$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/97c40ed9-4e98-3bb4-a441-3091071ac14e.roa File: 97c40ed9-4e98-3bb4-a441-3091071ac14e.roa (raw, json) Hash identifier: D+9r4jagT7DsoSAkP7v2B+iBm+83ZCjCsshKUHXqS0w= Subject key identifier: 16:05:DF:55:94:19:11:8C:B0:EE:C9:65:50:14:94:7D:0C:07:58:13 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F561914774898837153C8BE20 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/97c40ed9-4e98-3bb4-a441-3091071ac14e.roa Signing time: Tue 29 Sep 2026 13:45:30 +0000 ROA not before: Tue 29 Sep 2026 13:45:30 +0000 ROA not after: Mon 28 Dec 2026 14:45:30 +0000 asID: 62904 IP address blocks: 173.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:19:14:77:48:98:83:71:53:c8:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 13:45:30 2026 GMT Not After : Dec 28 14:45:30 2026 GMT Subject: CN=ac526cce-208e-4026-8b6d-4d498ca940cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:f1:fb:c0:1f:fc:ca:37:10:e3:37:ee:87: 96:1c:a7:7c:70:4b:8b:5a:d4:6d:3c:12:9e:c7:c3: 79:94:f5:36:5e:51:02:b4:02:77:79:46:4c:a7:2d: 51:89:f0:fb:28:db:07:cd:c4:74:ce:b8:6c:53:f1: aa:a3:2a:4b:fd:8f:3b:0e:cb:c8:5c:b7:67:dd:9e: 53:e2:c5:51:b8:18:cf:df:5b:fb:30:8d:11:e4:fa: ba:5d:63:de:dd:f0:61:e8:cb:8e:3a:b6:5b:c0:ae: 25:26:28:e5:a7:d5:38:87:f3:7e:49:02:b0:c3:73: 2a:12:e0:5e:bf:f8:bc:4c:87:73:e8:e9:11:25:88: 8b:a0:1d:4f:b3:e2:44:ef:7b:d5:13:a2:ca:fe:3d: 10:1d:c1:02:e8:0e:1c:4c:36:69:54:f1:c9:19:b1: 37:da:58:6f:0c:e5:89:bd:8a:d3:c1:de:e3:9d:fb: bd:07:2b:da:18:14:79:6d:df:84:9e:83:92:a7:24: 61:15:de:8a:ee:90:16:68:d7:02:de:8e:3c:57:49: 49:ca:f7:7f:d1:bd:69:ea:b6:e6:6a:39:dc:3a:18: 1c:7a:e9:12:96:ea:b4:c1:82:29:f5:b6:c1:39:f1: 8f:06:fc:88:65:cf:1d:d6:50:7a:c7:7d:33:06:b1: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:DF:55:94:19:11:8C:B0:EE:C9:65:50:14:94:7D:0C:07:58:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/97c40ed9-4e98-3bb4-a441-3091071ac14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0e:50:fd:e1:f2:e6:e9:59:24:1e:ca:8a:fa:47:43:87:f8: 92:93:ab:21:e1:0b:09:8c:05:89:68:73:2b:be:14:13:18:f1: 06:a1:3e:52:e8:02:b8:a0:ff:59:12:fd:71:ea:35:d1:06:2c: 09:90:0b:31:f5:54:90:ac:d3:a1:67:fe:75:91:13:eb:b6:12: 4b:26:81:5a:b0:d7:08:50:ed:0d:2d:5e:62:f9:b6:89:96:7c: 9d:3c:2d:12:43:72:fa:f0:6c:ca:72:5c:37:d9:bf:49:f8:bb: 16:ec:de:b9:54:c1:48:bf:15:a5:67:14:28:e4:77:3c:17:94: 37:29:1d:1a:b4:22:c1:19:27:ab:16:d3:80:20:4c:97:04:d8: c9:01:76:01:53:9d:9d:94:a3:f0:cb:e9:1a:7f:b6:04:e1:1a: 87:74:30:30:24:cd:dc:0d:92:37:7e:02:1e:f7:10:38:86:49: 2a:5c:7f:a6:9f:34:87:08:f4:53:72:63:7e:58:f5:8d:9f:40: db:56:3a:f8:1b:a9:64:af:94:03:d4:2b:e0:4e:ec:dc:b5:79: 2c:17:9e:ac:c8:42:99:5b:3c:5b:6e:20:31:16:14:6b:7e:2e: 57:6d:21:e5:26:e2:1b:63:3b:1b:50:ba:a0:51:58:c8:dd:23: 57:dc:12:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WGRR3SJiDcVPIviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTEzNDUzMFoXDTI2MTIyODE0NDUzMFowLzEtMCsGA1UEAxMk YWM1MjZjY2UtMjA4ZS00MDI2LThiNmQtNGQ0OThjYTk0MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz3x+8Af/Mo3EOM37oeWHKd8cEuLWtRtPBKe x8N5lPU2XlECtAJ3eUZMpy1RifD7KNsHzcR0zrhsU/GqoypL/Y87DsvIXLdn3Z5T 4sVRuBjP31v7MI0R5Pq6XWPe3fBh6MuOOrZbwK4lJijlp9U4h/N+SQKww3MqEuBe v/i8TIdz6OkRJYiLoB1Ps+JE73vVE6LK/j0QHcEC6A4cTDZpVPHJGbE32lhvDOWJ vYrTwd7jnfu9ByvaGBR5bd+EnoOSpyRhFd6K7pAWaNcC3o48V0lJyvd/0b1p6rbm ajncOhgceukSluq0wYIp9bbBOfGPBvyIZc8d1lB6x30zBrGirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYF31WUGRGMsO7JZVAUlH0MB1gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTdjNDBlZDktNGU5OC0z YmI0LWE0NDEtMzA5MTA3MWFjMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrej4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMOUP3h8ubpWSQeyor6R0OH+JKTqyHhCwmMBYlocyu+FBMY8QahPlLo Arig/1kS/XHqNdEGLAmQCzH1VJCs06Fn/nWRE+u2EksmgVqw1whQ7Q0tXmL5tomW fJ08LRJDcvrwbMpyXDfZv0n4uxbs3rlUwUi/FaVnFCjkdzwXlDcpHRq0IsEZJ6sW 04AgTJcE2MkBdgFTnZ2Uo/DL6Rp/tgThGod0MDAkzdwNkjd+Ah73EDiGSSpcf6af NIcI9FNyY35Y9Y2fQNtWOvgbqWSvlAPUK+BO7Ny1eSwXnqzIQplbPFtuIDEWFGt+ LldtIeUm4htjOxtQuqBRWMjdI1fcErA= -----END CERTIFICATE-----Generated at Sun Oct 11 06:51:28 2026 by rpki-client