$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/37ef1602-462e-314c-97d1-2c55266fdfe0.roa File: 37ef1602-462e-314c-97d1-2c55266fdfe0.roa (raw, json) Hash identifier: Cz5no3hrcgnMVDG/UsEIKbWoMGpdGLN+cYqHnzWfqbw= Subject key identifier: 8A:BB:E1:46:96:7C:00:DB:23:DF:E4:62:C0:C7:1D:64:DB:52:AB:3E Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584FA42DEE776B3005608E85A780 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/37ef1602-462e-314c-97d1-2c55266fdfe0.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 38481 IP address blocks: 170.148.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:ee:77:6b:30:05:60:8e:85:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=47297225-635c-420b-b924-b966747d82bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:e7:1d:59:62:66:6d:8c:bb:6b:f0:7c:84: a7:65:a0:25:66:ba:c2:41:d6:8c:b6:09:cd:7a:d0: ad:80:58:ab:47:54:5f:41:1d:7c:56:c0:51:a0:cf: ea:e3:06:69:5c:bb:df:dd:9f:cc:db:f6:4c:dd:08: 60:e2:c7:f8:2e:5a:f0:fc:fa:b9:c3:f2:c1:cc:3a: 52:b8:f0:94:95:80:43:31:e5:5b:ae:33:0e:65:f9: ad:32:e4:96:3c:b2:dd:1d:d4:13:23:fb:24:bd:b4: 3b:99:cd:4a:7a:38:d6:e9:57:d9:3d:2a:b5:0c:9e: 86:97:88:ab:e1:02:6a:7e:1b:90:00:74:00:e6:0b: 41:26:d3:84:69:af:6d:48:02:e4:44:28:e4:c6:1c: aa:77:0b:a1:12:62:80:0b:5d:dc:fb:c3:4c:08:9c: 6e:01:d0:db:9a:b3:65:85:4b:59:4c:40:30:cf:27: 69:ea:30:9e:0b:d2:1e:41:44:2f:22:ee:9a:c1:b9: fc:38:ba:72:ed:0b:25:65:40:00:71:04:cd:ec:c8: b8:0e:b7:f4:d1:d4:cc:de:8f:df:43:19:38:b8:ad: 56:48:ee:af:16:89:75:d6:6d:bb:ab:39:ce:0e:10: cc:2f:3c:ca:c3:d9:1f:b1:25:a4:fa:eb:a1:63:22: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:E1:46:96:7C:00:DB:23:DF:E4:62:C0:C7:1D:64:DB:52:AB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/37ef1602-462e-314c-97d1-2c55266fdfe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 170.148.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f8:b7:21:c3:b2:8f:2e:10:9b:4f:3a:f4:66:8e:63:5b:dc: 19:81:68:3b:aa:2e:70:7b:70:ee:26:b5:0d:3a:06:0b:d4:24: d2:db:a6:9d:05:13:f6:6d:b5:4b:51:56:b1:4b:92:2e:2d:17: 28:8d:ee:1b:5b:67:c1:02:aa:45:91:c7:e9:aa:5f:07:95:e8: 8e:33:29:06:19:b9:ff:c5:c9:c5:27:35:80:fb:36:6f:73:df: 96:d7:a4:be:b4:0a:30:8b:42:c8:8c:a9:48:46:08:ac:4a:70: 16:29:10:45:67:39:45:df:1e:6e:38:96:b2:a1:b6:01:72:67: 1f:0b:ea:61:0e:b4:d7:73:4d:77:6c:62:a0:4e:41:76:27:c2: 09:7e:a1:8c:f1:af:3b:59:64:94:4e:15:d0:0e:23:13:aa:2b: 8a:6f:26:61:0a:a7:3c:6c:54:e2:dd:d4:80:a5:e2:d3:d8:2a: 99:dc:c3:02:c6:17:8d:f4:a4:26:41:90:94:f5:dc:1a:3f:ed: 71:a6:18:95:30:86:7a:5f:94:45:94:ac:ac:f0:70:a8:e7:81: 40:5a:43:6b:2b:61:24:84:d3:70:bd:7a:ca:09:39:61:40:66: e4:bb:0f:22:97:cb:e6:76:8c:4c:13:17:ed:3c:08:88:0c:59: 38:b9:44:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLe53azAFYI6Fp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk NDcyOTcyMjUtNjM1Yy00MjBiLWI5MjQtYjk2Njc0N2Q4MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWrnHVliZm2Mu2vwfISnZaAlZrrCQdaMtgnN etCtgFirR1RfQR18VsBRoM/q4wZpXLvf3Z/M2/ZM3Qhg4sf4Llrw/Pq5w/LBzDpS uPCUlYBDMeVbrjMOZfmtMuSWPLLdHdQTI/skvbQ7mc1KejjW6VfZPSq1DJ6Gl4ir 4QJqfhuQAHQA5gtBJtOEaa9tSALkRCjkxhyqdwuhEmKAC13c+8NMCJxuAdDbmrNl hUtZTEAwzydp6jCeC9IeQUQvIu6awbn8OLpy7QslZUAAcQTN7Mi4Drf00dTM3o/f Qxk4uK1WSO6vFol11m27qznODhDMLzzKw9kfsSWk+uuhYyJ0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq74UaWfADbI9/kYsDHHWTbUqs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMzdlZjE2MDItNDYyZS0z MTRjLTk3ZDEtMmM1NTI2NmZkZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD4tyHDso8uEJtPOvRmjmNb3BmBaDuqLnB7cO4mtQ06BgvUJNLbpp0F E/ZttUtRVrFLki4tFyiN7htbZ8ECqkWRx+mqXweV6I4zKQYZuf/FycUnNYD7Nm9z 35bXpL60CjCLQsiMqUhGCKxKcBYpEEVnOUXfHm44lrKhtgFyZx8L6mEOtNdzTXds YqBOQXYnwgl+oYzxrztZZJROFdAOIxOqK4pvJmEKpzxsVOLd1ICl4tPYKpncwwLG F430pCZBkJT13Bo/7XGmGJUwhnpflEWUrKzwcKjngUBaQ2srYSSE03C9esoJOWFA ZuS7DyKXy+Z2jEwTF+08CIgMWTi5ROg= -----END CERTIFICATE-----Generated at Sun Nov 15 11:16:57 2026 by rpki-client