$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa File: 57fff646-7145-32f1-a13c-3572fed83485.roa (raw, json) Hash identifier: bsszz+VFoCQHhybRsuwXCcgO9OF33Xdibv3zvgKFyQY= Subject key identifier: 3F:4F:55:46:D3:33:C3:56:8F:2E:AF:D1:82:94:C5:42:F8:B9:67:BF Certificate issuer: /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1 Certificate serial: 010D0C9F4328584F4C3D46F7CD7638DA6F6F4780 Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 393397 IP address blocks: 173.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:46:f7:cd:76:38:da:6f:6f:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4c6eac80-bcb4-4a95-a88d-0fb45cc84efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:f4:ec:90:30:36:aa:d3:5f:c4:03:37:a3: d0:7a:88:e2:ba:68:a2:f7:5e:de:fa:b6:b0:d8:5e: b2:76:5d:57:68:eb:48:4f:9b:cb:16:6c:53:41:c1: c9:ae:37:9f:19:c7:95:b6:52:aa:13:e4:c2:34:3e: 1d:cb:b5:86:c9:88:a5:66:0e:4e:20:7e:cf:91:c1: 2f:7b:a4:94:ff:af:49:8b:b9:a0:2d:c7:24:ab:8b: 0c:4f:97:80:f0:bc:fc:73:df:3c:86:00:45:88:b2: eb:57:dd:f4:20:9b:d5:66:13:13:3c:31:08:22:0b: d7:80:9c:5b:58:8d:db:75:a1:3f:68:05:ad:78:47: 0f:d8:2c:4f:66:3a:76:3d:7a:cc:b5:fd:aa:97:b6: 81:35:e5:74:a2:f9:f8:39:ea:d4:c5:7b:58:b0:20: 59:0e:fe:a8:94:b9:d0:62:d8:ea:95:e3:df:50:5d: f6:89:c2:9d:6f:b0:d2:c4:45:30:a9:c7:6d:a4:27: 33:66:84:34:6e:ca:c4:ba:22:43:6b:63:bc:c0:4a: 69:a9:f7:4d:66:dc:33:1b:0b:6b:04:58:34:d7:31: d5:1e:00:39:f6:8c:43:d6:bd:bd:ef:99:1a:40:05: d3:b4:df:d7:e6:18:9c:00:1f:f5:e1:cd:b2:36:b7: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4F:55:46:D3:33:C3:56:8F:2E:AF:D1:82:94:C5:42:F8:B9:67:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl X509v3 Authority Key Identifier: keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer sbgp-ipAddrBlock: critical IPv4: 173.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:80:81:ad:32:d7:bc:e9:b0:bc:8e:a6:ad:d3:e7:10:33:b4: b3:25:fd:b4:76:e4:ce:0c:03:69:c9:50:d8:42:80:a5:9f:2f: 36:58:f9:e6:14:05:d3:fa:31:0c:59:42:57:5e:a1:ea:8c:09: 40:5d:60:ba:fa:0e:42:30:36:ac:32:70:2b:19:25:b7:c1:95: c1:78:d1:6e:da:30:83:32:4b:af:09:a4:d9:a5:33:b8:3e:e2: 2d:bc:3a:83:53:43:05:ba:c6:0e:b3:d2:29:61:e1:ac:a5:77: d4:54:ab:72:a6:5c:c0:81:83:84:65:48:d3:8b:06:15:7f:17: 5a:82:88:56:b7:5e:a7:0f:f9:6c:e7:5a:bc:8d:98:03:14:c7: 79:e2:4e:78:83:f9:ff:94:52:94:ab:d1:58:76:32:03:c6:bc: 2c:c4:c3:a1:53:5f:5d:9c:01:d6:92:72:5d:cd:35:29:72:78: 13:47:a9:b6:1f:86:20:b7:54:a4:3e:18:69:ec:3e:23:c8:88: e6:dd:7b:07:6c:f2:70:98:57:57:bd:ca:d5:c5:fa:6b:cb:d3: a7:7c:ed:b9:39:6d:58:0c:c5:d8:0c:06:fc:31:3e:de:b3:04: 1d:6d:a5:98:f3:37:e4:44:41:df:8b:27:9b:27:a2:f6:05:d7: 34:71:b8:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUb3zXY42m9vR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MWEwMTMtY2RiNy00YzFiLWFjMGEtMDJhY2YxOTIx NWYxMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGM2ZWFjODAtYmNiNC00YTk1LWE4OGQtMGZiNDVjYzg0ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrf07JAwNqrTX8QDN6PQeojiumii917e+raw 2F6ydl1XaOtIT5vLFmxTQcHJrjefGceVtlKqE+TCND4dy7WGyYilZg5OIH7PkcEv e6SU/69Ji7mgLcckq4sMT5eA8Lz8c988hgBFiLLrV930IJvVZhMTPDEIIgvXgJxb WI3bdaE/aAWteEcP2CxPZjp2PXrMtf2ql7aBNeV0ovn4OerUxXtYsCBZDv6olLnQ YtjqlePfUF32icKdb7DSxEUwqcdtpCczZoQ0bsrEuiJDa2O8wEppqfdNZtwzGwtr BFg01zHVHgA59oxD1r2975kaQAXTtN/X5hicAB/14c2yNrd49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9PVUbTM8NWjy6v0YKUxUL4uWe/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMDQx YTAxMy1jZGI3LTRjMWItYWMwYS0wMmFjZjE5MjE1ZjEvNTdmZmY2NDYtNzE0NS0z MmYxLWExM2MtMzU3MmZlZDgzNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDA0MWEwMTMtY2RiNy00YzFiLWFj MGEtMDJhY2YxOTIxNWYxLzAwNDFhMDEzLWNkYjctNGMxYi1hYzBhLTAyYWNmMTky MTVmMS5jcmwwHwYDVR0jBBgwFoAUzBeILAWXiNQp58gV8djO5Qwy+4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMDQxYTAxMy1jZGI3LTRjMWItYWMwYS0wMmFj ZjE5MjE1ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOAga0y17zpsLyOpq3T5xAztLMl/bR25M4MA2nJUNhCgKWfLzZY+eYU BdP6MQxZQldeoeqMCUBdYLr6DkIwNqwycCsZJbfBlcF40W7aMIMyS68JpNmlM7g+ 4i28OoNTQwW6xg6z0ilh4ayld9RUq3KmXMCBg4RlSNOLBhV/F1qCiFa3XqcP+Wzn WryNmAMUx3niTniD+f+UUpSr0Vh2MgPGvCzEw6FTX12cAdaScl3NNSlyeBNHqbYf hiC3VKQ+GGnsPiPIiObdewds8nCYV1e9ytXF+mvL06d87bk5bVgMxdgMBvwxPt6z BB1tpZjzN+REQd+LJ5snovYF1zRxuPs= -----END CERTIFICATE-----Generated at Tue Oct 6 19:48:06 2026 by rpki-client