$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa File: 3847a004-c843-39d8-a702-59aa874db591.roa (raw, json) Hash identifier: Xz6iLcpQSZcL5LKtN5qRIQ74yVPchm186kGcvZEqDfI= Subject key identifier: 6E:5C:27:DB:DE:FC:78:90:62:35:5A:B7:1E:4F:7F:22:5B:81:B7:E7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F1CC7AFF36E43D2F3B34553A4 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 5650 IP address blocks: 168.93.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:af:f3:6e:43:d2:f3:b3:45:53:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=258f824b-1c98-4685-b7f9-be8025e096d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:b4:d1:e2:01:51:60:5c:0e:8c:4d:68:22: 49:06:ac:9b:c4:da:a7:a9:cb:f9:36:f9:12:15:2b: ac:e8:b8:f3:ec:45:1c:0b:ba:f0:2f:bc:69:fc:1c: 5e:56:ab:bd:bd:6b:ad:4b:1e:04:88:c3:c8:8f:e3: 48:2f:72:1b:b1:64:44:82:4a:5d:2e:af:86:73:1f: 6d:af:4c:d7:60:1a:67:cf:af:57:98:a8:22:0d:17: 44:ff:92:ca:a5:ee:03:2b:f6:83:17:10:e0:e1:02: 15:a2:aa:58:72:35:f2:f1:db:d0:d4:b0:f0:35:b9: bc:1c:01:0c:38:bc:25:44:5b:5e:7b:6f:9b:c8:f8: d2:f1:56:4b:07:90:9d:6f:b7:d8:61:fa:8f:1c:22: 16:fa:66:63:1c:16:15:7a:8f:43:52:93:75:45:93: 48:7e:f4:7e:4a:cd:d5:f1:2a:e3:b1:a3:73:74:74: b9:d0:a1:ac:f2:98:35:b1:76:40:66:a1:ca:f4:92: 6d:d8:e6:ae:bc:a0:03:34:62:72:b0:04:d8:3e:0a: 87:7b:9e:00:34:19:67:d5:ce:f7:ca:1e:03:0e:ea: 9c:2f:32:41:15:c4:86:16:71:6a:bf:e7:04:f1:d9: cf:84:fe:71:9e:43:55:a3:cd:c5:26:12:37:7e:44: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5C:27:DB:DE:FC:78:90:62:35:5A:B7:1E:4F:7F:22:5B:81:B7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:08:ac:d4:ca:25:a6:b2:70:6b:b7:a5:af:24:bc:99:81:a8: 16:07:74:c4:f1:1e:75:06:12:2c:9a:4a:01:73:67:6d:af:31: 71:35:8f:af:2d:3f:2b:ca:69:95:57:b7:02:29:68:7a:f8:ca: 4b:6b:16:cc:d0:fe:37:0c:95:06:ca:0d:1a:29:ed:7a:8a:ae: cc:51:3c:52:a1:c0:93:7a:51:a0:81:8c:b4:63:f0:bc:ab:84: e8:fb:2a:61:2c:5f:de:eb:a9:bd:c7:8b:4e:97:0c:b7:a1:84: 8d:f9:dd:e5:4d:ec:62:ba:45:65:7e:af:ab:90:c9:25:0d:64: 51:b4:80:ad:a3:c2:13:6c:6c:e6:31:ea:b9:aa:2e:eb:82:37: 74:59:f0:0d:e1:8a:a8:d2:69:2a:70:e0:ed:fc:be:da:fc:8e: 52:d7:c0:c3:30:f5:ba:95:8c:f8:d3:c6:f4:d6:70:45:fb:6e: d3:23:19:86:39:44:68:18:b9:99:d8:c7:24:ee:fc:d5:9a:f3: 4c:d1:06:af:20:e4:de:46:33:80:2f:24:f7:bc:72:05:fa:43: ee:be:df:94:60:7f:14:4d:c7:39:3b:59:da:ac:ed:9f:01:a0: 23:08:b3:f6:fc:a2:07:36:eb:77:2a:91:67:22:3a:5e:8e:81: 2c:2c:62:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6/zbkPS87NFU6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MjU4ZjgyNGItMWM5OC00Njg1LWI3ZjktYmU4MDI1ZTA5NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxC00eIBUWBcDoxNaCJJBqybxNqnqcv5NvkS FSus6Ljz7EUcC7rwL7xp/BxeVqu9vWutSx4EiMPIj+NIL3IbsWREgkpdLq+Gcx9t r0zXYBpnz69XmKgiDRdE/5LKpe4DK/aDFxDg4QIVoqpYcjXy8dvQ1LDwNbm8HAEM OLwlRFtee2+byPjS8VZLB5Cdb7fYYfqPHCIW+mZjHBYVeo9DUpN1RZNIfvR+Ss3V 8SrjsaNzdHS50KGs8pg1sXZAZqHK9JJt2OauvKADNGJysATYPgqHe54ANBln1c73 yh4DDuqcLzJBFcSGFnFqv+cE8dnPhP5xnkNVo83FJhI3fkRBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5cJ9ve/HiQYjVatx5PfyJbgbfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzg0N2EwMDQtYzg0My0z OWQ4LWE3MDItNTlhYTg3NGRiNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcIrNTKJaaycGu3pa8kvJmBqBYHdMTxHnUGEiyaSgFzZ22vMXE1j68t PyvKaZVXtwIpaHr4yktrFszQ/jcMlQbKDRop7XqKrsxRPFKhwJN6UaCBjLRj8Lyr hOj7KmEsX97rqb3Hi06XDLehhI353eVN7GK6RWV+r6uQySUNZFG0gK2jwhNsbOYx 6rmqLuuCN3RZ8A3hiqjSaSpw4O38vtr8jlLXwMMw9bqVjPjTxvTWcEX7btMjGYY5 RGgYuZnYxyTu/NWa80zRBq8g5N5GM4AvJPe8cgX6Q+6+35RgfxRNxzk7Wdqs7Z8B oCMIs/b8ogc263cqkWciOl6OgSwsYuY= -----END CERTIFICATE-----Generated at Thu Sep 24 13:51:46 2026 by rpki-client