$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/435aa637-3792-372b-bd27-9f622ff060f1.roa File: 435aa637-3792-372b-bd27-9f622ff060f1.roa (raw, json) Hash identifier: va+5zTWkDTRl1DrnebPFmU/boglxs/UhQLdoSE7quKE= Subject key identifier: 2A:9F:E7:AF:84:20:99:1C:9A:2B:0F:E6:DF:CF:F4:BC:8C:D7:FC:71 Certificate issuer: /CN=3c015e76-9546-45c1-afd3-4e1f8ef0dd5c Certificate serial: 010D0C9F4328584F1C52C45B2F954102751A8D40 Authority key identifier: 7B:CC:9D:C8:10:64:19:83:D9:C1:4D:6B:A4:7F:90:65:9D:9E:94:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/435aa637-3792-372b-bd27-9f622ff060f1.roa Signing time: Tue 08 Sep 2026 21:04:51 +0000 ROA not before: Tue 08 Sep 2026 21:04:51 +0000 ROA not after: Mon 07 Dec 2026 22:04:51 +0000 asID: 133752 IP address blocks: 172.96.185.0/24 maxlen: 24 198.252.103.0/24 maxlen: 24 198.252.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:52:c4:5b:2f:95:41:02:75:1a:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c015e76-9546-45c1-afd3-4e1f8ef0dd5c Validity Not Before: Sep 8 21:04:51 2026 GMT Not After : Dec 7 22:04:51 2026 GMT Subject: CN=854c9ccb-82df-47c4-883f-67ee5250f377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:00:7e:cd:0a:d8:5c:73:35:9d:64:09:a1: 2e:3a:75:46:5b:96:0e:c3:f9:f2:21:0b:57:b8:ab: e8:7b:e1:63:88:36:4d:d0:bb:78:7f:94:d6:98:dc: 38:ca:87:2c:ce:63:53:f0:ae:e0:5e:71:80:61:a2: d1:af:47:89:b9:f3:86:82:5b:26:18:56:2c:63:07: d8:b1:38:2f:7e:63:44:91:8c:80:64:e7:29:73:a4: 9f:5d:ac:80:2e:2e:59:44:cd:aa:3f:eb:9b:91:95: 24:df:3a:38:68:b0:6e:fa:5b:7e:c1:c5:a9:6e:5d: 5e:c2:f8:a6:0b:2c:81:41:8b:21:df:1f:a2:96:cd: e9:f2:95:41:05:a4:88:0d:e1:65:2f:a1:a7:53:a9: 94:be:c0:c8:9b:6d:c5:be:af:aa:70:80:94:47:6b: 36:e2:3b:84:e7:7f:a7:c6:32:87:f0:b4:65:cb:9b: 4b:a1:a1:05:9c:63:b4:48:f9:1e:f9:c9:91:c1:50: 2f:02:25:6f:18:db:b2:2b:c7:7b:b4:05:ca:fd:e1: 43:7c:0a:4e:87:81:2f:cf:64:87:bd:a3:42:eb:0c: 37:d0:cc:dd:8e:da:e5:d9:dc:9b:a3:1e:b7:b7:ce: 8b:00:d9:19:f9:53:43:64:c6:8c:f3:cb:c6:dd:9b: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9F:E7:AF:84:20:99:1C:9A:2B:0F:E6:DF:CF:F4:BC:8C:D7:FC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/435aa637-3792-372b-bd27-9f622ff060f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.crl X509v3 Authority Key Identifier: keyid:7B:CC:9D:C8:10:64:19:83:D9:C1:4D:6B:A4:7F:90:65:9D:9E:94:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer sbgp-ipAddrBlock: critical IPv4: 172.96.185.0/24 198.252.103.0/24 198.252.