$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fd455db7-52e5-3cea-bb8c-cd6a791f5ee1.roa File: fd455db7-52e5-3cea-bb8c-cd6a791f5ee1.roa (raw, json) Hash identifier: wS6g64LcU4w0qwBvl3GWE1OwS5I78F79RhDfw7ixWjM= Subject key identifier: CB:56:CB:48:13:2E:03:63:64:14:76:84:C4:80:98:38:73:4A:13:55 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F49744FC88AC1B2B5EAB74180 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fd455db7-52e5-3cea-bb8c-cd6a791f5ee1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 173.232.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:4f:c8:8a:c1:b2:b5:ea:b7:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dc8c7c87-c2b7-4e87-9983-9d90d61260e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:d1:d8:ae:ec:5b:bb:e5:42:f0:5a:29:14: 2b:91:ee:a7:3e:a1:b8:6d:97:5d:cb:76:1a:ca:91: 5b:b9:35:88:47:89:df:aa:60:b2:f2:a3:90:47:51: 6e:2a:89:a2:70:31:79:67:e8:31:68:2b:8f:c4:6b: 5d:e7:3e:e6:77:8c:2a:db:80:45:a7:ba:ea:a5:a3: 1c:48:18:29:df:9f:6e:33:f0:69:6a:41:9b:e4:c3: 1c:a5:05:55:4b:56:b1:d7:57:ed:26:32:4f:3c:4e: 00:23:86:dc:b4:a7:bc:c2:a7:03:e5:52:a2:a5:fb: 39:29:45:7d:1a:6e:2a:a1:6a:bd:82:79:a9:6b:e1: 06:83:5c:85:07:b4:a9:64:2a:86:ee:17:ba:2a:e6: 79:aa:88:42:d6:c6:bb:fe:a6:38:29:a1:e3:39:df: 94:44:7e:a5:d0:21:a7:0d:7f:3c:03:5b:1d:a6:5f: d1:df:76:55:a4:73:c9:b8:32:d7:36:4c:7d:3b:dc: 6f:91:dd:7f:cf:0c:d6:93:08:8d:37:08:bb:16:13: d3:9e:df:bf:32:9a:b1:32:c2:8f:f7:b5:d1:9b:4c: c5:4f:83:53:34:69:5e:ec:15:8e:0d:b5:0c:48:45: cb:63:ac:8e:06:73:e6:8b:6f:94:2b:fe:76:28:7c: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:CB:48:13:2E:03:63:64:14:76:84:C4:80:98:38:73:4A:13:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fd455db7-52e5-3cea-bb8c-cd6a791f5ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ef:d2:94:d6:64:8a:3f:91:25:31:4f:10:2e:fc:ca:fb:cb: ee:11:bc:16:4a:1f:09:68:ac:36:35:92:66:83:92:5c:cd:05: 53:3f:8b:aa:c4:48:97:b8:3c:42:b5:b2:9a:ce:b2:69:c9:06: 8b:d9:3d:82:8d:99:4e:92:91:b3:8f:5c:56:72:4a:1a:a3:09: ab:bd:09:7c:9e:70:21:1e:e7:99:45:04:d2:85:a7:d6:e5:8b: 49:cb:d2:92:a7:95:5b:9d:ad:84:a4:08:0b:f4:93:a8:43:ca: 09:f6:bf:62:47:4a:25:e0:96:07:56:cc:d4:28:ef:10:54:f4: 0d:fb:06:2d:fd:f4:a3:2f:3e:52:ed:a0:c0:76:42:69:59:94: a3:6a:9f:86:37:ed:b3:d0:b2:61:f1:a8:d7:35:ea:aa:5f:7a: 38:e8:3d:ab:8f:e8:a9:07:a4:0c:10:ef:f5:42:e6:07:e3:e7: 9a:88:95:47:17:ae:b2:c3:4b:62:be:31:7a:e1:62:b7:25:18: 70:fd:9d:3b:7e:e8:f2:50:f7:42:d0:2c:0a:15:cf:2e:b1:02: 2b:5e:a6:fe:ee:bf:31:c5:b7:d5:2e:2e:48:01:27:c9:b3:0b: 86:90:75:c7:49:13:1a:a6:45:a9:48:dd:b3:73:e7:bd:25:80: a2:0e:57:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdE/IisGyteq3QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGM4YzdjODctYzJiNy00ZTg3LTk5ODMtOWQ5MGQ2MTI2MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMfR2K7sW7vlQvBaKRQrke6nPqG4bZddy3Ya ypFbuTWIR4nfqmCy8qOQR1FuKomicDF5Z+gxaCuPxGtd5z7md4wq24BFp7rqpaMc SBgp359uM/BpakGb5MMcpQVVS1ax11ftJjJPPE4AI4bctKe8wqcD5VKipfs5KUV9 Gm4qoWq9gnmpa+EGg1yFB7SpZCqG7he6KuZ5qohC1sa7/qY4KaHjOd+URH6l0CGn DX88A1sdpl/R33ZVpHPJuDLXNkx9O9xvkd1/zwzWkwiNNwi7FhPTnt+/MpqxMsKP 97XRm0zFT4NTNGle7BWODbUMSEXLY6yOBnPmi2+UK/52KHwgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtWy0gTLgNjZBR2hMSAmDhzShNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZmQ0NTVkYjctNTJlNS0z Y2VhLWJiOGMtY2Q2YTc5MWY1ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArej/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDv0pTWZIo/kSUxTxAu/Mr7y+4RvBZKHwlorDY1kmaDklzNBVM/i6rE SJe4PEK1sprOsmnJBovZPYKNmU6SkbOPXFZyShqjCau9CXyecCEe55lFBNKFp9bl i0nL0pKnlVudrYSkCAv0k6hDygn2v2JHSiXglgdWzNQo7xBU9A37Bi399KMvPlLt oMB2QmlZlKNqn4Y37bPQsmHxqNc16qpfejjoPauP6KkHpAwQ7/VC5gfj55qIlUcX rrLDS2K+MXrhYrclGHD9nTt+6PJQ90LQLAoVzy6xAitepv7uvzHFt9UuLkgBJ8mz C4aQdcdJExqmRalI3bNz570lgKIOV3M= -----END CERTIFICATE-----Generated at Sat Oct 3 17:44:59 2026 by rpki-client