$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/af4b41a1-60f2-3dff-bfb1-5c9c82cf6f43.roa File: af4b41a1-60f2-3dff-bfb1-5c9c82cf6f43.roa (raw, json) Hash identifier: I/sHFf83a6iyankevsOiOtvgqJ8wk5A8InlecCbCDfs= Subject key identifier: 2C:FD:18:F4:77:0D:F4:B5:DB:51:64:03:CE:0D:94:C9:F3:62:66:77 Certificate issuer: /CN=9c14587d-8139-4a53-9e7e-47ddcecaaea1 Certificate serial: 010D0C9F4328584F1A7646881422F7E6EF4F9FA0 Authority key identifier: B8:AC:7E:6D:10:12:EA:E6:75:EC:F4:5A:4D:E6:84:4C:E5:C3:D3:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/af4b41a1-60f2-3dff-bfb1-5c9c82cf6f43.roa Signing time: Tue 08 Sep 2026 05:04:47 +0000 ROA not before: Tue 08 Sep 2026 05:04:47 +0000 ROA not after: Mon 07 Dec 2026 06:04:47 +0000 asID: 53292 IP address blocks: 173.225.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/9c14587d-8139-4a53-9e7e-47ddcecaaea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/9c14587d-8139-4a53-9e7e-47ddcecaaea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1a:76:46:88:14:22:f7:e6:ef:4f:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c14587d-8139-4a53-9e7e-47ddcecaaea1 Validity Not Before: Sep 8 05:04:47 2026 GMT Not After : Dec 7 06:04:47 2026 GMT Subject: CN=5b8dc0ab-e155-43ac-b966-46e650db4c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:4d:10:14:cc:b8:32:da:de:ae:23:d2:61: 56:8d:5a:0b:21:b6:c9:43:4c:75:7b:33:ce:cd:27: 5f:03:74:3b:77:d1:0a:ac:c7:e4:41:53:e4:f0:32: aa:d9:e7:e1:0d:36:fc:81:48:50:94:b1:d2:cd:1f: 92:ec:af:12:41:9b:87:f9:d8:b7:80:99:46:d7:a5: c5:82:33:77:70:60:f8:09:e9:ba:5c:9e:a0:ea:8c: 63:4d:67:25:ba:cd:eb:77:3d:dc:d3:b5:fc:5d:67: 89:7d:08:41:49:8a:78:86:8a:65:41:32:35:ab:34: e6:4a:d8:92:c8:d5:72:7e:24:6b:a3:02:c6:85:94: e2:a4:79:91:f2:fb:b0:00:b8:92:07:37:14:02:66: 99:eb:9f:eb:64:dd:8a:91:97:f9:db:20:14:19:36: ab:91:95:d1:a5:5d:b9:3a:cc:26:67:03:31:cf:e2: c7:ad:83:c0:88:8a:a5:84:82:d8:0c:8c:86:c8:23: d7:0d:8c:5d:a2:90:e2:74:0d:d0:81:0f:da:4c:4a: 5e:29:98:71:73:a9:b9:4f:21:61:c0:ea:a2:f7:ea: c4:48:ce:12:38:6c:e3:82:49:52:26:ed:43:f5:8e: b7:eb:7b:33:5a:2e:c0:7f:39:2d:d8:9d:19:cf:37: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FD:18:F4:77:0D:F4:B5:DB:51:64:03:CE:0D:94:C9:F3:62:66:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/af4b41a1-60f2-3dff-bfb1-5c9c82cf6f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1/9c14587d-8139-4a53-9e7e-47ddcecaaea1.crl X509v3 Authority Key Identifier: keyid:B8:AC:7E:6D:10:12:EA:E6:75:EC:F4:5A:4D:E6:84:4C:E5:C3:D3:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c14587d-8139-4a53-9e7e-47ddcecaaea1.cer sbgp-ipAddrBlock: critical IPv4: 173.