$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c3b4f344-4631-3d8f-86ab-bb9ab04ec64a.roa File: c3b4f344-4631-3d8f-86ab-bb9ab04ec64a.roa (raw, json) Hash identifier: DIlRCxCE6WTIxJGjNHmMrgzqZyV/VRGSRtjf8nRo7ww= Subject key identifier: 58:09:2A:93:53:28:51:83:8F:47:73:B3:C9:A1:D5:53:7A:7E:31:C6 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584F2957C01933E8661F6EBB8C40 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c3b4f344-4631-3d8f-86ab-bb9ab04ec64a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 4922 IP address blocks: 184.170.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c0:19:33:e8:66:1f:6e:bb:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e3016012-88b1-4b66-8b80-72afadd6b9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:bd:45:87:52:1f:2c:e5:31:c3:b8:a5:e6: 40:04:a9:7d:79:45:8c:c0:1e:bb:03:d5:a6:f4:95: 99:94:18:b5:0e:89:7b:56:34:35:92:87:d5:17:5b: a0:6e:c7:1d:d6:b9:5e:22:a2:5b:10:ef:90:40:13: 03:fa:81:46:52:61:4c:f2:00:fd:f7:7d:f2:33:25: 7c:6a:85:5b:fe:5d:24:71:91:e6:6d:fb:d8:ab:3b: c4:c1:7f:b2:ed:3b:d9:bf:09:d1:69:d4:84:04:68: 8b:1d:15:fb:d7:05:83:78:ed:9f:8e:7d:b6:46:86: 61:61:ca:5a:a2:83:20:b5:0f:c3:9f:06:37:a5:b5: ec:11:28:fd:f1:3c:c9:22:eb:08:93:e0:ee:36:1b: a8:3a:7a:aa:b7:ab:2e:53:31:83:5d:26:3d:5f:d1: fa:d1:b7:c8:5c:bd:98:65:0d:eb:45:19:8b:8f:9b: f0:53:ab:9b:d9:35:60:20:39:f1:56:52:1c:ad:89: ca:c4:b0:d3:a9:95:2a:4c:43:fb:b1:14:25:8b:9f: 29:01:6c:30:10:d8:c5:27:4b:5a:76:35:84:80:10: d8:01:b7:7d:cb:69:2a:37:29:74:ab:43:78:a0:c4: ed:28:1c:a9:10:6b:33:f4:15:97:3e:ee:1f:16:8c: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:09:2A:93:53:28:51:83:8F:47:73:B3:C9:A1:D5:53:7A:7E:31:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c3b4f344-4631-3d8f-86ab-bb9ab04ec64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 184.170.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4d:89:62:0b:2c:6b:88:71:15:ea:88:86:3a:16:02:e6:5c: 95:98:0e:64:e0:20:91:b0:59:a8:8d:82:c3:9b:02:3c:d8:2c: 95:1d:0a:d1:97:31:02:d5:d9:b1:34:3d:0c:fa:e4:4d:61:38: 68:41:ae:7e:55:83:54:a4:54:ab:d7:b8:b1:db:5b:0f:03:ea: e3:a4:15:6a:14:a0:7b:9e:69:34:27:83:e4:95:c5:61:b5:c4: 38:16:cd:43:43:98:8e:32:c8:8d:71:38:55:85:3f:d2:d1:62: f3:7b:fe:d2:14:95:fb:f5:a3:87:53:eb:ea:ab:c3:d6:22:e9: 54:d5:5a:86:00:c7:c5:81:da:dc:81:b0:26:93:50:ad:69:ef: 2f:30:1d:70:a5:80:6b:ab:9f:da:39:a5:da:c6:b1:21:69:17: 87:da:72:9f:61:8d:7c:88:6d:14:0b:64:83:9a:39:c8:8c:11: 8b:9c:e2:97:6b:a1:c2:59:4c:13:33:8e:d5:1c:4b:b6:0b:c0: 33:cb:05:e9:44:23:5a:87:de:cf:91:13:9c:3d:fb:ab:c2:59: b6:c2:3d:1e:35:e7:08:19:a3:1f:4b:da:18:0a:cd:c7:91:71: b3:62:75:f4:22:2f:17:1d:77:4c:7f:4f:5f:fe:fc:3c:82:74: a3:78:f2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8AZM+hmH267jEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTMwMTYwMTItODhiMS00YjY2LThiODAtNzJhZmFkZDZiOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+u9RYdSHyzlMcO4peZABKl9eUWMwB67A9Wm 9JWZlBi1Dol7VjQ1kofVF1ugbscd1rleIqJbEO+QQBMD+oFGUmFM8gD9933yMyV8 aoVb/l0kcZHmbfvYqzvEwX+y7TvZvwnRadSEBGiLHRX71wWDeO2fjn22RoZhYcpa ooMgtQ/DnwY3pbXsESj98TzJIusIk+DuNhuoOnqqt6suUzGDXSY9X9H60bfIXL2Y ZQ3rRRmLj5vwU6ub2TVgIDnxVlIcrYnKxLDTqZUqTEP7sRQli58pAWwwENjFJ0ta djWEgBDYAbd9y2kqNyl0q0N4oMTtKBypEGsz9BWXPu4fFoyipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgJKpNTKFGDj0dzs8mh1VN6fjHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYzNiNGYzNDQtNDYzMS0z ZDhmLTg2YWItYmI5YWIwNGVjNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuKpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhNiWILLGuIcRXqiIY6FgLmXJWYDmTgIJGwWaiNgsObAjzYLJUdCtGX MQLV2bE0PQz65E1hOGhBrn5Vg1SkVKvXuLHbWw8D6uOkFWoUoHueaTQng+SVxWG1 xDgWzUNDmI4yyI1xOFWFP9LRYvN7/tIUlfv1o4dT6+qrw9Yi6VTVWoYAx8WB2tyB sCaTUK1p7y8wHXClgGurn9o5pdrGsSFpF4facp9hjXyIbRQLZIOaOciMEYuc4pdr ocJZTBMzjtUcS7YLwDPLBelEI1qH3s+RE5w9+6vCWbbCPR415wgZox9L2hgKzceR cbNidfQiLxcdd0x/T1/+/DyCdKN48lk= -----END CERTIFICATE-----Generated at Thu Sep 24 13:44:48 2026 by rpki-client