$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa File: 3d98b180-c14e-32ba-a412-5f2a48cff052.roa (raw, json) Hash identifier: rbX3PnwKccyDXxlE0zsMiZcOedTrxQ/GIIcjku/Pkn4= Subject key identifier: B3:5D:25:5E:1A:32:C2:16:01:FB:09:27:09:B5:10:2B:8C:1B:EE:C5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973BE609D79C74761D2BF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15247 IP address blocks: 208.181.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:be:60:9d:79:c7:47:61:d2:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af3f410b-7392-4c5f-93af-11e15c7c04c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:48:90:2c:40:e8:1e:4b:1f:d2:a7:7d:cb: c4:4b:8f:f2:12:6c:c1:71:9d:a4:fa:6e:ec:ce:60: 18:ff:50:8e:c9:1f:93:a2:67:0d:a8:ea:1c:4f:91: 06:bd:21:e0:f4:6c:1a:28:c9:13:41:73:56:7f:79: 01:92:66:6b:fe:91:fc:e9:6f:78:24:e0:e0:01:37: c1:e6:8b:7b:89:2f:3b:24:1a:9c:17:5f:56:f2:3b: e1:08:83:0e:d2:57:8a:f9:a3:84:92:6f:3f:0c:c7: 81:89:a0:c8:a7:c1:1e:31:3c:9d:8a:48:c2:33:a5: 55:2e:69:d7:f5:d9:6f:67:76:94:b4:e7:02:10:43: 34:58:4a:6a:b7:ea:55:b0:95:ad:18:40:d0:1a:9b: c0:d9:78:84:e9:74:ae:a2:a3:66:ec:fa:49:10:4d: e8:6d:fa:22:5c:d1:34:5c:1b:14:5e:f1:5b:fb:fb: d6:39:ed:0a:6d:d4:a7:a8:a3:01:54:8e:3e:5b:23: b7:07:8f:7b:02:b1:ba:eb:e5:8b:63:b3:f6:b9:e0: 88:c5:aa:a6:a5:65:cb:e4:7b:06:fe:bb:0e:82:6b: 73:ef:72:41:f5:9c:6a:26:65:47:b8:9d:ab:0f:b7: bb:f5:bd:ac:79:48:6c:20:ab:f0:45:78:9d:29:0f: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:25:5E:1A:32:C2:16:01:FB:09:27:09:B5:10:2B:8C:1B:EE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3d98b180-c14e-32ba-a412-5f2a48cff052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f6:11:ca:62:ef:6b:db:ac:1a:f3:4c:4b:3d:8a:d2:66:7d: 01:47:3c:02:c3:41:6c:49:15:9a:68:59:50:ca:ec:7f:5b:f9: 15:d9:4a:4a:13:10:bc:30:dc:0b:f1:a2:82:aa:76:19:c4:b3: b9:e4:6e:41:27:1a:77:5a:f7:f7:fb:ff:e3:85:a2:c9:1f:d8: a7:c7:3c:cb:c4:e4:05:ef:4d:33:35:00:2d:a1:33:a2:5a:56: bd:e1:f8:1a:26:8d:49:f8:dc:f5:56:51:55:af:8c:53:c1:7a: 0e:52:29:3a:e1:2a:af:53:b4:16:0e:4e:0a:2a:6c:a2:12:bf: 85:c5:b7:64:8d:b0:7b:93:55:78:78:7a:87:83:0e:d6:e7:86: a4:d2:cf:f6:81:d5:2a:72:50:1c:1e:c6:cd:0c:11:9d:83:76: be:9d:2a:37:cd:85:7b:28:81:58:2c:36:83:1e:00:d8:fb:f5: 18:85:98:88:48:e0:b7:e8:9a:15:ed:6a:0e:e0:7a:27:eb:25: b5:2f:c4:db:a1:37:13:36:2d:11:71:1e:d9:76:f3:cf:92:bb: 5a:13:83:6b:6d:c2:a6:2f:91:2d:03:5f:39:ba:0a:1c:a0:b8: 47:1e:2e:30:70:22:54:c8:28:7f:96:61:64:d1:71:fb:5d:b2: f9:ba:67:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc75gnXnHR2HSvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWYzZjQxMGItNzM5Mi00YzVmLTkzYWYtMTFlMTVjN2MwNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21RIkCxA6B5LH9KnfcvES4/yEmzBcZ2k+m7s zmAY/1COyR+TomcNqOocT5EGvSHg9GwaKMkTQXNWf3kBkmZr/pH86W94JODgATfB 5ot7iS87JBqcF19W8jvhCIMO0leK+aOEkm8/DMeBiaDIp8EeMTydikjCM6VVLmnX 9dlvZ3aUtOcCEEM0WEpqt+pVsJWtGEDQGpvA2XiE6XSuoqNm7PpJEE3obfoiXNE0 XBsUXvFb+/vWOe0KbdSnqKMBVI4+WyO3B497ArG66+WLY7P2ueCIxaqmpWXL5HsG /rsOgmtz73JB9ZxqJmVHuJ2rD7e79b2seUhsIKvwRXidKQ/JdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNdJV4aMsIWAfsJJwm1ECuMG+7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Q5OGIxODAtYzE0ZS0z MmJhLWE0MTItNWYyYTQ4Y2ZmMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL2Ecpi72vbrBrzTEs9itJmfQFHPALDQWxJFZpoWVDK7H9b+RXZSkoT ELww3AvxooKqdhnEs7nkbkEnGnda9/f7/+OFoskf2KfHPMvE5AXvTTM1AC2hM6Ja Vr3h+BomjUn43PVWUVWvjFPBeg5SKTrhKq9TtBYOTgoqbKISv4XFt2SNsHuTVXh4 eoeDDtbnhqTSz/aB1SpyUBwexs0MEZ2Ddr6dKjfNhXsogVgsNoMeANj79RiFmIhI 4LfomhXtag7geifrJbUvxNuhNxM2LRFxHtl288+Su1oTg2ttwqYvkS0DXzm6Chyg uEceLjBwIlTIKH+WYWTRcftdsvm6Z8A= -----END CERTIFICATE-----Generated at Mon Sep 28 10:52:49 2026 by rpki-client