$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa File: 9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa (raw, json) Hash identifier: /Lxswr6tF3ZPE85Fgzpge88jJkCKBiC4V96npbsqGTk= Subject key identifier: F8:A7:8A:79:7F:56:BF:93:89:91:97:A7:7D:0D:34:6C:84:FA:B3:2B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F549D52EA7E9C9E5258A59280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 173.232.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:52:ea:7e:9c:9e:52:58:a5:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0d79d2f8-6503-4441-98ee-31c138c948da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:c0:72:ec:41:03:28:b8:1b:49:f0:95:5f: 61:af:0a:1f:66:96:c1:32:16:6d:e5:fa:51:e0:70: 8b:1c:82:51:97:57:48:99:c8:45:58:fe:ea:03:c5: 13:90:ac:b8:bb:89:22:98:ee:48:77:9b:49:5a:b5: 75:2e:f5:6f:f4:3e:57:25:cf:b0:6c:88:5b:61:f7: f9:d6:e1:60:0c:d2:46:c2:19:94:2c:60:3b:19:6a: a9:eb:af:78:07:39:36:dc:80:8b:31:b4:e4:26:9e: f7:9c:a8:f9:13:5d:e1:98:2d:61:44:c5:6f:05:82: 98:74:78:8f:32:7e:18:d8:33:e2:58:c2:f4:9e:87: b6:7b:0f:f5:e3:26:2f:7b:e9:c3:95:77:d3:56:c5: a2:62:0b:97:a5:c3:75:d7:48:12:2b:49:f5:02:07: a5:36:e2:18:31:aa:fb:18:d4:60:54:1a:27:3d:d9: f7:b1:bb:f2:79:33:0b:08:e0:04:d8:e9:e4:f5:44: b1:33:ce:c3:33:e6:59:1a:aa:7c:89:50:25:c0:7f: ef:b4:b3:c3:26:a4:c5:ba:ec:f0:93:29:86:c3:65: 74:88:11:ff:d1:19:8b:ff:36:c8:b3:cf:5a:73:3a: 11:22:ab:22:16:40:50:d2:43:70:fe:0f:e0:be:11: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:8A:79:7F:56:BF:93:89:91:97:A7:7D:0D:34:6C:84:FA:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:7e:11:12:7f:10:34:1d:72:af:b7:91:40:85:65:bd:e2: 50:fa:ac:57:c7:29:48:85:4b:69:3d:e6:bc:f7:cf:7c:81:1b: 9a:5b:8b:4e:ca:9d:88:cb:73:cd:bd:c8:93:c0:23:a2:4a:e1: ea:2b:97:f2:10:ba:f9:09:ab:0e:60:7c:0f:0a:c7:16:8c:32: 7f:26:62:07:16:50:08:e9:61:04:fc:3c:54:d8:be:97:5c:3a: 1a:9b:6c:29:03:9a:ce:2b:f1:08:f7:68:c7:ba:4d:0d:4f:bc: 5d:db:0b:76:35:75:e4:74:f5:13:98:33:19:9b:15:60:28:2c: 5f:bf:b7:ea:03:ab:cc:e2:6b:8e:fa:ff:0d:37:12:c8:16:22: fa:25:4b:c2:80:8d:d0:aa:30:68:68:78:54:6d:93:e7:b6:5b: 00:dd:f2:02:4d:41:21:c1:e5:72:31:e6:46:b9:69:0e:38:95: 80:e4:75:9d:d4:f4:9e:56:e3:16:28:5b:54:c4:ae:08:fd:35: a1:3f:cc:12:ba:21:a7:12:80:d7:77:c3:f8:b4:75:42:fa:c6: a6:fe:58:21:e7:44:15:0a:81:c1:27:6a:47:4f:8d:f7:e6:a9: 45:b6:6f:13:a8:64:41:6f:98:61:48:f4:8a:5b:3d:70:f3:4e: 2b:cd:2c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVLqfpyeUlilkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGQ3OWQyZjgtNjUwMy00NDQxLTk4ZWUtMzFjMTM4Yzk0OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GHAcuxBAyi4G0nwlV9hrwofZpbBMhZt5fpR 4HCLHIJRl1dImchFWP7qA8UTkKy4u4kimO5Id5tJWrV1LvVv9D5XJc+wbIhbYff5 1uFgDNJGwhmULGA7GWqp6694Bzk23ICLMbTkJp73nKj5E13hmC1hRMVvBYKYdHiP Mn4Y2DPiWML0noe2ew/14yYve+nDlXfTVsWiYguXpcN110gSK0n1AgelNuIYMar7 GNRgVBonPdn3sbvyeTMLCOAE2Onk9USxM87DM+ZZGqp8iVAlwH/vtLPDJqTFuuzw kymGw2V0iBH/0RmL/zbIs89aczoRIqsiFkBQ0kNw/g/gvhEDeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPininl/Vr+TiZGXp30NNGyE+rMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOWJmZjhlMmEtNGNmMi0z YTNlLWI4MjEtZWIyZDVmMGRhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArei3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq3fhESfxA0HXKvt5FAhWW94lD6rFfHKUiFS2k95rz3z3yBG5pbi07K nYjLc829yJPAI6JK4eorl/IQuvkJqw5gfA8KxxaMMn8mYgcWUAjpYQT8PFTYvpdc OhqbbCkDms4r8Qj3aMe6TQ1PvF3bC3Y1deR09ROYMxmbFWAoLF+/t+oDq8zia476 /w03EsgWIvolS8KAjdCqMGhoeFRtk+e2WwDd8gJNQSHB5XIx5ka5aQ44lYDkdZ3U 9J5W4xYoW1TErgj9NaE/zBK6IacSgNd3w/i0dUL6xqb+WCHnRBUKgcEnakdPjffm qUW2bxOoZEFvmGFI9IpbPXDzTivNLFk= -----END CERTIFICATE-----Generated at Wed Oct 14 15:10:50 2026 by rpki-client