$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa File: 3cd741e0-7b5d-334f-9864-61e95e34603b.roa (raw, json) Hash identifier: 9IynhDZGCHGe9aop9zBUZfekemx7D/66dgBdfADu81E= Subject key identifier: 14:B9:4C:13:9C:29:E5:29:03:C7:01:DF:C6:2D:30:05:DE:D6:06:A1 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F612D6A1545F9A1BB3720E590 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 54252 IP address blocks: 209.178.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:15:45:f9:a1:bb:37:20:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=6ec8f551-1571-45ee-b264-d17f250fd67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:4d:89:05:89:54:7b:a0:12:d9:7b:3a:5a: f4:05:bf:13:28:8b:84:7b:a1:31:b6:26:5c:cf:6e: ad:2b:6c:45:0e:05:b6:03:93:5f:3e:8b:c0:00:36: 07:bd:82:b9:c6:96:29:d8:09:a1:65:a9:cb:a7:c3: 00:de:39:f7:c0:7e:36:12:66:e0:8b:8a:a8:b1:15: 3e:c5:01:1b:3d:1d:d7:14:71:b7:b3:da:3b:62:c0: 74:d4:61:59:8c:42:b0:a3:11:19:ca:be:ba:71:32: 0a:90:bd:f4:e1:f0:64:c1:23:8f:66:81:dc:00:df: 57:bd:84:68:3f:fd:be:07:33:79:fc:ff:b0:b8:9c: 02:cd:c4:6b:cf:f9:90:00:53:8f:e0:93:2c:0b:73: 58:6a:a2:6c:bb:ce:16:38:ca:0b:52:df:99:46:77: d3:e2:94:8f:23:93:1d:0f:3d:0b:92:92:70:95:07: b1:f7:6b:af:ba:bd:d2:4a:a6:28:53:80:a7:ec:cc: 5d:81:ae:d0:75:37:cc:17:67:58:09:6f:93:bb:9d: 1e:11:e6:2f:18:f4:2c:cb:9c:77:2c:62:16:22:60: 69:e0:35:1c:4d:ce:58:eb:91:ac:01:c3:33:d2:b6: e0:e1:75:1b:fc:75:dd:c9:b8:16:17:32:92:46:f3: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:4C:13:9C:29:E5:29:03:C7:01:DF:C6:2D:30:05:DE:D6:06:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5f:f5:c1:99:6c:cd:a6:d3:45:f0:46:d6:b4:b9:fb:c0:c5: 2c:35:7b:bf:85:32:96:92:1a:a2:a3:bc:28:9f:90:18:5f:e1: a3:cf:a2:b3:bc:6b:c9:cb:b5:78:07:b8:8b:71:7a:c3:1a:57: 0b:1b:73:ac:a9:85:05:68:9b:4e:9b:b1:b2:10:7d:5b:99:64: db:8f:00:7c:6e:8d:89:c6:bd:b3:2a:ae:a7:28:0c:5a:61:96: 6e:bb:2d:66:3d:f8:28:f4:af:3f:00:70:2d:06:eb:87:3f:74: 86:8d:87:a0:0f:8f:83:b1:d3:4b:11:83:1c:f3:72:7c:52:aa: 7b:6d:f8:e5:2b:6a:4c:54:03:b8:9b:65:11:45:d1:bf:37:c5: da:eb:6b:08:89:12:7a:c1:57:36:68:e5:02:40:c3:c3:56:8b: 83:fa:6b:41:1d:dd:12:db:fc:54:c7:55:14:2f:bd:f0:59:6a: df:0c:99:b6:d3:b2:62:4a:08:28:c2:01:eb:68:a8:81:4f:7b: 29:74:2e:ee:4b:02:95:b1:03:bd:03:f4:f3:67:fd:11:62:40: d9:45:49:d8:62:7a:de:26:d9:aa:60:1f:d4:cb:1b:b3:8c:be: 6d:93:f3:7b:2d:20:be:d3:b4:69:32:b2:db:bc:9d:91:c1:fe: c7:b7:87:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWoVRfmhuzcg5ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NmVjOGY1NTEtMTU3MS00NWVlLWIyNjQtZDE3ZjI1MGZkNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy65NiQWJVHugEtl7Olr0Bb8TKIuEe6ExtiZc z26tK2xFDgW2A5NfPovAADYHvYK5xpYp2AmhZanLp8MA3jn3wH42Embgi4qosRU+ xQEbPR3XFHG3s9o7YsB01GFZjEKwoxEZyr66cTIKkL304fBkwSOPZoHcAN9XvYRo P/2+BzN5/P+wuJwCzcRrz/mQAFOP4JMsC3NYaqJsu84WOMoLUt+ZRnfT4pSPI5Md Dz0LkpJwlQex92uvur3SSqYoU4Cn7Mxdga7QdTfMF2dYCW+Tu50eEeYvGPQsy5x3 LGIWImBp4DUcTc5Y65GsAcMz0rbg4XUb/HXdybgWFzKSRvOqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS5TBOcKeUpA8cB38YtMAXe1gahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvM2NkNzQxZTAtN2I1ZC0z MzRmLTk4NjQtNjFlOTVlMzQ2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxf9cGZbM2m00XwRta0ufvAxSw1e7+FMpaSGqKjvCifkBhf4aPPorO8 a8nLtXgHuItxesMaVwsbc6yphQVom06bsbIQfVuZZNuPAHxujYnGvbMqrqcoDFph lm67LWY9+Cj0rz8AcC0G64c/dIaNh6APj4Ox00sRgxzzcnxSqntt+OUrakxUA7ib ZRFF0b83xdrrawiJEnrBVzZo5QJAw8NWi4P6a0Ed3RLb/FTHVRQvvfBZat8MmbbT smJKCCjCAetoqIFPeyl0Lu5LApWxA70D9PNn/RFiQNlFSdhiet4m2apgH9TLG7OM vm2T83stIL7TtGkystu8nZHB/se3hxE= -----END CERTIFICATE-----Generated at Mon Oct 12 22:28:52 2026 by rpki-client