$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38142337-4242-3bdc-8325-4bd699d2bc90.roa File: 38142337-4242-3bdc-8325-4bd699d2bc90.roa (raw, json) Hash identifier: En1XDwwrVRC8FPBYl7zypRA3YOOGhK/RZZMB9tcMMso= Subject key identifier: BA:04:46:79:B4:EA:A7:0E:8C:7A:E5:E1:2E:4F:C5:6D:D8:08:59:68 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F549D9F329CDDA21A75BA8280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38142337-4242-3bdc-8325-4bd699d2bc90.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 173.213.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9f:32:9c:dd:a2:1a:75:ba:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=df098d19-c94b-44b8-ac4a-11c5c83907f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:5a:cc:40:3b:72:86:52:91:f8:be:93:66: d6:44:8f:41:67:74:f5:91:45:cb:f0:f4:29:e2:f6: 35:32:18:69:db:5f:1b:87:bd:cc:b1:ac:d2:bc:fa: 62:7b:56:ae:83:7f:7b:47:5c:0f:ef:c0:94:3b:49: de:da:71:06:ae:18:0e:eb:d2:ab:7c:84:ed:66:e7: 8b:c2:bd:e5:7a:2f:ce:63:42:e3:f6:3d:eb:35:23: a6:e3:20:b2:14:77:41:75:5e:91:1f:1f:d0:e7:c8: fa:de:3d:59:79:4f:2d:3c:5f:c7:3a:f1:63:12:98: d4:03:72:d9:06:de:71:4d:10:b2:9e:c7:8f:a1:98: f8:1b:68:a4:93:1c:d5:fc:50:7a:1d:5e:97:00:83: 60:66:ab:9f:cf:77:89:37:88:9f:97:5f:03:94:64: 7a:59:7b:b1:f0:f4:21:92:e4:e5:a1:a9:16:ec:ae: e3:f2:83:9f:6e:6f:e2:4b:c3:bc:32:75:44:88:0a: d5:5e:be:62:d2:a5:5b:a3:eb:8d:0f:61:64:7d:b7: d4:44:48:6d:7f:e6:31:91:be:15:18:b7:fb:0e:4d: cf:b3:cf:ae:d7:c9:45:4f:30:24:d9:4b:cc:53:32: ef:71:14:23:41:8e:c0:06:c4:1c:f7:bc:a4:78:df: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:04:46:79:B4:EA:A7:0E:8C:7A:E5:E1:2E:4F:C5:6D:D8:08:59:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/38142337-4242-3bdc-8325-4bd699d2bc90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fc:4f:1e:7f:03:5f:64:28:74:9d:56:db:41:92:4b:3a:c6: 43:de:5d:a3:f5:37:84:8c:02:3d:c8:5e:35:5a:51:21:5a:fe: 0a:96:a1:70:2b:2a:18:a3:28:64:b7:5d:9d:64:96:1d:df:9a: 2b:1f:e1:83:e8:70:54:1e:f3:e4:f2:03:42:91:de:59:8e:38: e5:b2:7a:71:fc:1e:22:31:b8:f4:e2:49:4a:61:f7:81:a8:dc: d6:36:cf:51:1b:e6:c8:42:ef:f6:d1:a4:64:d3:33:de:d5:d7: a7:4b:26:b7:10:70:d2:52:77:b2:0d:0f:ea:7c:e1:71:16:96: d4:2e:c6:1f:26:50:47:b1:be:40:31:eb:36:c5:cf:65:b5:25: 05:98:8c:3b:03:0b:6d:2c:77:fd:7b:22:f4:ba:3c:be:98:43: 0f:8e:7a:1c:b5:52:90:60:11:01:51:af:b3:27:61:1a:c5:5a: 09:2a:80:ee:05:50:ce:ec:74:80:87:57:71:8c:bb:89:27:5b: 39:95:8a:35:e5:34:4c:e3:73:a9:65:72:08:80:8a:f2:62:58: 97:74:c3:c7:fc:9c:8b:fe:15:fe:4a:5e:75:57:31:1b:3e:8f: 01:5f:53:b8:d3:77:7d:4d:91:83:8b:db:b4:2b:d4:f0:ee:d6: 07:12:52:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZ8ynN2iGnW6goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGYwOThkMTktYzk0Yi00NGI4LWFjNGEtMTFjNWM4MzkwN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSVazEA7coZSkfi+k2bWRI9BZ3T1kUXL8PQp 4vY1Mhhp218bh73MsazSvPpie1aug397R1wP78CUO0ne2nEGrhgO69KrfITtZueL wr3lei/OY0Lj9j3rNSOm4yCyFHdBdV6RHx/Q58j63j1ZeU8tPF/HOvFjEpjUA3LZ Bt5xTRCynsePoZj4G2ikkxzV/FB6HV6XAINgZqufz3eJN4ifl18DlGR6WXux8PQh kuTloakW7K7j8oOfbm/iS8O8MnVEiArVXr5i0qVbo+uND2FkfbfUREhtf+Yxkb4V GLf7Dk3Ps8+u18lFTzAk2UvMUzLvcRQjQY7ABsQc97ykeN9x+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoERnm06qcOjHrl4S5PxW3YCFloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzgxNDIzMzctNDI0Mi0z YmRjLTgzMjUtNGJkNjk5ZDJiYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC38Tx5/A19kKHSdVttBkks6xkPeXaP1N4SMAj3IXjVaUSFa/gqWoXAr KhijKGS3XZ1klh3fmisf4YPocFQe8+TyA0KR3lmOOOWyenH8HiIxuPTiSUph94Go 3NY2z1Eb5shC7/bRpGTTM97V16dLJrcQcNJSd7IND+p84XEWltQuxh8mUEexvkAx 6zbFz2W1JQWYjDsDC20sd/17IvS6PL6YQw+Oehy1UpBgEQFRr7MnYRrFWgkqgO4F UM7sdICHV3GMu4knWzmVijXlNEzjc6llcgiAivJiWJd0w8f8nIv+Ff5KXnVXMRs+ jwFfU7jTd31NkYOL27Qr1PDu1gcSUk4= -----END CERTIFICATE-----Generated at Tue Oct 6 23:25:02 2026 by rpki-client