$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8479f66a-0a67-3c74-a7a7-923aafc3418b.roa File: 8479f66a-0a67-3c74-a7a7-923aafc3418b.roa (raw, json) Hash identifier: lthLxjisrFid/R7iOd6OB8t0Jej7UZkKU3gC6ZTMpFA= Subject key identifier: 72:8C:4B:61:20:06:D9:23:D6:CE:47:4E:AC:5A:1C:7F:6D:B2:71:06 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F556BAAFD17677B530CC13780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8479f66a-0a67-3c74-a7a7-923aafc3418b.roa Signing time: Tue 29 Sep 2026 07:56:06 +0000 ROA not before: Tue 29 Sep 2026 07:56:06 +0000 ROA not after: Mon 28 Dec 2026 08:56:06 +0000 asID: 62904 IP address blocks: 173.232.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:6b:aa:fd:17:67:7b:53:0c:c1:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 07:56:06 2026 GMT Not After : Dec 28 08:56:06 2026 GMT Subject: CN=b1b60c22-8d5f-4871-8bb1-745f8996ed49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:7d:11:73:6d:e2:ae:55:16:67:e7:bd:22: 6d:7c:3e:ac:fb:07:19:2c:12:01:a2:ea:a3:7f:f3: 35:c5:a4:28:2e:c9:63:00:4d:13:21:7e:f4:a9:cd: 0b:83:5f:76:25:b9:19:ea:d0:7f:76:cb:85:92:cf: 0f:0b:76:a3:5b:23:2f:2a:83:46:42:a8:8e:4e:e4: 27:99:52:92:18:f7:56:4d:68:67:74:68:46:09:03: b8:c2:e4:5a:20:d2:4b:85:50:68:bd:59:f6:68:e5: 0a:a0:71:4a:2d:96:7f:c0:65:11:e9:2d:ea:b9:65: d2:f5:cc:8f:1d:3e:3c:34:6a:fe:5b:a7:b2:71:02: 5f:40:3b:ef:f6:af:8b:c7:5d:5d:9d:b8:86:dd:d0: 53:2a:b4:ef:7b:a7:89:3c:43:f7:73:15:64:7e:69: 73:41:ba:84:74:f5:74:9a:af:ee:a7:fd:59:06:37: da:d5:dd:20:47:4c:34:e9:49:66:ca:38:3a:bc:6f: c9:b6:71:ac:6c:c6:df:55:53:05:19:09:2c:87:8b: 54:51:5d:e5:9d:3a:4e:32:6e:25:21:e4:87:cc:e6: 95:ff:f5:4e:8c:77:60:56:69:ea:35:c7:6d:b3:6b: 43:09:11:8d:9f:ab:7d:3c:40:cb:d9:76:24:ce:48: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8C:4B:61:20:06:D9:23:D6:CE:47:4E:AC:5A:1C:7F:6D:B2:71:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8479f66a-0a67-3c74-a7a7-923aafc3418b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:89:0a:8e:22:54:bd:ba:b9:db:99:5b:5d:79:33:7d:f8:ed: c1:b0:8d:d2:a2:17:01:c0:c1:22:a2:b3:96:4c:dd:6a:69:89: ee:21:c5:73:72:d1:8d:5c:de:7d:7d:f7:93:72:d4:9f:da:1b: df:ea:28:fb:4d:26:76:78:7a:60:5d:b2:ef:ce:e6:e9:0c:46: 23:9d:fb:3d:f0:0e:ac:0c:93:78:0b:e2:fa:1f:40:93:8e:74: 2c:57:88:0b:38:90:a2:e0:d5:13:e9:7b:c1:d6:70:ac:76:5b: b6:dc:14:10:d9:84:34:70:6e:eb:23:5a:0e:3f:4d:57:23:c5: 11:13:cb:ac:31:51:b4:28:a5:48:93:db:fc:dc:95:69:58:fc: bf:f2:0c:0d:80:a7:8f:bb:70:f4:f2:d0:20:33:a4:b9:34:d6: e8:ba:b6:a5:02:85:5a:d5:e7:49:c5:53:12:58:86:82:c9:90: 71:47:17:71:a7:56:ea:54:d7:06:c9:36:79:b2:c7:05:02:2c: b3:52:19:99:6f:c8:a8:ce:e5:87:42:d1:39:98:f3:10:62:74: da:e6:91:4a:4d:ca:15:b1:6e:81:f3:24:9b:85:f7:7d:9c:b9: 07:c6:b8:a9:42:81:9f:b8:ed:ad:0a:71:89:b7:d9:66:c2:29: 2e:4a:78:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Va6r9F2d7UwzBN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTA3NTYwNloXDTI2MTIyODA4NTYwNlowLzEtMCsGA1UEAxMk YjFiNjBjMjItOGQ1Zi00ODcxLThiYjEtNzQ1Zjg5OTZlZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPx9EXNt4q5VFmfnvSJtfD6s+wcZLBIBouqj f/M1xaQoLsljAE0TIX70qc0Lg192JbkZ6tB/dsuFks8PC3ajWyMvKoNGQqiOTuQn mVKSGPdWTWhndGhGCQO4wuRaINJLhVBovVn2aOUKoHFKLZZ/wGUR6S3quWXS9cyP HT48NGr+W6eycQJfQDvv9q+Lx11dnbiG3dBTKrTve6eJPEP3cxVkfmlzQbqEdPV0 mq/up/1ZBjfa1d0gR0w06Ulmyjg6vG/JtnGsbMbfVVMFGQksh4tUUV3lnTpOMm4l IeSHzOaV//VOjHdgVmnqNcdts2tDCRGNn6t9PEDL2XYkzkj6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKMS2EgBtkj1s5HTqxaHH9tsnEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODQ3OWY2NmEtMGE2Ny0z Yzc0LWE3YTctOTIzYWFmYzM0MThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrehsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqJCo4iVL26uduZW115M3347cGwjdKiFwHAwSKis5ZM3Wppie4hxXNy 0Y1c3n1995Ny1J/aG9/qKPtNJnZ4emBdsu/O5ukMRiOd+z3wDqwMk3gL4vofQJOO dCxXiAs4kKLg1RPpe8HWcKx2W7bcFBDZhDRwbusjWg4/TVcjxRETy6wxUbQopUiT 2/zclWlY/L/yDA2Ap4+7cPTy0CAzpLk01ui6tqUChVrV50nFUxJYhoLJkHFHF3Gn VupU1wbJNnmyxwUCLLNSGZlvyKjO5YdC0TmY8xBidNrmkUpNyhWxboHzJJuF932c uQfGuKlCgZ+47a0KcYm32WbCKS5KeDg= -----END CERTIFICATE-----Generated at Sun Oct 11 09:33:32 2026 by rpki-client