$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0af4c69c-b3d4-30b1-8c2a-ede252fd14a4.roa File: 0af4c69c-b3d4-30b1-8c2a-ede252fd14a4.roa (raw, json) Hash identifier: bmVMWe7j3lDNWJNuPz0AIe7TZwAFcqJHSkmrmg7cRFk= Subject key identifier: 60:D5:FA:D6:3D:3B:2A:18:EC:D3:41:70:64:85:BD:6E:3B:A4:E3:D4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5616091D7FE842749BA4C240 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0af4c69c-b3d4-30b1-8c2a-ede252fd14a4.roa Signing time: Tue 29 Sep 2026 13:39:22 +0000 ROA not before: Tue 29 Sep 2026 13:39:22 +0000 ROA not after: Mon 28 Dec 2026 14:39:22 +0000 asID: 62904 IP address blocks: 173.232.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:16:09:1d:7f:e8:42:74:9b:a4:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 13:39:22 2026 GMT Not After : Dec 28 14:39:22 2026 GMT Subject: CN=d334a2f8-79ec-485f-a057-6b5be3c9a4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2e:16:3c:69:60:33:a1:b8:67:23:1e:99:e1: df:7e:23:de:31:8e:ec:86:d4:7c:fa:3f:26:35:02: fd:cd:ff:79:5d:2c:34:9e:a2:64:55:97:49:28:ee: c2:de:69:a0:dd:62:0b:37:de:de:68:13:c8:7a:3f: e4:4d:da:28:59:cd:27:b1:df:18:43:74:33:ae:19: f8:95:15:0d:25:86:fc:e5:0b:9e:ff:e1:e2:87:00: d7:56:1c:e6:7d:10:01:62:d7:45:46:94:96:b9:4d: 5a:28:78:c8:1b:95:b0:fd:91:c2:83:24:20:be:5f: 4e:b5:98:38:2d:b8:82:3a:b8:18:f2:f6:57:d5:c6: 9b:75:10:d2:7a:d7:28:f9:0b:1b:aa:32:47:85:5e: 97:fd:b5:60:0d:ff:2c:4a:6c:a2:61:9d:eb:31:61: 42:22:c5:49:95:59:a1:45:02:05:96:e7:70:d8:88: b5:1d:15:31:8e:22:e4:79:f5:3d:50:43:b9:c2:cb: 18:91:87:09:a7:c9:23:89:dd:1a:96:6b:89:44:bc: c3:31:2c:fc:5e:86:59:d0:b1:d3:51:4d:fb:57:97: 6a:d2:8c:36:cd:58:99:19:a3:e7:06:a3:11:d9:b3: 04:99:95:d7:ed:eb:21:79:01:5e:10:fb:d1:4e:e5: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:FA:D6:3D:3B:2A:18:EC:D3:41:70:64:85:BD:6E:3B:A4:E3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0af4c69c-b3d4-30b1-8c2a-ede252fd14a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:29:8d:f6:92:2c:0c:d5:26:b1:6a:52:32:14:9a:5c:1f:d7: 9c:c8:9b:e7:bc:fb:93:27:9b:45:e5:7a:4b:15:bd:61:14:eb: 73:27:ad:69:9c:c7:f1:9d:84:54:fe:01:4b:b5:44:cf:2e:c2: ae:dd:77:4c:88:c8:e9:f6:22:8e:80:b2:a4:8b:0e:b5:84:29: 00:51:4e:07:d4:18:2b:14:51:5a:03:1b:77:25:f5:cc:70:29: 11:12:25:fa:d8:71:27:d0:37:47:2b:ff:21:c7:bd:a2:d3:80: 0d:32:8f:43:19:2f:ab:63:92:42:37:8f:d0:e7:b2:8a:17:c4: b2:42:b3:8e:42:f8:18:1e:9e:f7:49:5e:07:f8:f1:f5:8f:20: f2:9f:e8:99:cd:4d:fe:a0:c4:45:00:84:0a:67:02:56:54:75: cf:f2:48:3d:e9:b8:27:a3:1b:78:7a:c9:2f:e2:d8:2b:34:37: ed:be:21:ba:10:3e:a4:67:c8:3f:be:33:b7:cf:ca:6a:b7:75: eb:17:bb:2b:b2:22:cb:0d:a5:34:73:e3:c1:a6:65:71:ea:7e: bc:75:9b:c1:b1:e9:4d:a5:9d:14:f3:f8:54:39:61:87:0b:f6: a5:41:c6:67:55:b6:44:ab:a4:76:70:b5:1c:f1:ac:a6:4e:45: 20:2d:9b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WFgkdf+hCdJukwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTEzMzkyMloXDTI2MTIyODE0MzkyMlowLzEtMCsGA1UEAxMk ZDMzNGEyZjgtNzllYy00ODVmLWEwNTctNmI1YmUzYzlhNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii4WPGlgM6G4ZyMemeHffiPeMY7shtR8+j8m NQL9zf95XSw0nqJkVZdJKO7C3mmg3WILN97eaBPIej/kTdooWc0nsd8YQ3Qzrhn4 lRUNJYb85Que/+HihwDXVhzmfRABYtdFRpSWuU1aKHjIG5Ww/ZHCgyQgvl9OtZg4 LbiCOrgY8vZX1cabdRDSetco+QsbqjJHhV6X/bVgDf8sSmyiYZ3rMWFCIsVJlVmh RQIFludw2Ii1HRUxjiLkefU9UEO5wssYkYcJp8kjid0almuJRLzDMSz8XoZZ0LHT UU37V5dq0ow2zViZGaPnBqMR2bMEmZXX7esheQFeEPvRTuVmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDV+tY9OyoY7NNBcGSFvW47pOPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFmNGM2OWMtYjNkNC0z MGIxLThjMmEtZWRlMjUyZmQxNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrejcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIpjfaSLAzVJrFqUjIUmlwf15zIm+e8+5Mnm0XleksVvWEU63MnrWmc x/GdhFT+AUu1RM8uwq7dd0yIyOn2Io6AsqSLDrWEKQBRTgfUGCsUUVoDG3cl9cxw KRESJfrYcSfQN0cr/yHHvaLTgA0yj0MZL6tjkkI3j9DnsooXxLJCs45C+BgenvdJ Xgf48fWPIPKf6JnNTf6gxEUAhApnAlZUdc/ySD3puCejG3h6yS/i2Cs0N+2+IboQ PqRnyD++M7fPymq3desXuyuyIssNpTRz48GmZXHqfrx1m8Gx6U2lnRTz+FQ5YYcL 9qVBxmdVtkSrpHZwtRzxrKZORSAtm0M= -----END CERTIFICATE-----Generated at Sun Oct 11 03:41:11 2026 by rpki-client