$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/3ded6ab0-aa4f-3417-a1a1-d7975c636286.roa File: 3ded6ab0-aa4f-3417-a1a1-d7975c636286.roa (raw, json) Hash identifier: vy0MSjYAcqLh2KP6P2ziYJ0Db+kJs7ZR8tgRGT4i5wA= Subject key identifier: 9C:65:4B:B4:AC:BA:09:64:AF:8F:A6:3C:91:92:26:B9:08:0E:08:0E Certificate issuer: /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764 Certificate serial: 010D0C9F4328584F4989DBF3B286994EF26F1940 Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/3ded6ab0-aa4f-3417-a1a1-d7975c636286.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53347 IP address blocks: 173.233.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:db:f3:b2:86:99:4e:f2:6f:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4629432a-916e-40fd-afb4-794f6840c49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:ab:6f:0e:c8:3c:91:0d:99:c2:62:19:ed: bb:9f:bd:7e:c2:22:4b:b3:26:08:e8:d7:7e:f8:c0: bd:53:fd:0a:92:ac:6f:85:1e:09:c8:a3:a6:0d:0c: 1a:b4:61:44:5d:ed:ca:31:8f:31:0b:9d:3b:2a:6d: 20:06:d6:34:28:c5:a0:e2:68:0b:d3:3c:dc:93:f8: a8:99:95:4b:6e:37:3a:c0:29:89:c6:0d:d2:bc:b7: 3f:77:88:6d:71:64:3a:9f:62:67:b1:77:24:31:f2: 40:94:65:b4:24:f5:4d:b3:a1:78:98:45:67:30:05: b2:f4:39:d1:ee:42:45:1f:46:7b:58:75:47:c0:09: fa:64:8e:07:50:c0:1c:4a:c4:f9:a4:91:58:d0:53: ea:37:e6:f3:43:63:c5:1f:24:ed:c3:3c:76:96:ff: 32:3b:76:14:83:b1:d4:b1:3e:f8:6c:df:98:f4:aa: 15:4f:43:43:27:bc:ae:11:00:08:e9:10:12:3a:9b: 71:c7:9e:0f:a1:5b:28:65:55:dd:cd:20:46:5f:1b: 77:95:8c:22:dc:54:01:d5:0e:1b:2d:d5:21:87:14: 94:ef:c7:08:46:9a:e9:59:cd:a8:10:a5:3d:68:07: 11:eb:25:cb:2a:ee:1a:d9:51:67:72:57:8f:fc:22: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:65:4B:B4:AC:BA:09:64:AF:8F:A6:3C:91:92:26:B9:08:0E:08:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/3ded6ab0-aa4f-3417-a1a1-d7975c636286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl X509v3 Authority Key Identifier: keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer sbgp-ipAddrBlock: critical IPv4: 173.233.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:05:49:f0:69:a5:c6:50:10:c6:17:99:92:65:a6:20:00:01: 44:c7:03:1a:fb:94:ee:f1:e9:68:50:2e:5e:5a:28:ea:b6:82: 37:ce:9d:59:18:6e:96:a7:85:8a:94:f0:69:d4:69:f5:81:46: 06:e6:ef:e4:1a:09:60:7b:82:40:ef:c6:22:30:57:42:20:5f: 45:f8:f3:04:fc:f6:a4:d9:52:22:e8:58:68:bb:65:5b:e7:c7: 22:9e:20:20:74:30:dd:01:62:aa:36:80:b9:84:33:34:11:67: 9c:7f:66:fe:b0:9a:ef:6f:a9:26:fc:09:75:d7:33:03:4d:8c: 07:3e:32:77:e4:65:fc:32:52:07:a4:68:7d:e0:8c:96:17:eb: 83:0b:63:b3:6e:70:1f:48:71:69:42:ab:11:a7:26:6c:70:a5: 42:41:1d:a9:4d:0b:82:77:6b:b2:4e:90:44:49:95:24:58:63: fc:c9:17:3b:f4:52:de:7d:1f:73:81:81:59:45:33:e7:af:cb: c6:06:21:22:e2:27:8b:c3:5c:1d:76:49:5a:da:b8:dd:48:aa: ba:b0:9f:c2:b7:23:8c:45:cf:ef:2c:6c:5b:8d:e0:0a:d9:7e: ee:83:6c:aa:73:f0:bc:f4:1c:42:84:e4:52:85:38:5a:3d:e6: e2:41:6c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JidvzsoaZTvJvGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU1NjhjMTItMzRlOC00YWQ1LWI5MzAtMmE4YzU1NzNh NzY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDYyOTQzMmEtOTE2ZS00MGZkLWFmYjQtNzk0ZjY4NDBjNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW+rbw7IPJENmcJiGe27n71+wiJLsyYI6Nd+ +MC9U/0KkqxvhR4JyKOmDQwatGFEXe3KMY8xC507Km0gBtY0KMWg4mgL0zzck/io mZVLbjc6wCmJxg3SvLc/d4htcWQ6n2JnsXckMfJAlGW0JPVNs6F4mEVnMAWy9DnR 7kJFH0Z7WHVHwAn6ZI4HUMAcSsT5pJFY0FPqN+bzQ2PFHyTtwzx2lv8yO3YUg7HU sT74bN+Y9KoVT0NDJ7yuEQAI6RASOptxx54PoVsoZVXdzSBGXxt3lYwi3FQB1Q4b LdUhhxSU78cIRprpWc2oEKU9aAcR6yXLKu4a2VFncleP/CIB1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxlS7Ssuglkr4+mPJGSJrkIDggOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2 OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThjNTU3M2E3NjQvM2RlZDZhYjAtYWE0Zi0z NDE3LWExYTEtZDc5NzVjNjM2Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGU1NjhjMTItMzRlOC00YWQ1LWI5 MzAtMmE4YzU1NzNhNzY0LzRlNTY4YzEyLTM0ZTgtNGFkNS1iOTMwLTJhOGM1NTcz YTc2NC5jcmwwHwYDVR0jBBgwFoAUEVwZj3kudkLAJfj5APk3Wb05M9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThj NTU3M2E3NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArekvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0FSfBppcZQEMYXmZJlpiAAAUTHAxr7lO7x6WhQLl5aKOq2gjfOnVkY bpanhYqU8GnUafWBRgbm7+QaCWB7gkDvxiIwV0IgX0X48wT89qTZUiLoWGi7ZVvn xyKeICB0MN0BYqo2gLmEMzQRZ5x/Zv6wmu9vqSb8CXXXMwNNjAc+MnfkZfwyUgek aH3gjJYX64MLY7NucB9IcWlCqxGnJmxwpUJBHalNC4J3a7JOkERJlSRYY/zJFzv0 Ut59H3OBgVlFM+evy8YGISLiJ4vDXB12SVrauN1Iqrqwn8K3I4xFz+8sbFuN4ArZ fu6DbKpz8Lz0HEKE5FKFOFo95uJBbL4= -----END CERTIFICATE-----Generated at Fri Sep 25 19:00:11 2026 by rpki-client