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ad:b8:0f:72:f8:8b:c9:97:6c:36:18:28:a9:78:2d:92:37: 1a:37:38:0e:8f:f6:2b:a7:ce:78:ec:26:8a:ef:7f:88:9d:98: e8:42:46:9d:e3:19:e4:e2:7a:0e:b4:77:41:fc:23:76:5b:47: 0d:8f:0b:b8:f4:dc:9d:ac:61:ec:44:40:e6:dd:fd:cd:52:3b: 97:31:f8:7a:02:88:75:5e:3a:a2:7a:a4:0f:c9:a5:34:91:34: e7:eb:95:86:bb:80:20:3d:85:3a:20:68:43:66:77:5c:6d:a5: 18:e1:ce:5f:d1:83:0b:10:0d:6f:08:82:ff:51:e8:21:50:5d: dd:20:19:6a:d1:ed:11:45:28:f6:cd:f9:0d:2d:7d:bc:bb:6a: 44:63:f4:96:0c:1d:6b:40:d1:6c:e9:06:7c:9f:71:1e:2c:89: 20:16:68:eb:a5:45:1c:22:e7:54:4e:b5:3a:a9:12:97:11:f2: 44:60:a0:7c:9a:29:2d:b7:34:5b:8d:d1:b7:4e:97:95:03:de: 95:5c:38:a3:68:ba:a9:d7:35:a0:77:e8:70:8a:0e:52:3d:fb: 98:e0:83:18:f5:b7:f2:73:03:f5:8f:65:13:9d:dd:26:38:f4: 9f:a1:0f:29:cf:78:58:0b:de:e9:85:4c:ff:2a:03:8f:34:bd: 17:88:15:c2 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8cUsRbL5VBAnUajUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MwMTVlNzYtOTU0Ni00NWMxLWFmZDMtNGUxZjhlZjBk ZDVjMB4XDTI2MDkwODIxMDQ1MVoXDTI2MTIwNzIyMDQ1MVowLzEtMCsGA1UEAxMk ODU0YzljY2ItODJkZi00N2M0LTg4M2YtNjdlZTUyNTBmMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz0Afs0K2FxzNZ1kCaEuOnVGW5YOw/nyIQtX uKvoe+FjiDZN0Lt4f5TWmNw4yocszmNT8K7gXnGAYaLRr0eJufOGglsmGFYsYwfY sTgvfmNEkYyAZOcpc6SfXayALi5ZRM2qP+ubkZUk3zo4aLBu+lt+wcWpbl1ewvim CyyBQYsh3x+ils3p8pVBBaSIDeFlL6GnU6mUvsDIm23Fvq+qcICUR2s24juE53+n xjKH8LRly5tLoaEFnGO0SPke+cmRwVAvAiVvGNuyK8d7tAXK/eFDfApOh4Evz2SH vaNC6ww30Mzdjtrl2dybox63t86LANkZ+VNDZMaM88vG3ZtidQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCqf56+EIJkcmisP5t/P9LyM1/xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzAx NWU3Ni05NTQ2LTQ1YzEtYWZkMy00ZTFmOGVmMGRkNWMvNDM1YWE2MzctMzc5Mi0z NzJiLWJkMjctOWY2MjJmZjA2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2MwMTVlNzYtOTU0Ni00NWMxLWFm ZDMtNGUxZjhlZjBkZDVjLzNjMDE1ZTc2LTk1NDYtNDVjMS1hZmQzLTRlMWY4ZWYw ZGQ1Yy5jcmwwHwYDVR0jBBgwFoAUe8ydyBBkGYPZwU1rpH+QZZ2elOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzAxNWU3Ni05NTQ2LTQ1YzEtYWZkMy00ZTFm OGVmMGRkNWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGC5AwQA xvxnAwQAxvxrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHKtuA9y+IvJl2w2GCipeC2SNxo3OA6P9iunznjs Jorvf4idmOhCRp3jGeTieg60d0H8I3ZbRw2PC7j03J2sYexEQObd/c1SO5cx+HoC iHVeOqJ6pA/JpTSRNOfrlYa7gCA9hTogaENmd1xtpRjhzl/RgwsQDW8Igv9R6CFQ Xd0gGWrR7RFFKPbN+Q0tfby7akRj9JYMHWtA0WzpBnyfcR4siSAWaOulRRwi51RO tTqpEpcR8kRgoHyaKS23NFuN0bdOl5UD3pVcOKNouqnXNaB36HCKDlI9+5jggxj1 t/JzA/WPZROd3SY49J+hDynPeFgL3umFTP8qA480vReIFcI= -----END CERTIFICATE-----Generated at Sat Sep 12 08:04:22 2026 by rpki-client