACN+1VJ5WVf7++1mF2jifHGMWoOi4Etx7hEfZtO i2BRxYvPEwXiWXcoYMhPKdjEALxmy3964m5KuEAQEwgnryGY7tku54Fd6+m5k/e7 1D5ZPMt/H6PupGABP0kn2y7PlPKjPteF8H3H5UdDQbUX8Knrn4HcgLF8w4SD+WoA 3ZuuLJN8OWXsic8vxtlshsK0ucRJ+hc= -----END CERTIFICATE-----Generated at Thu Sep 24 16:08:59 2026 by rpki-client