$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3c829546-a4b3-3631-aba1-16fb771c7382.roa File: 3c829546-a4b3-3631-aba1-16fb771c7382.roa (raw, json) Hash identifier: D8ePjVrrly7WIIzX51GewYGaJSo6dJ3uSpid5T8NKtU= Subject key identifier: F2:2B:A2:D8:C3:B3:9D:4A:CE:68:F7:C6:EC:1F:72:9D:B8:D5:F1:17 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F38B26F489BB3C926BAE718E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3c829546-a4b3-3631-aba1-16fb771c7382.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 173.232.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:6f:48:9b:b3:c9:26:ba:e7:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=eddff595-cd5d-4fd5-83a8-d33c1654221e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:f7:ee:49:0a:c0:bc:4c:de:1e:94:90:21: 41:32:29:4d:9e:51:09:12:99:75:83:b7:ef:2d:d9: 06:6b:5e:68:a8:e9:85:52:2a:27:5b:6e:64:a8:87: 59:47:93:80:04:25:eb:eb:bc:de:91:67:a1:10:37: d9:30:a3:8b:b0:a6:ff:07:8a:63:68:fd:86:d6:e5: ab:06:d9:92:c5:8f:52:10:5f:f4:9a:fa:7f:35:9a: ae:e7:aa:d8:63:08:32:c4:2e:07:f1:01:2d:63:c2: e1:94:44:7b:b2:53:58:af:66:43:d1:45:e3:92:ad: 69:48:d0:0c:05:2e:be:8d:29:2e:b3:a3:06:44:ba: a6:80:48:ef:32:e3:7d:66:be:99:7c:db:f8:fe:a8: 61:bd:e4:35:8a:50:66:18:0e:ef:7f:6a:94:3b:c1: f0:7e:24:65:07:b8:33:9b:68:67:89:e4:f8:7f:40: a9:76:52:80:e7:4f:b1:85:0f:da:5d:1a:10:d5:77: 60:38:ab:e7:17:70:43:11:a8:90:d8:23:60:af:f6: 9f:20:a7:e8:7c:ec:a7:b1:df:6f:0c:47:11:e7:0f: 88:2f:40:44:d8:1d:17:08:85:79:87:0f:7d:3d:43: 5c:52:02:e2:e3:97:d0:7f:32:a8:fc:9d:64:de:6d: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:A2:D8:C3:B3:9D:4A:CE:68:F7:C6:EC:1F:72:9D:B8:D5:F1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3c829546-a4b3-3631-aba1-16fb771c7382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:dc:2d:7c:5e:81:33:e2:b8:12:dd:ec:96:22:f8:fd:8a:82: 10:86:75:bd:d7:1b:66:eb:89:9b:f5:17:cb:8e:dd:cd:f2:41: 4e:0f:9f:d6:9a:15:ce:74:cb:37:3e:6b:f4:8e:9b:62:b4:0b: a4:23:97:ca:06:ec:10:a3:38:96:8b:71:08:f2:4b:67:e6:56: 33:8d:93:a2:78:8e:40:4d:fa:84:ff:a5:fb:b8:bd:ec:79:0d: 55:c2:b4:46:9a:26:80:cb:40:a6:05:92:c7:06:23:bc:34:90: 05:7d:bb:44:91:22:9d:91:6d:bc:97:5b:cf:7c:f3:0f:b6:9d: 19:dc:50:2e:47:d2:ee:45:df:3f:1f:22:9d:a7:f5:91:0e:77: 2f:8d:fc:06:3e:70:e5:d2:61:17:f2:46:d8:81:00:ec:cb:c2: 6f:0d:13:c8:59:4b:8e:73:11:67:66:ed:6e:28:a1:85:ff:d5: 98:06:c6:e1:be:89:f0:42:e3:5f:45:43:37:cf:c0:58:ba:91: d3:7c:d2:93:93:d0:74:22:15:45:cb:75:59:94:4a:4d:33:31: c2:8a:35:97:4a:93:3e:7a:84:7a:14:3b:93:a3:c3:a4:63:3f: b1:32:e5:4b:f4:36:18:c1:0a:bc:c0:9c:f3:f9:04:c7:51:df: 56:a8:10:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84sm9Im7PJJrrnGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk ZWRkZmY1OTUtY2Q1ZC00ZmQ1LTgzYTgtZDMzYzE2NTQyMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0337kkKwLxM3h6UkCFBMilNnlEJEpl1g7fv LdkGa15oqOmFUionW25kqIdZR5OABCXr67zekWehEDfZMKOLsKb/B4pjaP2G1uWr BtmSxY9SEF/0mvp/NZqu56rYYwgyxC4H8QEtY8LhlER7slNYr2ZD0UXjkq1pSNAM BS6+jSkus6MGRLqmgEjvMuN9Zr6ZfNv4/qhhveQ1ilBmGA7vf2qUO8HwfiRlB7gz m2hnieT4f0CpdlKA50+xhQ/aXRoQ1XdgOKvnF3BDEaiQ2CNgr/afIKfofOynsd9v DEcR5w+IL0BE2B0XCIV5hw99PUNcUgLi45fQfzKo/J1k3m1xDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIrotjDs51Kzmj3xuwfcp241fEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvM2M4Mjk1NDYtYTRiMy0z NjMxLWFiYTEtMTZmYjc3MWM3MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLcLXxegTPiuBLd7JYi+P2KghCGdb3XG2briZv1F8uO3c3yQU4Pn9aa Fc50yzc+a/SOm2K0C6Qjl8oG7BCjOJaLcQjyS2fmVjONk6J4jkBN+oT/pfu4vex5 DVXCtEaaJoDLQKYFkscGI7w0kAV9u0SRIp2RbbyXW8988w+2nRncUC5H0u5F3z8f Ip2n9ZEOdy+N/AY+cOXSYRfyRtiBAOzLwm8NE8hZS45zEWdm7W4ooYX/1ZgGxuG+ ifBC419FQzfPwFi6kdN80pOT0HQiFUXLdVmUSk0zMcKKNZdKkz56hHoUO5Ojw6Rj P7Ey5Uv0NhjBCrzAnPP5BMdR31aoEBI= -----END CERTIFICATE-----Generated at Sun Oct 4 22:06:36 2026 by rpki-client