$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa File: b16b5048-e966-3593-be5d-11f20f4bb17a.roa (raw, json) Hash identifier: t+GGbwaTAVFO7DxiK6iok2mKbTqZCcR2KNsql5ckzaI= Subject key identifier: 36:EB:04:5E:25:0D:B1:C2:46:CC:E7:6E:7A:20:5C:2E:01:7C:D0:28 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F7A502BA4F85AA22345F91F80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 174 IP address blocks: 173.232.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:2b:a4:f8:5a:a2:23:45:f9:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d0d0cf7c-928b-44c0-ad0d-142420234b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:fc:54:3d:a4:99:a3:f8:0d:a9:eb:53:8a: 11:4f:20:6b:05:7c:e6:72:6b:cd:2d:26:a5:52:96: 81:8e:9b:49:03:7f:d3:18:d7:ed:f0:cd:60:75:20: 9d:5b:49:d9:e2:1c:a4:3b:8c:51:cb:31:95:25:80: e1:cf:a0:c8:62:a1:53:7d:18:53:ee:f2:a6:8c:de: 42:70:7c:b3:7e:98:97:37:df:94:1e:3e:e0:e8:55: 05:bd:99:89:12:50:ba:95:15:cb:41:58:f2:d0:2b: 2a:2c:67:6a:9c:f9:bf:1c:8e:42:e9:92:99:17:d7: 98:8b:e8:d7:78:7d:b9:92:eb:6e:d5:29:f4:ec:35: 15:4f:ec:23:30:66:1e:58:14:08:dc:3e:ba:16:ca: c2:98:9c:9b:72:65:79:ab:4d:78:85:ae:a1:9a:4e: c8:c4:22:78:58:be:23:e4:33:94:40:0a:96:c0:b1: 35:6c:c5:eb:a9:4e:d3:4a:31:c7:f8:e7:d9:25:dc: f7:f8:09:96:a3:5a:ce:f3:ed:02:19:28:e3:af:c4: b7:05:05:ad:9c:bd:fb:60:9a:1c:7e:92:84:7b:1e: 24:b4:2e:23:3f:b2:82:94:fe:5b:90:5f:25:73:65: 59:04:d6:be:bb:08:89:2c:f7:b2:2f:95:9a:13:42: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EB:04:5E:25:0D:B1:C2:46:CC:E7:6E:7A:20:5C:2E:01:7C:D0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d2:7e:85:32:b9:11:0a:3a:0c:f8:10:4f:a3:b0:b0:41:74: 60:58:6f:b3:b7:8c:31:a7:4c:05:e1:18:87:8f:93:4f:80:03: 84:b4:c1:75:a8:32:e3:ef:c5:80:fe:75:ff:40:c5:ad:28:cd: 51:cf:a4:4e:21:2a:ec:a3:36:c0:c0:e3:cf:b2:aa:c1:0e:ba: 38:32:ba:93:eb:0d:9a:50:0a:2d:5c:c8:97:b1:60:35:29:c5: a2:96:09:0b:40:d5:b3:40:60:76:72:53:b4:9b:95:7d:df:9a: ff:73:13:6c:9b:03:65:b5:25:88:b9:32:e4:76:df:08:c1:74: 82:2d:62:3e:a3:18:b7:fb:51:f2:e0:81:70:33:52:a0:cc:16: 75:db:5c:9c:a4:d6:f5:de:fe:ed:c4:c7:a0:ac:fa:51:8a:c8: 38:9a:52:96:a6:82:e7:31:11:a1:32:ad:10:78:d2:ec:19:bf: 06:1b:82:00:f2:b8:37:81:31:74:eb:ee:99:14:6c:17:f3:af: 9a:b3:12:68:f8:b6:1b:59:e0:d3:8d:c3:5a:8d:41:e5:88:db: f8:52:11:50:b3:53:e8:29:89:59:cc:00:c4:7e:e8:b1:e0:d6: 67:c5:40:e8:50:85:3c:ff:7e:8a:4b:1a:b9:db:19:fb:5c:81: 01:c7:d3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCuk+FqiI0X5H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDBkMGNmN2MtOTI4Yi00NGMwLWFkMGQtMTQyNDIwMjM0YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOT8VD2kmaP4DanrU4oRTyBrBXzmcmvNLSal UpaBjptJA3/TGNft8M1gdSCdW0nZ4hykO4xRyzGVJYDhz6DIYqFTfRhT7vKmjN5C cHyzfpiXN9+UHj7g6FUFvZmJElC6lRXLQVjy0CsqLGdqnPm/HI5C6ZKZF9eYi+jX eH25kutu1Sn07DUVT+wjMGYeWBQI3D66FsrCmJybcmV5q014ha6hmk7IxCJ4WL4j 5DOUQAqWwLE1bMXrqU7TSjHH+OfZJdz3+AmWo1rO8+0CGSjjr8S3BQWtnL37YJoc fpKEex4ktC4jP7KClP5bkF8lc2VZBNa+uwiJLPeyL5WaE0JslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbrBF4lDbHCRsznbnogXC4BfNAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjE2YjUwNDgtZTk2Ni0z NTkzLWJlNWQtMTFmMjBmNGJiMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjSfoUyuREKOgz4EE+jsLBBdGBYb7O3jDGnTAXhGIePk0+AA4S0wXWo MuPvxYD+df9Axa0ozVHPpE4hKuyjNsDA48+yqsEOujgyupPrDZpQCi1cyJexYDUp xaKWCQtA1bNAYHZyU7SblX3fmv9zE2ybA2W1JYi5MuR23wjBdIItYj6jGLf7UfLg gXAzUqDMFnXbXJyk1vXe/u3Ex6Cs+lGKyDiaUpamgucxEaEyrRB40uwZvwYbggDy uDeBMXTr7pkUbBfzr5qzEmj4thtZ4NONw1qNQeWI2/hSEVCzU+gpiVnMAMR+6LHg 1mfFQOhQhTz/fopLGrnbGftcgQHH07w= -----END CERTIFICATE-----Generated at Sat Oct 17 15:03:49 2026 by rpki-client