$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa File: d4bae7d4-79c0-3570-86f8-0973a5218251.roa (raw, json) Hash identifier: 2Dih0PB2Wy3l2gAreC6aWEF8ax9QZjtmbM/rRkNnaxA= Subject key identifier: 5B:D1:62:2F:16:E5:2B:59:D0:3C:BC:E3:19:53:59:33:FA:EB:EC:42 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1CC797B09D86A589906CDA80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 62904 IP address blocks: 173.232.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:97:b0:9d:86:a5:89:90:6c:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=32455e81-ebfd-447d-bf72-721d01137a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:9a:df:38:6b:9a:7a:cc:55:2c:2c:67:ed: 4e:a3:23:65:63:64:15:df:df:f2:16:99:12:0a:a7: 07:6d:97:c0:e1:e3:1b:0f:5e:aa:0d:17:7e:24:71: fe:e3:3f:96:45:1a:5e:b2:74:91:6b:64:d0:71:67: 3f:e8:b6:44:c7:f6:1d:60:dd:d4:d6:56:49:2d:38: 92:de:62:27:2d:e2:ad:e4:ef:49:ce:fb:df:e5:a6: 13:ab:bc:33:94:90:c2:f7:41:d6:dc:19:10:b4:ac: d6:b3:a7:e9:f6:df:2e:04:43:00:3a:ca:05:71:37: 56:ae:82:ba:f3:ff:f3:24:53:94:e9:f0:ec:a8:83: 3d:d4:e9:90:5e:b0:6a:8f:8d:1e:a7:09:0c:4e:2c: 2d:d0:ea:f5:50:18:f5:18:0d:51:aa:15:eb:14:dc: df:67:97:c6:25:03:c6:b1:17:e0:5d:69:de:ab:be: dd:9b:50:c4:fa:66:4f:99:e4:54:24:3b:57:41:8c: d8:72:6b:26:1e:06:d9:83:6e:6c:62:bb:1b:ef:ae: 49:e8:3f:1d:d8:9f:2e:7c:6d:51:a8:e6:32:4f:43: 34:42:2d:b0:cb:a0:84:52:47:4b:4f:b2:69:b6:53: b0:6f:1b:b1:87:33:44:df:c7:55:92:2f:0e:a5:7d: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:62:2F:16:E5:2B:59:D0:3C:BC:E3:19:53:59:33:FA:EB:EC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7f:17:dd:cc:99:38:73:e1:60:6b:4a:82:5f:fb:6d:af:1b: 8a:03:dc:e0:44:54:c4:25:4f:b0:0f:f8:42:d5:81:69:4a:8d: 65:fd:e9:07:cd:27:30:23:0b:cf:b1:53:6d:4c:05:b5:44:e4: 12:2e:ad:e9:69:ce:ff:f7:bc:48:23:21:8b:ed:0f:b4:d6:57: 2e:54:c3:e2:79:b4:4b:ce:1c:b8:1c:fd:f7:d9:ee:b1:04:5b: 2c:77:bc:79:0f:56:74:1c:eb:5e:b7:ad:31:cb:d2:17:8c:09: bc:e7:6e:00:5e:dd:62:62:79:37:29:ee:72:bc:bb:c4:30:2c: 22:40:6a:d1:8a:52:73:83:59:b5:2f:1a:dd:96:a2:5f:5e:2c: ce:39:fe:6d:23:06:1f:4f:f7:91:35:f1:f5:f8:69:c5:30:5d: e0:86:1c:25:8f:26:ac:c6:73:d8:5d:e6:8d:01:b7:ca:ab:07: e4:f2:b4:1c:fb:05:15:a4:01:ac:17:ef:eb:42:ea:05:d1:ac: 47:2e:53:90:49:f5:01:ff:ae:9a:55:ba:5a:cc:d6:44:6b:47: 44:ee:7f:49:1f:ec:f7:8b:4d:6b:06:2e:00:32:31:9e:6b:c1: 4b:ae:1c:24:b3:d0:ee:9c:a0:a2:a7:5b:9c:8e:15:a1:f8:ee: 0d:50:56:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5ewnYaliZBs2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MzI0NTVlODEtZWJmZC00NDdkLWJmNzItNzIxZDAxMTM3YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJOa3zhrmnrMVSwsZ+1OoyNlY2QV39/yFpkS CqcHbZfA4eMbD16qDRd+JHH+4z+WRRpesnSRa2TQcWc/6LZEx/YdYN3U1lZJLTiS 3mInLeKt5O9Jzvvf5aYTq7wzlJDC90HW3BkQtKzWs6fp9t8uBEMAOsoFcTdWroK6 8//zJFOU6fDsqIM91OmQXrBqj40epwkMTiwt0Or1UBj1GA1RqhXrFNzfZ5fGJQPG sRfgXWneq77dm1DE+mZPmeRUJDtXQYzYcmsmHgbZg25sYrsb765J6D8d2J8ufG1R qOYyT0M0Qi2wy6CEUkdLT7JptlOwbxuxhzNE38dVki8OpX1TBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvRYi8W5StZ0Dy84xlTWTP66+xCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRiYWU3ZDQtNzljMC0z NTcwLTg2ZjgtMDk3M2E1MjE4MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrejsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9/F93MmThz4WBrSoJf+22vG4oD3OBEVMQlT7AP+ELVgWlKjWX96QfN JzAjC8+xU21MBbVE5BIurelpzv/3vEgjIYvtD7TWVy5Uw+J5tEvOHLgc/ffZ7rEE Wyx3vHkPVnQc6163rTHL0heMCbznbgBe3WJieTcp7nK8u8QwLCJAatGKUnODWbUv Gt2Wol9eLM45/m0jBh9P95E18fX4acUwXeCGHCWPJqzGc9hd5o0Bt8qrB+TytBz7 BRWkAawX7+tC6gXRrEcuU5BJ9QH/rppVulrM1kRrR0Tuf0kf7PeLTWsGLgAyMZ5r wUuuHCSz0O6coKKnW5yOFaH47g1QVjw= -----END CERTIFICATE-----Generated at Thu Oct 8 20:53:29 2026 by rpki-client