$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa File: a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa (raw, json) Hash identifier: 34LqR3v0jAROO3d3fDY21bmrj3NqNNb1Trema0VTSoc= Subject key identifier: 8D:9F:C4:C6:D6:F7:82:31:EF:49:7D:45:A5:24:7F:2B:7C:AD:25:1D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F497458395576F31981C83920 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32043 IP address blocks: 173.232.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:58:39:55:76:f3:19:81:c8:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d90cd58b-6b7e-4fca-a938-4064daf85496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:6d:b3:d8:60:ad:a3:d7:be:cb:ce:da:7a: 42:48:fb:a2:1f:5d:d6:a6:86:24:e8:5b:b2:16:7c: 53:5f:d4:f6:91:c5:b1:ec:ad:5c:3d:4b:55:c5:95: 1a:91:b6:15:bb:c4:68:ca:d1:db:76:2c:51:34:5a: a2:d4:57:3b:f2:f6:78:10:6a:b1:a8:2b:25:7d:ce: 20:c1:96:bf:0e:15:22:09:79:fa:9c:57:09:b1:44: 7c:54:3e:53:68:f5:03:08:9f:67:12:47:b4:88:08: 93:72:cc:5d:3f:d0:7e:73:e7:eb:72:e5:86:89:39: 3b:65:ec:2d:f3:8d:99:35:60:ca:38:cb:ca:21:1f: 89:05:29:38:c5:51:8c:6f:55:d7:f4:99:13:51:d7: 44:a1:a1:cb:71:d3:ee:bb:f5:2a:cd:ff:8b:13:94: 14:f5:c8:2c:42:3d:2e:cc:d8:4a:79:f1:b5:af:6b: 0b:53:b0:e9:43:d0:43:da:f4:cd:4d:af:f2:c1:8f: a5:a4:12:a5:38:15:3d:65:1d:e5:f9:03:20:80:6b: fc:6f:2c:c9:8f:86:b3:ee:4d:49:ca:09:73:b0:e9: 2c:4e:d0:24:79:0d:d5:b0:e7:58:15:88:d0:e5:eb: ae:45:33:53:a5:55:8d:1a:59:02:53:31:5e:b5:f6: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:C4:C6:D6:F7:82:31:EF:49:7D:45:A5:24:7F:2B:7C:AD:25:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:89:7d:15:f1:c5:f3:94:b0:ca:ae:70:6f:65:66:c2:54:ac: a3:5a:37:e0:ed:4e:07:7e:7d:5a:ff:0a:1d:49:87:54:e8:1f: ae:c0:e1:11:46:28:5a:40:4e:38:09:1f:89:88:35:c9:9e:85: 77:54:2d:e0:bf:44:20:2f:62:c1:2e:e5:bf:9a:4e:31:55:7e: 33:0b:53:b0:c8:7e:b6:ec:92:43:3c:60:1d:d9:74:e3:28:3e: a9:47:71:ae:de:71:3d:d4:da:f4:1a:47:79:2c:9a:65:d4:0a: 55:b9:b2:66:10:c5:ed:66:9b:31:86:a8:d8:60:5a:22:36:e1: 01:f5:13:58:8a:0f:12:2d:da:68:f4:d3:df:3e:61:c5:c1:e4: cd:c2:c9:df:4b:99:73:8e:9e:eb:52:94:b5:9e:72:e3:16:e9: 24:41:06:c3:01:75:ed:3d:f4:f3:18:da:0c:f3:c0:ae:62:a5: 67:6f:3c:15:1a:5e:73:0f:4a:02:45:cb:35:79:da:3b:ff:35: 9b:9a:80:e9:97:70:06:2d:f7:15:13:a8:f7:f8:69:32:e1:0c: 11:fc:13:df:17:4d:9e:88:32:ac:cf:62:b1:89:b2:87:26:20: 4f:df:4f:b3:03:5c:35:52:a2:d9:d4:5b:9e:18:ee:03:8b:bf: b4:15:bd:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFg5VXbzGYHIOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkwY2Q1OGItNmI3ZS00ZmNhLWE5MzgtNDA2NGRhZjg1NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdts9hgraPXvsvO2npCSPuiH13WpoYk6Fuy FnxTX9T2kcWx7K1cPUtVxZUakbYVu8RoytHbdixRNFqi1Fc78vZ4EGqxqCslfc4g wZa/DhUiCXn6nFcJsUR8VD5TaPUDCJ9nEke0iAiTcsxdP9B+c+frcuWGiTk7Zewt 842ZNWDKOMvKIR+JBSk4xVGMb1XX9JkTUddEoaHLcdPuu/Uqzf+LE5QU9cgsQj0u zNhKefG1r2sLU7DpQ9BD2vTNTa/ywY+lpBKlOBU9ZR3l+QMggGv8byzJj4az7k1J yglzsOksTtAkeQ3VsOdYFYjQ5euuRTNTpVWNGlkCUzFetfYT4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2fxMbW94Ix70l9RaUkfyt8rSUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTBkYThiYTEtY2M4Yi0z MmVmLTgzZmItMjZhMzhiMTk2MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSJfRXxxfOUsMqucG9lZsJUrKNaN+DtTgd+fVr/Ch1Jh1ToH67A4RFG KFpATjgJH4mINcmehXdULeC/RCAvYsEu5b+aTjFVfjMLU7DIfrbskkM8YB3ZdOMo PqlHca7ecT3U2vQaR3ksmmXUClW5smYQxe1mmzGGqNhgWiI24QH1E1iKDxIt2mj0 098+YcXB5M3Cyd9LmXOOnutSlLWecuMW6SRBBsMBde099PMY2gzzwK5ipWdvPBUa XnMPSgJFyzV52jv/NZuagOmXcAYt9xUTqPf4aTLhDBH8E98XTZ6IMqzPYrGJsocm IE/fT7MDXDVSotnUW54Y7gOLv7QVvYY= -----END CERTIFICATE-----Generated at Mon Sep 28 10:51:11 2026 by rpki-client