$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a23fe8a9-832b-3606-95a4-60bd9de080c6.roa File: a23fe8a9-832b-3606-95a4-60bd9de080c6.roa (raw, json) Hash identifier: neiQz6pibcF3OeO7hIgutlaYVfM9r9JICKUNmAzmcqY= Subject key identifier: 5A:A1:6F:0D:F7:59:0F:05:D7:4D:FB:87:74:A6:ED:B4:E2:82:B4:49 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F560EE022C718224CE7761340 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a23fe8a9-832b-3606-95a4-60bd9de080c6.roa Signing time: Tue 29 Sep 2026 13:24:56 +0000 ROA not before: Tue 29 Sep 2026 13:24:56 +0000 ROA not after: Mon 28 Dec 2026 14:24:56 +0000 asID: 62904 IP address blocks: 173.232.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:0e:e0:22:c7:18:22:4c:e7:76:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 13:24:56 2026 GMT Not After : Dec 28 14:24:56 2026 GMT Subject: CN=bbe7a65a-51f7-4ecc-9ef3-b7a2b5c74bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:b3:f2:c8:bc:3c:77:33:1b:fc:a2:25:e2: ca:bd:61:e5:74:b9:da:ab:df:c3:a0:65:12:93:ea: ff:e6:db:e3:6a:a3:59:58:bf:e8:ee:6b:5d:93:03: 28:6d:61:79:2c:9c:ef:bd:e7:cf:c7:c9:78:e8:15: c9:a8:e4:3e:fe:05:56:70:43:e1:a7:8a:1e:d5:42: c1:bc:4c:63:5f:08:21:ac:2d:a1:da:02:78:b4:60: 04:2e:35:a5:d3:df:d3:be:ab:3a:a6:c2:6f:51:53: e5:36:2b:39:86:ce:ad:0e:3f:76:7e:6d:4c:86:ae: 1c:27:be:cb:15:cd:b4:01:ba:51:3d:aa:b2:33:90: 26:98:d5:69:cd:f5:2a:5f:2a:25:60:37:cc:d8:ed: da:a1:27:29:11:c4:0d:65:b3:96:ab:bd:94:19:65: dd:ee:ce:de:29:59:ba:07:8e:e3:69:e6:df:e5:fc: ac:f0:d1:76:43:a4:d5:ec:be:bb:55:d5:2f:bf:ea: 75:29:17:3f:63:72:27:db:67:1b:3e:0f:6f:0b:0e: a6:ff:50:6d:da:2f:1c:bc:ff:26:45:37:e6:cf:a2: 16:38:c3:a2:09:23:02:d5:31:8e:e8:f6:ae:9e:ed: 30:ce:23:13:23:46:43:3b:39:31:c2:d1:42:a5:31: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:6F:0D:F7:59:0F:05:D7:4D:FB:87:74:A6:ED:B4:E2:82:B4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a23fe8a9-832b-3606-95a4-60bd9de080c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:14:33:92:77:8b:dc:51:cf:e5:a6:f8:bf:79:ce:18:8a: 70:e2:5e:72:26:66:de:39:76:22:e0:65:f8:08:f1:c5:b8:4d: 61:19:74:bd:cc:94:75:ed:a4:45:c7:53:9b:f4:d5:e1:15:72: 48:24:4f:0e:d7:0b:43:35:ce:49:df:5f:4d:b1:d8:3c:4e:a1: 02:f1:7a:67:c1:18:65:71:5f:df:da:ed:fd:d3:88:ca:8b:b0: 55:11:22:2f:73:49:75:b3:f1:fc:74:d0:1b:97:85:70:2a:18: 24:9a:3c:d8:2d:a8:93:8e:f4:c9:e4:cb:34:68:e8:7d:41:f6: cd:12:6d:f0:4d:b6:63:4b:c2:48:d0:a4:86:25:f3:71:77:d1: 05:52:03:69:02:11:51:f6:da:4e:ed:9a:8d:d9:89:e5:93:e4: 59:0b:b3:f0:60:9f:93:4a:af:1b:e9:98:7a:76:af:c2:08:b1: ba:23:68:0b:35:5a:5e:f0:91:04:df:8d:4f:1b:57:9c:40:81: 2a:f4:9b:a8:11:63:58:f9:7a:30:86:f2:fb:0d:cc:71:b3:34: 92:e9:42:f2:9b:2a:95:2e:9d:44:d7:4f:5b:82:ec:49:49:16: 47:30:8a:6b:0d:dd:30:30:0f:d0:d1:28:b9:a5:40:d1:45:ed: c5:fe:0e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WDuAixxgiTOd2E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTEzMjQ1NloXDTI2MTIyODE0MjQ1NlowLzEtMCsGA1UEAxMk YmJlN2E2NWEtNTFmNy00ZWNjLTllZjMtYjdhMmI1Yzc0YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmyz8si8PHczG/yiJeLKvWHldLnaq9/DoGUS k+r/5tvjaqNZWL/o7mtdkwMobWF5LJzvvefPx8l46BXJqOQ+/gVWcEPhp4oe1ULB vExjXwghrC2h2gJ4tGAELjWl09/Tvqs6psJvUVPlNis5hs6tDj92fm1Mhq4cJ77L Fc20AbpRPaqyM5AmmNVpzfUqXyolYDfM2O3aoScpEcQNZbOWq72UGWXd7s7eKVm6 B47jaebf5fys8NF2Q6TV7L67VdUvv+p1KRc/Y3In22cbPg9vCw6m/1Bt2i8cvP8m RTfmz6IWOMOiCSMC1TGO6Paunu0wziMTI0ZDOzkxwtFCpTHCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqhbw33WQ8F1037h3Sm7bTigrRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTIzZmU4YTktODMyYi0z NjA2LTk1YTQtNjBiZDlkZTA4MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBreioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyxFDOSd4vcUc/lpvi/ec4YinDiXnImZt45diLgZfgI8cW4TWEZdL3M lHXtpEXHU5v01eEVckgkTw7XC0M1zknfX02x2DxOoQLxemfBGGVxX9/a7f3TiMqL sFURIi9zSXWz8fx00BuXhXAqGCSaPNgtqJOO9MnkyzRo6H1B9s0SbfBNtmNLwkjQ pIYl83F30QVSA2kCEVH22k7tmo3ZieWT5FkLs/Bgn5NKrxvpmHp2r8IIsbojaAs1 Wl7wkQTfjU8bV5xAgSr0m6gRY1j5ejCG8vsNzHGzNJLpQvKbKpUunUTXT1uC7ElJ FkcwimsN3TAwD9DRKLmlQNFF7cX+Dhc= -----END CERTIFICATE-----Generated at Sun Oct 11 10:11:13 2026 by rpki-client