$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b31443e4-a745-37d0-9719-cab1a31b11ab.roa File: b31443e4-a745-37d0-9719-cab1a31b11ab.roa (raw, json) Hash identifier: XpaLLe0H4qme7L3Je3Ncsx2ucgpkFXsof8BW0zajVwM= Subject key identifier: 21:28:9C:E9:E2:C0:FA:66:25:AC:B5:11:6A:F1:AB:47:79:8B:4E:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EEA876510CA39C51751905700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b31443e4-a745-37d0-9719-cab1a31b11ab.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16625 IP address blocks: 72.246.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:65:10:ca:39:c5:17:51:90:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=b9e35df3-6bb6-4d9c-863c-768912b32aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:e3:5b:55:ae:e9:66:b7:e0:77:c7:2c:98: 18:b1:66:ec:52:eb:54:89:3a:37:d1:61:6a:9d:f2: 70:a2:83:7f:93:ff:81:20:ca:b2:d4:07:dd:08:1a: 6b:25:67:44:70:e0:57:e4:24:92:b7:13:5a:4c:fc: ba:e6:64:56:7d:9f:0a:a0:27:2a:7f:d2:a8:02:16: 66:f6:e9:25:3a:65:46:fd:bc:d9:b6:6d:c2:1c:77: ad:6d:d0:a0:cd:d8:a5:aa:de:f6:b3:96:af:14:91: 36:f0:3a:95:34:8f:eb:5b:8a:20:fb:48:68:59:75: a9:6f:b0:0a:0a:91:3a:ea:e1:14:37:51:e4:76:b8: a3:e8:cf:8b:f7:ef:9d:ce:d3:d9:81:f0:cc:d0:49: 5d:2b:ab:39:bc:6b:ba:64:c0:5b:53:79:13:cf:64: 57:ca:0f:2e:b9:54:45:e1:16:02:b7:fc:64:13:75: 1c:4b:5d:e7:61:5a:d0:f1:ff:04:f9:c6:72:f9:3d: cd:9e:15:77:67:ac:9e:7b:06:69:96:e8:8e:3b:2c: 8f:9d:4e:28:dd:ff:3a:a6:2e:81:65:82:12:56:02: fc:b0:d1:53:ea:4a:4f:23:32:0e:28:16:cc:b6:e8: 62:4a:82:d2:cf:6c:f6:ca:16:29:63:19:15:d1:80: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:9C:E9:E2:C0:FA:66:25:AC:B5:11:6A:F1:AB:47:79:8B:4E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b31443e4-a745-37d0-9719-cab1a31b11ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:80:2d:24:5a:08:95:a3:35:46:b9:62:7d:d3:56:1a:7e:6e: bb:70:72:31:b4:23:16:8b:92:13:0c:da:1f:77:cd:5b:68:7c: d7:6f:ff:3b:bc:c1:d0:0c:38:cb:43:78:c2:8e:85:a8:73:5c: b9:bd:bd:12:6b:58:36:3d:f6:b3:ba:60:2e:b7:ae:ce:4e:4a: 5a:8a:57:2c:7b:41:58:ac:8f:84:1c:2b:be:e0:e1:65:7f:94: 31:e6:4a:a1:f1:19:d2:75:3d:cf:88:17:4d:18:ef:e6:57:05: cf:11:cd:f7:5b:fa:b5:72:2d:0e:e2:30:18:da:06:5a:8f:62: b1:9b:2e:6a:d7:6d:eb:d5:d6:93:d6:f7:21:0d:9c:71:eb:0b: 46:a4:ec:97:2e:7a:bc:8f:1f:18:77:28:af:6c:28:4d:bd:f0: 59:3d:ef:4c:f9:d5:81:25:69:0c:c9:1f:ea:87:85:dd:0d:0c: 8a:0e:a9:e0:3f:94:64:d8:f8:78:e0:87:59:6f:81:c4:0b:28: 7c:a5:19:97:85:d6:dd:ba:cb:de:f7:d4:00:18:11:6f:a5:3a: 49:a7:96:52:a7:7c:c4:a6:38:92:89:ea:b4:da:f4:a8:ed:9b: f1:eb:d6:f6:4f:b1:cf:5c:4f:b1:05:9b:a0:1c:bc:b6:c1:cc: cb:ab:de:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2UQyjnFF1GQVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjllMzVkZjMtNmJiNi00ZDljLTg2M2MtNzY4OTEyYjMyYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTjW1Wu6Wa34HfHLJgYsWbsUutUiTo30WFq nfJwooN/k/+BIMqy1AfdCBprJWdEcOBX5CSStxNaTPy65mRWfZ8KoCcqf9KoAhZm 9uklOmVG/bzZtm3CHHetbdCgzdilqt72s5avFJE28DqVNI/rW4og+0hoWXWpb7AK CpE66uEUN1Hkdrij6M+L9++dztPZgfDM0EldK6s5vGu6ZMBbU3kTz2RXyg8uuVRF 4RYCt/xkE3UcS13nYVrQ8f8E+cZy+T3NnhV3Z6yeewZpluiOOyyPnU4o3f86pi6B ZYISVgL8sNFT6kpPIzIOKBbMtuhiSoLSz2z2yhYpYxkV0YARTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEonOniwPpmJay1EWrxq0d5i04aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjMxNDQzZTQtYTc0NS0z N2QwLTk3MTktY2FiMWEzMWIxMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKALSRaCJWjNUa5Yn3TVhp+brtwcjG0IxaLkhMM2h93zVtofNdv/zu8 wdAMOMtDeMKOhahzXLm9vRJrWDY99rO6YC63rs5OSlqKVyx7QVisj4QcK77g4WV/ lDHmSqHxGdJ1Pc+IF00Y7+ZXBc8Rzfdb+rVyLQ7iMBjaBlqPYrGbLmrXbevV1pPW 9yENnHHrC0ak7JcueryPHxh3KK9sKE298Fk970z51YElaQzJH+qHhd0NDIoOqeA/ lGTY+Hjgh1lvgcQLKHylGZeF1t26y9731AAYEW+lOkmnllKnfMSmOJKJ6rTa9Kjt m/Hr1vZPsc9cT7EFm6AcvLbBzMur3gM= -----END CERTIFICATE-----Generated at Mon Sep 28 11:20:46 2026 by rpki-client