$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3585577d-43b7-3b66-a293-a3c19f963f40.roa File: 3585577d-43b7-3b66-a293-a3c19f963f40.roa (raw, json) Hash identifier: oHYwSdWLwoNSMbQwz5POrNhezhx9gFUpeLYwcsttsKo= Subject key identifier: 87:3A:37:40:0E:1F:22:D4:CD:BE:18:4A:E8:89:FF:A9:76:DD:26:81 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F560F9C6873E302A0125077C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3585577d-43b7-3b66-a293-a3c19f963f40.roa Signing time: Tue 29 Sep 2026 13:26:25 +0000 ROA not before: Tue 29 Sep 2026 13:26:25 +0000 ROA not after: Mon 28 Dec 2026 14:26:25 +0000 asID: 62904 IP address blocks: 173.232.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:0f:9c:68:73:e3:02:a0:12:50:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 13:26:25 2026 GMT Not After : Dec 28 14:26:25 2026 GMT Subject: CN=db070ce5-e39c-442b-a7a3-c26b0b61faa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:e0:45:0f:72:d8:f0:52:bf:e3:1c:e0:64: 7c:8e:dc:99:d8:c4:7c:34:25:3f:48:97:75:88:f1: 15:0a:dd:9f:12:dc:b4:ef:c2:fa:47:81:ae:1b:e7: 64:db:fe:3c:e3:64:ee:b9:e0:c6:66:0d:42:73:d2: 24:a0:c6:c8:f4:43:c1:9d:18:ab:79:bd:38:72:a0: f0:84:3f:cd:71:d8:21:c4:34:c7:50:5b:d1:f9:c3: 40:fc:97:71:9a:39:a4:5c:ed:55:15:66:21:22:9b: 3a:8e:b7:43:4c:e8:41:da:f1:93:d2:5c:2b:96:63: 99:a9:2c:ac:61:aa:8e:9d:24:8a:a1:9d:e5:5b:6b: 04:d5:5e:5a:f9:3e:7d:6f:93:cb:8b:54:55:72:c7: f8:d4:f0:ca:c2:dd:98:5b:4b:cc:f1:92:f0:68:88: 88:48:43:88:c9:88:3e:68:6e:02:fb:2f:53:9a:16: a3:14:94:e1:a6:99:6f:94:a5:91:47:ee:5e:79:e2: 02:01:8a:b3:d8:15:cc:34:bc:d5:3a:a0:c7:2b:0b: 07:c6:a9:6f:a4:b1:66:c8:86:5c:e9:9e:ba:64:8f: 9a:54:08:18:65:fa:97:67:7a:59:86:1a:16:2d:c9: 48:87:91:19:74:ce:4f:aa:bf:3d:11:5e:2c:46:82: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3A:37:40:0E:1F:22:D4:CD:BE:18:4A:E8:89:FF:A9:76:DD:26:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3585577d-43b7-3b66-a293-a3c19f963f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1a:40:ab:00:d5:ae:9d:ec:9c:30:1b:54:3f:b7:0d:7d:11: 2f:a5:fc:5d:dc:0f:62:1b:d3:ab:a0:67:2b:1e:ab:17:77:76: fd:5d:3f:c9:01:70:24:bc:09:ae:ee:c3:e7:42:e4:f6:f6:ab: 98:80:70:03:c9:73:3e:ad:89:06:91:b5:b7:66:69:a4:8d:ec: 6d:b1:d1:a4:be:69:de:b1:4a:02:92:07:dd:c2:51:a2:77:78: d4:26:a6:65:48:d9:02:1b:4b:ba:bf:8a:7f:ec:a2:4a:1d:6b: 67:d1:a7:35:45:ae:52:c1:7b:c0:70:ff:c6:f5:eb:30:b6:ab: 9d:c0:05:b9:f5:f7:80:bc:e6:e1:67:c4:3f:f4:79:f4:92:12: d0:f8:cb:7d:bb:42:6f:a0:bd:5f:7a:55:70:e5:cf:8d:a9:09: 82:4d:fd:f8:62:7c:d4:ac:22:cf:c3:40:19:94:56:41:c4:e3: af:ab:17:04:a9:73:b6:c0:ce:95:08:4a:83:17:2f:0f:4f:05: c5:f9:63:81:48:e6:1f:47:f5:53:6a:d3:6c:92:e2:36:29:94: b9:47:2f:59:c9:31:c2:ff:04:a0:b2:7d:dc:ec:2a:53:33:68: d3:07:69:c2:a5:06:83:cc:49:0a:90:38:39:ca:15:5e:a8:2a: a6:22:d8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WD5xoc+MCoBJQd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTEzMjYyNVoXDTI2MTIyODE0MjYyNVowLzEtMCsGA1UEAxMk ZGIwNzBjZTUtZTM5Yy00NDJiLWE3YTMtYzI2YjBiNjFmYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmrgRQ9y2PBSv+Mc4GR8jtyZ2MR8NCU/SJd1 iPEVCt2fEty078L6R4GuG+dk2/4842TuueDGZg1Cc9IkoMbI9EPBnRireb04cqDw hD/NcdghxDTHUFvR+cNA/JdxmjmkXO1VFWYhIps6jrdDTOhB2vGT0lwrlmOZqSys YaqOnSSKoZ3lW2sE1V5a+T59b5PLi1RVcsf41PDKwt2YW0vM8ZLwaIiISEOIyYg+ aG4C+y9TmhajFJThpplvlKWRR+5eeeICAYqz2BXMNLzVOqDHKwsHxqlvpLFmyIZc 6Z66ZI+aVAgYZfqXZ3pZhhoWLclIh5EZdM5Pqr89EV4sRoKcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc6N0AOHyLUzb4YSuiJ/6l23SaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzU4NTU3N2QtNDNiNy0z YjY2LWEyOTMtYTNjMTlmOTYzZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoaQKsA1a6d7JwwG1Q/tw19ES+l/F3cD2Ib06ugZyseqxd3dv1dP8kB cCS8Ca7uw+dC5Pb2q5iAcAPJcz6tiQaRtbdmaaSN7G2x0aS+ad6xSgKSB93CUaJ3 eNQmpmVI2QIbS7q/in/sokoda2fRpzVFrlLBe8Bw/8b16zC2q53ABbn194C85uFn xD/0efSSEtD4y327Qm+gvV96VXDlz42pCYJN/fhifNSsIs/DQBmUVkHE46+rFwSp c7bAzpUISoMXLw9PBcX5Y4FI5h9H9VNq02yS4jYplLlHL1nJMcL/BKCyfdzsKlMz aNMHacKlBoPMSQqQODnKFV6oKqYi2BU= -----END CERTIFICATE-----Generated at Sat Oct 10 17:43:00 2026 by rpki-client