$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddffe181-db50-308c-819f-4e065d860834.roa File: ddffe181-db50-308c-819f-4e065d860834.roa (raw, json) Hash identifier: +LtM4iD1DMasdDxZ+yC2aS6GSSb8+dB9AOiHm+K518A= Subject key identifier: 95:D8:C9:A4:7C:D3:29:CE:BF:DC:81:65:A7:CD:B4:37:7A:D9:F3:A6 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F556CB044BFE12DB5E9D1DE00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddffe181-db50-308c-819f-4e065d860834.roa Signing time: Tue 29 Sep 2026 07:58:09 +0000 ROA not before: Tue 29 Sep 2026 07:58:09 +0000 ROA not after: Mon 28 Dec 2026 08:58:09 +0000 asID: 62904 IP address blocks: 173.232.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:6c:b0:44:bf:e1:2d:b5:e9:d1:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 07:58:09 2026 GMT Not After : Dec 28 08:58:09 2026 GMT Subject: CN=20d9ec1b-f09c-4955-a552-6d7eaf9b2c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:43:62:9f:0e:68:0f:c0:cb:3d:dd:18:42: f2:f5:7b:a2:1a:e9:dd:25:9b:a1:7f:da:aa:38:e9: aa:26:27:ac:50:39:45:55:12:64:36:d5:0e:62:ce: ec:11:d2:a1:85:37:c8:75:3b:2b:3e:69:25:24:66: 4b:92:42:0f:0b:f4:4b:46:2d:4f:2e:7d:77:0e:8d: 87:e8:9f:5d:f5:98:94:04:39:42:00:09:21:46:6b: d9:e1:6e:a7:1b:a2:76:cf:d8:51:b0:20:d8:18:3e: d6:35:9b:b8:52:44:f1:ef:b8:a1:b9:66:d5:1a:74: d1:32:f1:19:69:d1:03:d1:85:97:bf:d3:a1:c1:cb: 51:bf:2d:e1:27:4f:03:a3:66:b3:42:29:15:c3:4d: c9:b4:a7:b5:0b:97:86:96:24:32:46:63:41:2b:47: c4:96:30:5a:b1:93:d6:bd:87:7d:e0:94:e0:15:7e: 7a:a8:34:76:89:5f:7d:75:6a:47:74:43:33:94:22: 58:e7:cf:c7:64:c2:db:49:b4:62:c0:1f:aa:ea:de: 1c:5e:c2:1f:c4:6e:39:26:cc:2a:37:00:9a:03:88: 0e:be:3f:c0:4b:df:16:0c:08:5d:7a:a9:80:35:bc: b7:9e:44:3b:6a:f4:23:98:81:5c:e0:c0:18:95:9e: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D8:C9:A4:7C:D3:29:CE:BF:DC:81:65:A7:CD:B4:37:7A:D9:F3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddffe181-db50-308c-819f-4e065d860834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f0:93:c2:c7:a7:12:d3:54:fb:a5:01:af:26:2d:56:75:f7: 3c:16:af:96:ad:e1:df:ed:1a:cb:ef:ed:b4:df:2d:07:3b:c8: 81:ad:30:7d:5f:77:8f:5b:cf:7f:ea:25:ac:21:63:6e:f2:a0: 18:52:fc:79:79:e9:4a:d5:e4:87:6e:f9:e0:c2:0b:38:bf:62: cf:fe:e9:3b:11:e3:6f:3f:aa:20:2a:bb:96:66:c3:39:ec:63: 8e:2a:9a:4c:b3:40:ba:81:8c:6a:85:cd:35:c9:fd:02:25:c3: 5a:5d:5a:17:d2:36:d5:ed:c6:cf:fc:db:ca:76:83:2c:66:b4: f7:a0:ad:13:72:25:00:51:02:cb:99:fc:31:43:9a:76:d6:14: 4f:b2:e8:a4:24:9f:a2:20:75:2f:72:1b:29:37:73:46:c3:e8: e2:a4:b5:e3:55:95:41:65:8e:62:7d:f8:1f:20:9d:05:c5:78: f4:86:82:ce:9e:21:a1:3a:28:c8:ce:44:c6:57:62:d2:4a:e7: 7d:b6:5f:c1:6f:4e:96:60:c5:d8:e2:ed:6b:3f:1f:d1:f7:bc: 35:e0:ef:52:9c:6f:33:a6:7b:ed:4b:56:12:6d:2c:e6:4d:68: 72:20:23:94:3f:2c:4f:77:30:28:b5:d3:74:ad:34:84:82:11: 6d:d4:78:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9VbLBEv+EttenR3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTA3NTgwOVoXDTI2MTIyODA4NTgwOVowLzEtMCsGA1UEAxMk MjBkOWVjMWItZjA5Yy00OTU1LWE1NTItNmQ3ZWFmOWIyYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm9DYp8OaA/Ayz3dGELy9XuiGundJZuhf9qq OOmqJiesUDlFVRJkNtUOYs7sEdKhhTfIdTsrPmklJGZLkkIPC/RLRi1PLn13Do2H 6J9d9ZiUBDlCAAkhRmvZ4W6nG6J2z9hRsCDYGD7WNZu4UkTx77ihuWbVGnTRMvEZ adED0YWXv9OhwctRvy3hJ08Do2azQikVw03JtKe1C5eGliQyRmNBK0fEljBasZPW vYd94JTgFX56qDR2iV99dWpHdEMzlCJY58/HZMLbSbRiwB+q6t4cXsIfxG45Jswq NwCaA4gOvj/AS98WDAhdeqmANby3nkQ7avQjmIFc4MAYlZ7+QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXYyaR80ynOv9yBZafNtDd62fOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGRmZmUxODEtZGI1MC0z MDhjLTgxOWYtNGUwNjVkODYwODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbwk8LHpxLTVPulAa8mLVZ19zwWr5at4d/tGsvv7bTfLQc7yIGtMH1f d49bz3/qJawhY27yoBhS/Hl56UrV5Idu+eDCCzi/Ys/+6TsR428/qiAqu5Zmwzns Y44qmkyzQLqBjGqFzTXJ/QIlw1pdWhfSNtXtxs/828p2gyxmtPegrRNyJQBRAsuZ /DFDmnbWFE+y6KQkn6IgdS9yGyk3c0bD6OKkteNVlUFljmJ9+B8gnQXFePSGgs6e IaE6KMjORMZXYtJK5322X8FvTpZgxdji7Ws/H9H3vDXg71KcbzOme+1LVhJtLOZN aHIgI5Q/LE93MCi103StNISCEW3UeGw= -----END CERTIFICATE-----Generated at Sat Oct 10 17:43:02 2026 by rpki-client