$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ecd2589c-b281-3720-b480-1474e2007da6.roa File: ecd2589c-b281-3720-b480-1474e2007da6.roa (raw, json) Hash identifier: PWaSKrwu5sLAxrzlbcbYTXpQ6ZzomHcOkNbVfzjSHWE= Subject key identifier: 3A:32:84:0B:32:AF:6A:2C:5B:86:A1:4A:D7:2C:0F:EF:43:76:44:62 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F55625BCA1943E1958B137680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ecd2589c-b281-3720-b480-1474e2007da6.roa Signing time: Tue 29 Sep 2026 07:37:20 +0000 ROA not before: Tue 29 Sep 2026 07:37:20 +0000 ROA not after: Mon 28 Dec 2026 08:37:20 +0000 asID: 62904 IP address blocks: 173.232.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:62:5b:ca:19:43:e1:95:8b:13:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 07:37:20 2026 GMT Not After : Dec 28 08:37:20 2026 GMT Subject: CN=fb9f38a8-3eaa-4ded-a7e0-878561e085b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:42:b7:92:23:22:a4:52:aa:71:9e:4c:70: 0d:e4:53:b5:da:ae:d0:24:9a:a8:93:db:ba:e8:42: de:9d:87:e9:07:cd:b3:a9:4e:dc:79:7a:a8:bc:3b: 6f:ed:7e:e6:03:6a:2b:5e:f4:20:78:6c:93:ca:bb: 75:43:fe:44:6c:7b:b8:bb:6c:a6:4a:3f:52:37:95: 29:9c:f6:34:1b:44:8a:19:40:a6:ac:fc:d9:5c:a4: 8f:86:08:1c:1c:3e:64:c6:1a:a9:db:9f:79:55:92: d9:74:c6:e8:01:cc:83:75:53:71:d1:dd:f7:d5:fa: 6a:6d:e4:94:2c:d3:ed:c7:53:27:0f:37:db:22:fe: c9:c9:5a:1a:f4:6e:e2:61:26:e3:4d:4a:95:3a:40: 22:a5:74:d0:6a:ec:7a:f2:73:05:29:32:83:79:cc: 54:73:7c:df:06:db:f8:75:31:de:22:99:26:12:8b: b1:05:36:77:f7:54:72:af:ae:f2:3c:42:e7:28:bf: 0c:ec:8d:1b:91:20:56:91:1f:9e:f9:04:82:95:ff: 1d:f4:bd:50:16:ed:f0:27:e9:88:20:e0:61:cd:c0: a3:c0:7c:5e:e8:99:4a:d6:10:e1:e9:4c:a9:16:b1: 08:32:49:f4:3e:c8:2a:30:21:08:d0:ee:83:4e:53: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:32:84:0B:32:AF:6A:2C:5B:86:A1:4A:D7:2C:0F:EF:43:76:44:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ecd2589c-b281-3720-b480-1474e2007da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:84:e8:5a:55:1b:32:24:dd:9b:5a:9a:e5:7a:42:d0:6a:f8: 45:13:10:83:98:36:04:13:0b:17:4f:27:86:8f:49:40:9e:e7: 8d:89:33:ae:d0:3f:ab:66:b1:4e:95:f8:c3:e7:ba:e4:d7:3e: ca:0a:6a:69:19:2f:1e:45:05:f8:2a:af:1e:15:b0:b1:ab:d2: 21:fd:74:7b:b8:22:3f:9d:10:2e:be:d4:fd:20:4d:51:3e:6a: f0:a1:ba:59:09:cc:67:7f:0f:fb:41:20:cd:15:8c:3e:7d:f7: ea:d5:f8:e0:0e:e8:24:ad:cd:0f:3a:27:37:e6:e1:fd:47:df: 49:96:00:76:33:36:01:49:38:a6:46:c2:38:60:ff:3f:c9:d4: 13:64:88:21:01:5b:b4:84:88:52:1a:5a:ad:e6:cd:3a:f2:60: a0:dd:a8:2f:b8:b2:7a:4a:32:93:b9:a5:b0:8d:60:8b:9e:ca: 52:68:e4:d9:8f:f9:92:06:cd:94:06:a9:0a:8d:34:1b:4e:50: cc:63:ee:df:43:51:4d:a5:99:c7:63:0a:3a:e5:7c:1b:6e:c8: 07:74:d0:ef:1e:d4:54:2b:6c:96:03:e1:1d:41:b3:6f:ee:e8: 40:d6:c0:1c:e3:7d:11:e9:a6:c9:d2:90:5f:79:9b:52:62:34: 1b:d5:32:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9VYlvKGUPhlYsTdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTA3MzcyMFoXDTI2MTIyODA4MzcyMFowLzEtMCsGA1UEAxMk ZmI5ZjM4YTgtM2VhYS00ZGVkLWE3ZTAtODc4NTYxZTA4NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjNCt5IjIqRSqnGeTHAN5FO12q7QJJqok9u6 6ELenYfpB82zqU7ceXqovDtv7X7mA2orXvQgeGyTyrt1Q/5EbHu4u2ymSj9SN5Up nPY0G0SKGUCmrPzZXKSPhggcHD5kxhqp2595VZLZdMboAcyDdVNx0d331fpqbeSU LNPtx1MnDzfbIv7JyVoa9G7iYSbjTUqVOkAipXTQaux68nMFKTKDecxUc3zfBtv4 dTHeIpkmEouxBTZ391Ryr67yPELnKL8M7I0bkSBWkR+e+QSClf8d9L1QFu3wJ+mI IOBhzcCjwHxe6JlK1hDh6UypFrEIMkn0PsgqMCEI0O6DTlMLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoyhAsyr2osW4ahStcsD+9DdkRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZWNkMjU4OWMtYjI4MS0z NzIwLWI0ODAtMTQ3NGUyMDA3ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2E6FpVGzIk3ZtamuV6QtBq+EUTEIOYNgQTCxdPJ4aPSUCe542JM67Q P6tmsU6V+MPnuuTXPsoKamkZLx5FBfgqrx4VsLGr0iH9dHu4Ij+dEC6+1P0gTVE+ avChulkJzGd/D/tBIM0VjD599+rV+OAO6CStzQ86Jzfm4f1H30mWAHYzNgFJOKZG wjhg/z/J1BNkiCEBW7SEiFIaWq3mzTryYKDdqC+4snpKMpO5pbCNYIueylJo5NmP +ZIGzZQGqQqNNBtOUMxj7t9DUU2lmcdjCjrlfBtuyAd00O8e1FQrbJYD4R1Bs2/u 6EDWwBzjfRHppsnSkF95m1JiNBvVMmA= -----END CERTIFICATE-----Generated at Mon Oct 12 16:13:34 2026 by rpki-client