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fb:59:c0:10:b0:14:89:41:5a:b4:33:f2:12:67:c7:16:49: b3:b6:89:05:c6:20:37:d2:da:3f:bf:50:64:27:13:84:61:78: 9b:66:72:d3:68:2b:e5:ec:d0:4b:f2:86:10:09:7a:cb:c9:69: 74:d3:f8:df:2e:21:93:97:e2:2a:5b:e1:62:dd:5b:e7:e0:d8: f9:63:ca:76:62:c4:e5:65:2b:70:66:87:06:7e:71:4b:21:00: ef:59:d5:dc:cb:87:92:91:dd:ee:0b:46:c5:ae:b9:10:95:3d: e5:e2:72:86:bc:e5:8c:4d:da:a6:b3:d0:ed:00:12:98:4a:e1: 30:28:17:72:c1:8a:27:65:1e:84:ee:a8:f1:47:72:9b:ff:3c: cb:df:fa:9e:c3:c8:4d:b5:61:c3:5f:ca:d4:06:e6:8e:5a:4b: d2:f5:e2:95:9d:d6:8d:ee:0d:70:09:61:cc:77:4b:91:fc:ff: 58:9b:76:8b:3e:67:09:2c:7a:0b:c0:29:27:20:03:56:35:3e: 1f:15:62:2f:ad:e4:9a:22:69:32:9e:1d:03:c4:d8:6d:10:70: d6:f1:71:6d:39:50:70:90:b6:91:2c:14:7c:df:d7:18:e9:fd: 17:3c:69:34:7e:a7:16:b1:28:da:19:cb:07:12:89:9d:fa:0d: 59:07:a1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8adkaIFCL35u9Pn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxNDU4N2QtODEzOS00YTUzLTllN2UtNDdkZGNlY2Fh ZWExMB4XDTI2MDkwODA1MDQ0N1oXDTI2MTIwNzA2MDQ0N1owLzEtMCsGA1UEAxMk NWI4ZGMwYWItZTE1NS00M2FjLWI5NjYtNDZlNjUwZGI0YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8hNEBTMuDLa3q4j0mFWjVoLIbbJQ0x1ezPO zSdfA3Q7d9EKrMfkQVPk8DKq2efhDTb8gUhQlLHSzR+S7K8SQZuH+di3gJlG16XF gjN3cGD4Cem6XJ6g6oxjTWclus3rdz3c07X8XWeJfQhBSYp4hoplQTI1qzTmStiS yNVyfiRrowLGhZTipHmR8vuwALiSBzcUAmaZ65/rZN2KkZf52yAUGTarkZXRpV25 OswmZwMxz+LHrYPAiIqlhILYDIyGyCPXDYxdopDidA3QgQ/aTEpeKZhxc6m5TyFh wOqi9+rESM4SOGzjgklSJu1D9Y6363szWi7Afzkt2J0ZzzcVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz9GPR3DfS121FkA84NlMnzYmZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YzE0 NTg3ZC04MTM5LTRhNTMtOWU3ZS00N2RkY2VjYWFlYTEvYWY0YjQxYTEtNjBmMi0z ZGZmLWJmYjEtNWM5YzgyY2Y2ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWMxNDU4N2QtODEzOS00YTUzLTll N2UtNDdkZGNlY2FhZWExLzljMTQ1ODdkLTgxMzktNGE1My05ZTdlLTQ3ZGRjZWNh YWVhMS5jcmwwHwYDVR0jBBgwFoAUuKx+bRAS6uZ17PRaTeaETOXD0/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YzE0NTg3ZC04MTM5LTRhNTMtOWU3ZS00N2Rk Y2VjYWFlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj7WcAQsBSJQVq0M/ISZ8cWSbO2iQXGIDfS2j+/UGQnE4RheJtmctNo K+Xs0EvyhhAJesvJaXTT+N8uIZOX4ipb4WLdW+fg2PljynZixOVlK3BmhwZ+cUsh AO9Z1dzLh5KR3e4LRsWuuRCVPeXicoa85YxN2qaz0O0AEphK4TAoF3LBiidlHoTu qPFHcpv/PMvf+p7DyE21YcNfytQG5o5aS9L14pWd1o3uDXAJYcx3S5H8/1ibdos+ ZwksegvAKScgA1Y1Ph8VYi+t5JoiaTKeHQPE2G0QcNbxcW05UHCQtpEsFHzf1xjp /Rc8aTR+pxaxKNoZywcSiZ36DVkHoYM= -----END CERTIFICATE-----Generated at Sun Sep 13 10:50:40 2026 by rpki-client