$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa File: b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa (raw, json) Hash identifier: HYryQF8GOEwtIJKEGj2XzGXvgUGc9b2Uph7vtklgHH0= Subject key identifier: E1:A4:2E:E3:55:EF:0B:4B:7B:56:83:45:34:2D:4B:2F:52:4D:E8:A7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F3FAD8DA0F639600B5052A180 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 174 IP address blocks: 173.232.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8d:a0:f6:39:60:0b:50:52:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=225afdc9-f3ec-48ed-909f-11369a150bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:b0:fb:d9:8f:29:db:f4:9c:54:43:42:ff: cc:18:15:9a:d6:fb:e9:83:c3:e7:8f:7b:a2:3b:7c: ab:05:c5:54:9a:76:bd:18:85:3d:5e:29:6a:57:d2: 49:92:6f:7a:ec:7c:1a:a1:97:1d:d9:a6:fb:94:4d: cc:c0:ac:06:c2:0c:9f:3f:da:cd:df:05:5a:f5:9d: cf:5e:16:55:6c:8d:8b:41:fd:f9:20:4d:bc:f1:b0: 0d:50:6f:fc:0e:d7:90:e8:5e:9f:55:09:88:b2:4a: 86:80:9c:8a:a0:60:1d:c6:2a:a7:82:ef:8e:1a:c0: 94:f8:e0:89:f7:d1:33:0b:4c:f5:01:d2:fb:fa:1a: 11:69:57:4d:ba:f6:f4:0a:ee:2a:91:1d:4c:56:c0: 36:f2:32:05:2e:f6:76:60:06:26:cc:a6:60:4b:a5: 15:43:90:8d:0a:2d:eb:f5:08:a1:ff:d5:47:fd:b0: ce:8e:06:18:94:7b:e3:5e:67:78:64:bd:b7:9c:77: 68:1d:ac:ab:1c:79:64:2c:bc:73:dd:e5:b3:41:59: f3:1b:9e:eb:b5:4f:e7:d9:d9:99:0f:17:ad:2a:80: 14:7a:a6:39:43:c3:2b:4d:26:85:15:8f:e7:21:25: bc:f0:dc:73:b2:5b:97:09:9c:4c:91:cb:fa:5d:29: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A4:2E:E3:55:EF:0B:4B:7B:56:83:45:34:2D:4B:2F:52:4D:E8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:63:9e:b1:73:8a:9f:6e:7c:ab:6d:e5:1a:97:54:fd:cf:ab: d3:e5:7f:c7:d4:0f:e9:5e:fc:86:48:0b:ce:15:c7:b5:36:93: 23:b0:6e:dc:01:c5:94:a3:fe:b7:c9:49:0e:47:23:a4:ed:10: fb:6c:2d:17:8d:53:a8:ce:51:64:7b:8d:45:33:b1:83:f3:c3: 62:52:fb:08:ea:e0:8b:f2:d5:39:ba:5d:16:a2:a4:c3:35:91: 9b:fb:60:7d:b0:12:c5:7b:fe:5f:b5:55:bb:49:1a:1b:67:72: 88:fe:8a:50:54:ef:96:71:86:8a:c8:23:18:1c:da:c2:26:0d: c2:cf:6f:c6:c8:64:c3:f9:6f:b1:ab:b9:30:be:5a:87:a0:0f: 2f:f6:a9:cb:ca:65:69:23:fc:37:e3:be:1f:91:15:f0:f0:d1: 5b:55:1a:b0:47:87:a4:01:cf:5c:30:2b:76:6d:df:60:2b:a1: e6:ee:b7:d2:6d:b5:97:0d:de:0b:b2:7e:34:10:78:1f:7c:cc: b3:a4:01:de:70:99:14:74:c4:c3:da:23:61:a0:af:26:a7:b5: 45:26:18:78:2a:96:ee:4d:ee:1c:71:53:b4:fb:4f:ba:3d:e8: 8a:6b:d4:10:06:bf:ca:b5:01:cb:a0:e2:e4:ba:e3:99:10:ae: 67:06:71:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rY2g9jlgC1BSoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjI1YWZkYzktZjNlYy00OGVkLTkwOWYtMTEzNjlhMTUwYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Gw+9mPKdv0nFRDQv/MGBWa1vvpg8Pnj3ui O3yrBcVUmna9GIU9XilqV9JJkm967HwaoZcd2ab7lE3MwKwGwgyfP9rN3wVa9Z3P XhZVbI2LQf35IE288bANUG/8DteQ6F6fVQmIskqGgJyKoGAdxiqngu+OGsCU+OCJ 99EzC0z1AdL7+hoRaVdNuvb0Cu4qkR1MVsA28jIFLvZ2YAYmzKZgS6UVQ5CNCi3r 9Qih/9VH/bDOjgYYlHvjXmd4ZL23nHdoHayrHHlkLLxz3eWzQVnzG57rtU/n2dmZ DxetKoAUeqY5Q8MrTSaFFY/nISW88NxzsluXCZxMkcv6XSkrPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGkLuNV7wtLe1aDRTQtSy9STeinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjQ4MTRlMGItYWQ5My0z M2U4LWJhMTQtM2U4ZjhkM2FhYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9jnrFzip9ufKtt5RqXVP3Pq9Plf8fUD+le/IZIC84Vx7U2kyOwbtwB xZSj/rfJSQ5HI6TtEPtsLReNU6jOUWR7jUUzsYPzw2JS+wjq4Ivy1Tm6XRaipMM1 kZv7YH2wEsV7/l+1VbtJGhtncoj+ilBU75ZxhorIIxgc2sImDcLPb8bIZMP5b7Gr uTC+WoegDy/2qcvKZWkj/Dfjvh+RFfDw0VtVGrBHh6QBz1wwK3Zt32Aroebut9Jt tZcN3guyfjQQeB98zLOkAd5wmRR0xMPaI2GgryantUUmGHgqlu5N7hxxU7T7T7o9 6Ipr1BAGv8q1Acug4uS645kQrmcGccY= -----END CERTIFICATE-----Generated at Tue Sep 22 22:03:49 2026 by rpki-client