$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa File: 7176dc3e-6c03-3ee7-859f-80de053d65d8.roa (raw, json) Hash identifier: 98GVqP/Ulxz6F9dN0tU++VrpQK2A85SWICh7EV0wRPw= Subject key identifier: 2F:41:D8:FA:CD:BA:D9:05:A0:F3:49:76:BC:28:14:E4:3D:92:7D:BD Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584F4973997EDEF0FED91618DE00 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40244 IP address blocks: 173.198.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:99:7e:de:f0:fe:d9:16:18:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=238c4aac-b50e-40d6-af50-0f71791480bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:a0:91:7e:aa:d0:cd:8b:0b:78:f5:8a:1c: 52:50:63:45:5a:67:d6:5b:06:53:7e:3e:c5:f7:d2: 82:1b:fa:70:0e:85:c0:6c:94:7d:e6:f7:16:56:51: 4c:22:07:23:01:81:87:a6:98:c1:af:1d:c7:1d:af: 37:7d:17:97:79:c6:72:8f:c0:39:7a:46:a9:ff:14: e9:20:76:83:34:dc:df:cc:82:89:cd:41:5d:3c:d0: 70:65:09:8d:d7:8d:15:be:2f:10:59:3a:eb:56:56: 21:dd:8f:df:79:25:05:da:b9:bc:41:7f:ad:e9:b9: ac:24:c8:34:4b:cf:67:59:eb:cf:90:54:a1:6e:a3: 8e:7b:b3:23:de:9f:53:7b:19:29:0b:8f:34:e4:0e: 29:0e:b6:0a:1c:4a:1d:1f:b6:3e:c2:03:06:05:1a: 49:4b:af:61:8a:03:57:9f:ff:4e:9a:c8:a4:a3:a6: 44:a3:5d:f2:34:ea:e1:75:e5:8b:d1:bc:c1:06:52: 95:4a:92:e2:ef:c9:0b:8d:70:ac:8d:55:bb:fa:07: e8:88:4b:b5:30:f7:e2:45:be:2f:90:8b:43:86:f9: 6e:b3:b6:42:26:58:c3:9d:be:85:86:78:ec:4a:63: 10:3d:4b:b1:24:70:a0:47:00:6d:e3:4f:ba:aa:88: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:D8:FA:CD:BA:D9:05:A0:F3:49:76:BC:28:14:E4:3D:92:7D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 173.198.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b8:64:df:91:e0:2c:d1:bb:17:98:63:71:ac:5a:f8:a5:6d: c4:c3:6f:f1:e8:4c:28:49:2a:c3:d7:43:88:1d:61:a4:e3:62: 68:57:36:38:57:ef:10:3d:87:aa:88:e5:af:49:62:5e:be:b1: e3:1d:7b:a2:cd:ac:e0:d8:ab:1f:bd:b1:1a:12:6f:26:98:48: ca:7c:61:c0:a0:5e:a0:33:8c:99:dc:a9:d4:a5:fb:de:e5:ab: ee:a4:a1:df:92:6b:b2:70:c1:c7:a1:e4:02:87:1b:98:4f:45: ea:e8:82:28:02:f2:55:0c:1c:4e:6a:b6:c5:72:21:b9:54:17: ba:ef:34:38:1a:a3:34:1b:18:1a:b1:56:37:7e:f2:9c:56:56: 1e:fa:4b:62:9e:75:f7:b0:96:f5:f6:39:b0:46:b9:59:19:1a: 90:d1:09:f9:ce:b1:dc:44:c5:b9:90:88:5e:29:11:a3:e2:92: d1:98:0b:2e:aa:dd:69:eb:0c:75:2d:9e:ec:2d:19:ac:70:f1: 70:46:50:4c:d6:e7:55:a3:90:d9:43:fa:d2:7e:b7:6b:78:07: 0c:ff:59:e2:00:cc:63:1d:ef:0c:68:0e:33:a8:06:4c:86:02: 4c:c3:1a:61:53:0c:e7:50:47:d0:3e:24:4f:be:29:84:f2:cb: 56:83:8c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5l+3vD+2RYY3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjM4YzRhYWMtYjUwZS00MGQ2LWFmNTAtMGY3MTc5MTQ4MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ygkX6q0M2LC3j1ihxSUGNFWmfWWwZTfj7F 99KCG/pwDoXAbJR95vcWVlFMIgcjAYGHppjBrx3HHa83fReXecZyj8A5ekap/xTp IHaDNNzfzIKJzUFdPNBwZQmN140Vvi8QWTrrVlYh3Y/feSUF2rm8QX+t6bmsJMg0 S89nWevPkFShbqOOe7Mj3p9TexkpC4805A4pDrYKHEodH7Y+wgMGBRpJS69higNX n/9Omsiko6ZEo13yNOrhdeWL0bzBBlKVSpLi78kLjXCsjVW7+gfoiEu1MPfiRb4v kItDhvlus7ZCJljDnb6FhnjsSmMQPUuxJHCgRwBt40+6qojpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9B2PrNutkFoPNJdrwoFOQ9kn29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvNzE3NmRjM2UtNmMwMy0z ZWU3LTg1OWYtODBkZTA1M2Q2NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrcbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG4ZN+R4CzRuxeYY3GsWvilbcTDb/HoTChJKsPXQ4gdYaTjYmhXNjhX 7xA9h6qI5a9JYl6+seMde6LNrODYqx+9sRoSbyaYSMp8YcCgXqAzjJncqdSl+97l q+6kod+Sa7Jwwceh5AKHG5hPRerogigC8lUMHE5qtsVyIblUF7rvNDgaozQbGBqx Vjd+8pxWVh76S2KedfewlvX2ObBGuVkZGpDRCfnOsdxExbmQiF4pEaPiktGYCy6q 3WnrDHUtnuwtGaxw8XBGUEzW51WjkNlD+tJ+t2t4Bwz/WeIAzGMd7wxoDjOoBkyG AkzDGmFTDOdQR9A+JE++KYTyy1aDjHo= -----END CERTIFICATE-----Generated at Fri Sep 25 14:41:46 2026 by rpki-client