$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa File: b5934f7c-5b65-3efa-991f-cc82903aa949.roa (raw, json) Hash identifier: ZyNkjYmBPlbCY917jyg8GQe7sc1HLrZ+us8pwwkbkp4= Subject key identifier: F6:39:CC:14:83:EB:E6:72:60:D2:92:35:13:2A:7F:5C:03:D8:19:F8 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584F480D4441D847A25442CDE400 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:44:41:d8:47:a2:54:42:cd:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d7e66236-4e2e-4b6a-8596-0426af22787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:40:d2:66:99:da:d3:50:b5:5c:2b:29:b3: ff:ae:ed:30:97:80:d9:38:1c:75:ff:6e:5c:31:3b: 20:41:41:75:f5:c3:f7:c7:0b:09:55:5e:79:80:e0: 82:d8:2e:22:25:ef:e5:99:3e:b7:cf:a0:4a:27:51: 77:63:4a:c2:30:d5:ec:f1:23:a1:6b:cc:40:72:e9: 86:71:27:b0:bf:c3:64:e3:d7:03:47:52:54:c4:18: 1e:8f:df:24:e4:2a:bf:4d:4e:ef:0b:af:b1:0a:e0: 29:e0:05:7a:10:e4:99:b1:18:8e:2c:94:06:90:c6: 2e:70:58:bb:25:f6:ab:7d:75:4e:b8:92:ed:83:be: fd:44:41:c7:59:0b:6f:92:1f:9b:ff:11:47:20:35: f7:70:d3:44:17:b0:99:4b:99:78:70:6f:85:83:9e: 03:41:60:fb:c1:aa:d4:ef:79:1b:dd:4f:14:f3:22: d2:48:f9:c9:81:e5:a1:74:d5:5a:bf:17:5e:53:e2: 68:b1:fa:0f:2d:d1:16:7d:b3:21:b9:2a:2c:7d:2f: 44:58:be:34:77:5d:7e:49:a3:45:81:02:cc:6c:4c: 3e:67:79:51:d7:9a:7c:82:e3:ef:88:5e:10:d1:0d: f1:b0:0c:c0:58:ae:f9:8f:34:bb:5b:34:73:47:46: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:CC:14:83:EB:E6:72:60:D2:92:35:13:2A:7F:5C:03:D8:19:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:30:3c:3a:38:2d:c1:a9:f9:4d:c7:72:a7:6d:46:1a:62:9b: fd:9b:46:07:b9:b2:7e:c2:74:5e:b8:ca:77:a3:1c:45:af:6e: 1c:f7:45:fd:a5:7f:94:20:c0:71:98:2e:1f:18:12:61:98:9a: c0:2a:da:38:f7:fd:ff:b1:74:17:a2:a4:93:98:68:27:e1:83: ff:e3:45:71:55:af:81:4f:79:1e:cd:d0:21:e6:c3:1b:2e:0c: 1a:1f:16:52:18:7b:df:f4:1a:07:27:72:d1:07:67:3c:4c:56: 68:1d:d8:cc:e7:27:a9:28:e4:9d:85:bd:e7:ad:2d:39:0f:59: bf:ba:d2:52:e0:49:64:f3:ae:55:cb:58:13:d5:93:53:51:99: 5f:15:a5:e0:e9:11:06:a5:1f:8d:e3:d3:97:9a:2e:26:49:9e: 58:58:91:76:65:4b:7d:d8:24:37:03:d4:3b:fc:62:3e:46:45: e5:d1:59:c2:47:94:10:9f:0d:be:ec:2a:f1:6c:bd:ed:55:87: 13:88:75:5b:86:c6:8a:90:24:3c:dc:77:23:6e:07:ca:97:99: 74:df:60:87:68:07:69:a4:43:cc:dc:c6:18:39:20:22:2d:01: dd:5e:e6:27:90:78:87:6b:2f:03:17:94:4c:2d:8d:b0:c6:c5: e1:6c:42:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDURB2EeiVELN5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDdlNjYyMzYtNGUyZS00YjZhLTg1OTYtMDQyNmFmMjI3ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxdA0maZ2tNQtVwrKbP/ru0wl4DZOBx1/25c MTsgQUF19cP3xwsJVV55gOCC2C4iJe/lmT63z6BKJ1F3Y0rCMNXs8SOha8xAcumG cSewv8Nk49cDR1JUxBgej98k5Cq/TU7vC6+xCuAp4AV6EOSZsRiOLJQGkMYucFi7 JfarfXVOuJLtg779REHHWQtvkh+b/xFHIDX3cNNEF7CZS5l4cG+Fg54DQWD7warU 73kb3U8U8yLSSPnJgeWhdNVavxdeU+JosfoPLdEWfbMhuSosfS9EWL40d11+SaNF gQLMbEw+Z3lR15p8guPviF4Q0Q3xsAzAWK75jzS7WzRzR0YlvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY5zBSD6+ZyYNKSNRMqf1wD2Bn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvYjU5MzRmN2MtNWI2NS0z ZWZhLTk5MWYtY2M4MjkwM2FhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIowPDo4LcGp+U3HcqdtRhpim/2bRge5sn7CdF64ynejHEWvbhz3Rf2l f5QgwHGYLh8YEmGYmsAq2jj3/f+xdBeipJOYaCfhg//jRXFVr4FPeR7N0CHmwxsu DBofFlIYe9/0GgcnctEHZzxMVmgd2MznJ6ko5J2FveetLTkPWb+60lLgSWTzrlXL WBPVk1NRmV8VpeDpEQalH43j05eaLiZJnlhYkXZlS33YJDcD1Dv8Yj5GReXRWcJH lBCfDb7sKvFsve1VhxOIdVuGxoqQJDzcdyNuB8qXmXTfYIdoB2mkQ8zcxhg5ICIt Ad1e5ieQeIdrLwMXlEwtjbDGxeFsQsU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:01:55 2026 by rpki-client