$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa File: 4928227b-a919-3b1e-8651-e3b58bf2abca.roa (raw, json) Hash identifier: vlJXuUX6BkzT/0AO5OjHgZM0p1fNqiudFNZmqS4vmDQ= Subject key identifier: 35:24:83:A1:98:29:DC:DD:D6:BC:B9:C0:AD:D3:3D:01:FD:92:25:9C Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Certificate serial: 010D0C9F4328584F4976350CF51A79524A6A8600 Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399899 IP address blocks: 172.98.52.0/23 maxlen: 23 172.98.52.0/24 maxlen: 24 172.98.53.0/24 maxlen: 24 2602:fbb7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:35:0c:f5:1a:79:52:4a:6a:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3caa3095-5d40-403a-8d67-16761d0febf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:e8:98:44:a9:c5:da:5d:36:c2:af:76:b1: d5:4b:8b:83:2b:b7:2a:09:05:83:03:aa:15:77:fd: 5f:d7:18:9f:8b:91:0b:7d:82:c0:dd:2b:d3:fb:bf: 45:11:90:a6:1c:4c:fa:d1:80:f6:4d:d1:13:cb:a1: 32:81:be:b3:ba:0c:16:67:0c:f7:5d:76:66:06:33: 67:42:25:19:1c:8d:a1:0e:7f:19:07:0e:66:62:b5: 4b:ff:53:45:80:96:be:17:c7:65:d2:bf:93:bf:b6: f1:34:b8:8c:3b:b0:7e:05:7c:ea:31:8d:ac:e5:1f: 22:80:87:84:d5:46:6a:98:e3:eb:2e:16:63:7f:12: b9:f5:7c:c1:0b:97:52:a8:a9:fa:7e:38:58:5a:0a: ac:f0:6c:99:58:3c:15:67:e2:91:f5:59:0b:59:56: 90:9e:49:26:1d:48:e6:36:dc:60:04:54:14:c9:c6: aa:c6:9e:32:31:5a:fd:f1:20:0f:da:a4:70:dc:35: 71:88:b7:13:45:60:54:07:91:3a:38:1e:28:4e:80: 8b:d1:6a:57:70:38:9c:68:07:d1:08:15:02:d2:f5: d5:78:16:d0:7a:81:ce:ed:86:69:b7:75:53:96:4c: 4b:10:89:cf:98:30:ce:de:ae:b9:1c:f5:04:ba:c2: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:83:A1:98:29:DC:DD:D6:BC:B9:C0:AD:D3:3D:01:FD:92:25:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl X509v3 Authority Key Identifier: keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer sbgp-ipAddrBlock: critical IPv4: 172.98.52.0/23 IPv6: 2602:fbb7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3c:62:22:4b:fb:0d:76:f3:90:44:40:6e:08:23:4e:41:cd: 2b:06:c2:6b:34:d1:01:c3:37:6b:69:cf:c9:72:d2:9f:f0:cc: 35:02:95:b3:3c:09:b5:c0:fc:19:77:df:50:ef:9d:bd:ce:12: e8:b0:f9:5e:94:ff:28:84:9b:9a:1f:29:4f:00:05:ea:12:8f: b9:b9:db:4c:d4:98:c1:3c:90:35:6c:1b:36:ce:b4:81:ba:d9: b9:e9:0e:c2:96:9e:af:7b:0b:d2:41:2a:6d:83:c6:54:5c:e8: 36:03:72:23:c6:2a:d3:1d:ef:ce:d1:32:ee:da:88:9b:a6:56: 67:5a:5c:c8:bd:e6:62:0e:a5:8a:fd:cd:6d:55:3c:37:53:09: 59:cc:3e:bb:ed:ac:11:43:a7:5e:c5:97:e3:e4:c7:33:05:da: 6a:41:3a:11:e6:59:4b:46:92:80:83:b5:2d:fc:f7:0b:b5:09: c2:72:b5:60:e2:e5:65:d3:e0:46:03:e2:08:5b:45:b8:1b:09: 88:d2:bc:8b:43:25:d6:a1:73:fe:ab:c2:3e:3f:ed:e9:5d:39: 81:65:ee:3a:1a:23:bb:e0:32:9d:54:9a:4f:60:46:5d:5c:6b: 38:d0:ca:af:9d:31:bf:29:1f:f0:69:fe:21:98:35:21:51:6d: 66:ea:bf:d5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdjUM9Rp5UkpqhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM3Yzg1M2QtZjYxNC00MTdhLTg3ZDktZmVkOWNmOWI2 ZTRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NhYTMwOTUtNWQ0MC00MDNhLThkNjctMTY3NjFkMGZlYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshLomESpxdpdNsKvdrHVS4uDK7cqCQWDA6oV d/1f1xifi5ELfYLA3SvT+79FEZCmHEz60YD2TdETy6Eygb6zugwWZwz3XXZmBjNn QiUZHI2hDn8ZBw5mYrVL/1NFgJa+F8dl0r+Tv7bxNLiMO7B+BXzqMY2s5R8igIeE 1UZqmOPrLhZjfxK59XzBC5dSqKn6fjhYWgqs8GyZWDwVZ+KR9VkLWVaQnkkmHUjm NtxgBFQUycaqxp4yMVr98SAP2qRw3DVxiLcTRWBUB5E6OB4oToCL0WpXcDicaAfR CBUC0vXVeBbQeoHO7YZpt3VTlkxLEInPmDDO3q65HPUEusI2rQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDUkg6GYKdzd1ry5wK3TPQH9kiWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdj ODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5YjZlNGEvNDkyODIyN2ItYTkxOS0z YjFlLTg2NTEtZTNiNThiZjJhYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjM3Yzg1M2QtZjYxNC00MTdhLTg3 ZDktZmVkOWNmOWI2ZTRhL2IzN2M4NTNkLWY2MTQtNDE3YS04N2Q5LWZlZDljZjli NmU0YS5jcmwwHwYDVR0jBBgwFoAUPqf5ASNhrB95WSP0kVHBkLMAaaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5 Y2Y5YjZlNGEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBrGI0MA4E AgACMAgDBgQmAvu3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAPGIiS/sNdvOQREBuCCNOQc0rBsJrNNEB wzdrac/JctKf8Mw1ApWzPAm1wPwZd99Q7529zhLosPlelP8ohJuaHylPAAXqEo+5 udtM1JjBPJA1bBs2zrSButm56Q7Clp6vewvSQSptg8ZUXOg2A3IjxirTHe/O0TLu 2oibplZnWlzIveZiDqWK/c1tVTw3UwlZzD677awRQ6dexZfj5MczBdpqQToR5llL RpKAg7Ut/PcLtQnCcrVg4uVl0+BGA+IIW0W4GwmI0ryLQyXWoXP+q8I+P+3pXTmB Ze46GiO74DKdVJpPYEZdXGs40MqvnTG/KR/waf4hmDUhUW1m6r/V -----END CERTIFICATE-----Generated at Wed Sep 30 19:57:10 2026 by rpki-client