$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa File: 3f55e722-9371-3246-8ecf-83ad16b69b2e.roa (raw, json) Hash identifier: wFgtsdrgp1n/S4UV55vJu2Za3eP0r5Yt+CRaLLtblN8= Subject key identifier: 41:18:50:2A:77:29:10:87:27:24:A3:D6:16:55:70:63:3D:D8:92:1E Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F63F80FBD10730E7F1208B280 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 33442 IP address blocks: 157.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0f:bd:10:73:0e:7f:12:08:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=c442c22c-de51-401f-8213-14f1174e9ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fc:b3:67:70:4d:a4:4f:59:70:66:cb:33:4a: f5:52:59:1c:27:01:00:6c:02:ce:22:ec:ea:8c:9c: 30:cc:e2:48:cb:ab:79:0d:e3:1a:87:e6:02:07:15: 65:a0:a1:13:1a:74:a0:eb:c0:b0:9a:30:3b:a2:5e: 7c:f9:ef:4d:4c:28:80:c9:46:72:76:89:4a:86:be: 2c:eb:ee:1f:24:62:70:ec:a7:56:be:8f:48:83:1c: f5:b5:3c:b4:5f:74:ff:a9:78:37:b2:3b:0e:66:ff: 94:b1:6b:f1:17:c0:98:07:48:7b:be:ab:55:f9:2d: 81:3b:61:ac:55:e5:5f:fb:de:86:3e:9f:b2:12:e9: 99:5d:99:93:c3:c4:88:00:db:2d:a9:77:34:27:9c: fd:ce:7d:e1:b4:74:9e:a7:b3:ca:be:b4:11:d9:a8: f1:85:cd:69:28:37:bf:83:12:6e:ff:2b:fd:86:18: 7e:7a:ba:11:72:24:5b:a6:c6:ee:61:57:ee:08:ea: bc:66:62:45:8a:40:c1:ad:36:eb:cd:e4:f2:77:41: b6:3b:6f:43:82:c3:02:c7:6d:ee:62:4d:a6:5b:0a: 66:0c:14:59:9f:97:41:8a:10:fe:54:0e:7e:07:b2: 19:3b:07:ac:15:aa:93:71:d7:50:49:df:2e:61:47: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:18:50:2A:77:29:10:87:27:24:A3:D6:16:55:70:63:3D:D8:92:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:76:92:8b:4e:47:3a:a0:65:98:02:16:8b:d3:50:fd:37:11: 3a:0e:22:53:17:a8:84:f2:a8:f4:0a:3a:d7:89:13:fe:a5:01: 15:d5:5f:ad:5c:4e:03:80:ef:67:81:11:2a:7e:53:5e:c1:2b: b0:5f:73:ca:30:1e:ca:e6:99:c4:f3:4f:a7:2a:67:9a:e6:25: d4:3b:f9:50:90:fb:ad:79:4f:16:58:2b:7a:84:76:d6:0a:d4: ee:0f:5f:1f:2b:d3:82:8f:fc:1e:11:e4:ea:cb:6a:dc:74:00: 9b:7d:34:03:13:d3:d5:55:1e:b7:ee:4f:46:1f:d2:f5:e7:95: 26:46:42:bb:d1:60:fa:4f:d8:5b:6f:a2:fc:ef:8b:b7:9f:99: 2a:c6:a8:9c:b4:0c:13:4d:37:60:e7:f6:9d:19:7d:ae:a1:4d: 83:4d:12:8d:83:48:6f:e8:8e:fe:28:a7:9e:f9:b9:c2:c4:ed: 1a:27:7d:04:15:bc:32:d0:52:f6:e0:16:00:ac:6b:03:29:76: 60:69:73:7a:06:9b:97:53:3b:4b:fe:82:ab:54:1b:3e:00:30: 72:03:be:0d:16:02:e0:73:db:b5:33:14:6f:f7:a2:65:0e:25: 9d:54:ba:42:a1:1f:a8:c2:54:df:72:8a:43:38:22:8c:d7:20: 1a:c3:b6:0c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9j+A+9EHMOfxIIsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YzQ0MmMyMmMtZGU1MS00MDFmLTgyMTMtMTRmMTE3NGU5ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vyzZ3BNpE9ZcGbLM0r1UlkcJwEAbALOIuzq jJwwzOJIy6t5DeMah+YCBxVloKETGnSg68CwmjA7ol58+e9NTCiAyUZydolKhr4s 6+4fJGJw7KdWvo9Igxz1tTy0X3T/qXg3sjsOZv+UsWvxF8CYB0h7vqtV+S2BO2Gs VeVf+96GPp+yEumZXZmTw8SIANstqXc0J5z9zn3htHSep7PKvrQR2ajxhc1pKDe/ gxJu/yv9hhh+eroRciRbpsbuYVfuCOq8ZmJFikDBrTbrzeTyd0G2O29DgsMCx23u Yk2mWwpmDBRZn5dBihD+VA5+B7IZOwesFaqTcddQSd8uYUdGKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEEYUCp3KRCHJySj1hZVcGM92JIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2Y1NWU3MjItOTM3MS0z MjQ2LThlY2YtODNhZDE2YjY5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAinaSi05HOqBlmAIWi9NQ/TcROg4iUxeohPKo9Ao614kT/qUBFdVfrVxO A4DvZ4ERKn5TXsErsF9zyjAeyuaZxPNPpypnmuYl1Dv5UJD7rXlPFlgreoR21grU 7g9fHyvTgo/8HhHk6stq3HQAm300AxPT1VUet+5PRh/S9eeVJkZCu9Fg+k/YW2+i /O+Lt5+ZKsaonLQME003YOf2nRl9rqFNg00SjYNIb+iO/iinnvm5wsTtGid9BBW8 MtBS9uAWAKxrAyl2YGlzegabl1M7S/6Cq1QbPgAwcgO+DRYC4HPbtTMUb/eiZQ4l nVS6QqEfqMJU33KKQzgijNcgGsO2DA== -----END CERTIFICATE-----Generated at Sun Oct 4 23:21:06 2026 by rpki-client