$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa File: 495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa (raw, json) Hash identifier: 67xBbmO5lMY/hMG8bYVE4+FTjrovYZ7gpW6cUHiS3yQ= Subject key identifier: 78:8E:30:48:F1:B1:92:43:FF:35:9A:4C:CC:B8:67:81:26:31:8B:65 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F374D1F5ADEDF342B2E89D160 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 173.199.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1f:5a:de:df:34:2b:2e:89:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=45bd35a4-dadf-4721-b681-44b694fd6a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:e5:29:c7:11:58:da:0a:f8:17:39:67:8f: 9f:ed:a3:b5:d9:c7:e8:7a:bf:ea:a8:7d:89:41:44: 94:f6:a0:7c:85:4f:7a:b0:f1:1d:db:01:49:ae:c2: ad:42:02:22:10:93:8d:52:e7:e1:5d:fe:3c:22:fb: d7:d4:6a:d8:3b:65:5c:f9:fc:fc:bf:3e:3d:0d:52: d4:1a:52:f9:d0:7f:c3:f5:c6:3f:92:26:50:fa:2c: 25:d7:27:21:53:c1:cf:de:01:ce:18:1e:1c:c6:25: 07:49:b3:99:0d:f0:f3:80:8b:71:07:65:f3:68:32: 2b:91:bc:69:61:d3:9d:09:68:28:e1:1b:f0:93:85: ab:90:50:9d:ff:6e:43:65:e3:44:ca:e0:35:f5:79: 26:ba:48:7e:c6:d8:35:61:d0:8c:43:88:79:b0:a1: a8:13:ec:f9:66:94:c5:0a:14:0f:eb:80:fd:0e:ed: cc:f4:94:19:d6:68:fa:d9:ea:75:79:4d:20:d9:21: 6f:be:28:e2:6e:d9:f7:aa:50:ad:5d:66:b5:7a:6f: 35:34:17:6f:7f:2b:39:b1:12:cc:2c:e5:e0:40:c7: 88:28:0f:b9:d0:5f:e4:74:c8:0e:48:d2:a6:75:3f: c5:b1:a6:9c:62:c0:be:75:c5:0b:8f:4f:cd:30:db: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:30:48:F1:B1:92:43:FF:35:9A:4C:CC:B8:67:81:26:31:8B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:32:f5:73:f6:60:57:03:0f:ec:55:ec:45:26:e3:c7:fc:49: 47:d5:56:f0:ec:0f:93:df:cb:7e:4d:77:bd:89:17:a5:ba:7e: c1:22:05:9b:84:f6:18:af:0e:19:fc:e2:78:cf:80:97:ef:3b: 64:01:2e:01:7f:fc:33:12:eb:9b:c1:08:44:65:9a:76:4f:1a: 88:38:b4:ac:48:ef:6a:55:f9:4c:42:fc:5f:d9:2a:2d:5e:5d: 1a:0d:9d:b9:2e:ef:5b:e3:5c:6e:41:05:aa:4e:72:b8:47:3c: 78:dc:5b:b8:c1:ac:1d:9c:41:e6:86:83:1c:3c:55:2a:b1:e7: d8:9a:fe:cd:38:99:ed:cb:cf:26:0e:68:c5:b7:eb:f4:ce:19: 1a:a0:12:a1:58:ee:92:76:48:a3:5a:9d:2f:fb:82:a6:3c:52: a8:26:bf:cd:f3:71:0c:af:be:68:68:5f:20:80:42:98:5e:1a: 1f:79:a5:b0:60:10:5b:22:2c:a4:91:76:2b:1a:ae:c5:8e:0c: c2:f5:30:6e:0b:0c:7e:ea:7f:64:84:9e:67:bd:dd:63:7a:15: cb:55:26:f7:47:1d:c5:89:8d:41:c2:31:8d:24:fe:90:07:22: c3:ec:c0:4f:46:bf:bb:fd:86:d8:72:91:9c:33:2a:d6:cf:e6: 7e:b1:be:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TR9a3t80Ky6J0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NDViZDM1YTQtZGFkZi00NzIxLWI2ODEtNDRiNjk0ZmQ2YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprHlKccRWNoK+Bc5Z4+f7aO12cfoer/qqH2J QUSU9qB8hU96sPEd2wFJrsKtQgIiEJONUufhXf48IvvX1GrYO2Vc+fz8vz49DVLU GlL50H/D9cY/kiZQ+iwl1ychU8HP3gHOGB4cxiUHSbOZDfDzgItxB2XzaDIrkbxp YdOdCWgo4Rvwk4WrkFCd/25DZeNEyuA19Xkmukh+xtg1YdCMQ4h5sKGoE+z5ZpTF ChQP64D9Du3M9JQZ1mj62ep1eU0g2SFvvijibtn3qlCtXWa1em81NBdvfys5sRLM LOXgQMeIKA+50F/kdMgOSNKmdT/FsaacYsC+dcULj0/NMNs56QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiOMEjxsZJD/zWaTMy4Z4EmMYtlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDk1Njk1YmQtMmE1Mi0z MmNjLWFhMDktYTBkYzliMWYyYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsy9XP2YFcDD+xV7EUm48f8SUfVVvDsD5Pfy35Nd72JF6W6fsEiBZuE 9hivDhn84njPgJfvO2QBLgF//DMS65vBCERlmnZPGog4tKxI72pV+UxC/F/ZKi1e XRoNnbku71vjXG5BBapOcrhHPHjcW7jBrB2cQeaGgxw8VSqx59ia/s04me3LzyYO aMW36/TOGRqgEqFY7pJ2SKNanS/7gqY8Uqgmv83zcQyvvmhoXyCAQpheGh95pbBg EFsiLKSRdisarsWODML1MG4LDH7qf2SEnme93WN6FctVJvdHHcWJjUHCMY0k/pAH IsPswE9Gv7v9hthykZwzKtbP5n6xvkM= -----END CERTIFICATE-----Generated at Sat Oct 3 13:21:21 2026 by rpki-client