$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa File: a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa (raw, json) Hash identifier: Ask+5r6F6l2YQrlNqwyT55NB+wtEAsGBt0dm9ejUAcw= Subject key identifier: FB:F8:2D:02:84:D8:CD:40:E2:2E:7F:8F:BD:B7:80:90:1E:4B:68:21 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F1CC79FE42375FA51DFACEA60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 173.199.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9f:e4:23:75:fa:51:df:ac:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=3cca919e-f0e1-40b7-bffb-ff81ec13083e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:a9:70:1c:fb:31:fd:7c:73:44:ea:a4:76: e8:b3:df:7d:3e:7c:c5:26:e2:4f:72:9f:37:6c:b2: 33:a1:87:7e:e4:78:c3:d2:b4:ae:8b:9f:5e:5b:40: dc:dc:fd:a4:62:75:5c:1c:e0:8a:06:95:38:9a:13: 7e:2c:e7:ca:fa:8f:e3:4c:3a:5b:6b:54:1a:13:bd: bf:3c:7c:4a:cf:bd:e3:df:27:85:7a:69:d5:5e:c4: 23:63:61:46:25:37:ed:81:05:56:14:a6:8f:ca:b8: b2:96:59:8c:e6:a1:a0:c5:8e:6d:6f:d0:3b:3c:c4: cb:91:4f:a3:39:e6:64:d7:d2:ee:6b:f8:64:43:6f: 04:9f:3b:fa:a6:b4:be:31:07:4e:78:d5:43:01:b0: 1e:70:90:87:ac:e4:ea:36:e4:1b:58:1d:e2:e0:b2: b2:e9:a7:37:ab:0c:15:a6:4c:fb:66:2c:47:3d:e1: 1c:51:61:2e:1a:fa:3d:b0:d3:8f:0c:34:22:ce:0a: 95:b5:04:78:85:93:c8:4c:ba:88:ef:d2:29:1a:81: b7:fb:02:d8:49:49:e2:44:d3:9f:03:77:73:25:ea: 2b:ac:19:da:ea:9c:df:66:9d:15:96:5c:75:ce:a1: 3e:87:ae:28:be:dd:38:f0:2f:83:31:d4:29:32:db: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:2D:02:84:D8:CD:40:E2:2E:7F:8F:BD:B7:80:90:1E:4B:68:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:dd:ca:ed:74:f2:7d:6c:7b:55:d7:56:28:55:fa:8c:e0:94: f6:25:0c:2b:02:9a:78:4c:4b:ae:f3:4c:00:cb:e3:71:50:c7: 87:97:0d:67:a0:b4:1d:3a:2e:44:10:e7:0f:bb:db:38:ff:21: 0d:ec:ab:42:67:f8:d9:7b:de:7b:d6:72:24:78:fe:d0:d7:7e: 0f:56:ac:66:5f:ec:1b:48:3e:1b:48:6f:33:7f:d7:9f:40:0e: 28:ba:8b:c5:2f:76:0e:45:0e:d1:fe:8d:aa:ce:56:74:84:c9: 62:69:50:af:b8:b1:71:05:39:38:1f:10:9a:15:1f:75:69:5f: 83:9f:9a:7b:fe:03:63:07:06:42:b9:24:0f:44:37:4b:a5:4a: 26:45:3e:ec:8b:74:d7:d2:06:3d:08:bc:b7:d0:39:1b:96:e1: cc:bc:0f:e3:fc:fd:81:8f:9a:0f:ef:d9:6c:5f:f3:74:20:a3: 53:8c:b8:d4:d2:6a:b5:3e:0e:81:87:58:0d:5e:a3:c4:cf:fd: d4:3f:0d:b5:c0:cf:01:b0:f3:7d:8e:3a:2d:c7:0b:39:88:a3: 0a:97:c7:ba:61:0f:0a:d7:4b:45:4a:0c:f4:58:8d:9d:c1:16: 81:24:7b:c5:74:ab:07:8b:eb:5b:41:b1:fc:f9:c0:09:0f:57: 89:df:6a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5/kI3X6Ud+s6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk M2NjYTkxOWUtZjBlMS00MGI3LWJmZmItZmY4MWVjMTMwODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssGpcBz7Mf18c0TqpHbos999PnzFJuJPcp83 bLIzoYd+5HjD0rSui59eW0Dc3P2kYnVcHOCKBpU4mhN+LOfK+o/jTDpba1QaE72/ PHxKz73j3yeFemnVXsQjY2FGJTftgQVWFKaPyriyllmM5qGgxY5tb9A7PMTLkU+j OeZk19Lua/hkQ28Enzv6prS+MQdOeNVDAbAecJCHrOTqNuQbWB3i4LKy6ac3qwwV pkz7ZixHPeEcUWEuGvo9sNOPDDQizgqVtQR4hZPITLqI79IpGoG3+wLYSUniRNOf A3dzJeorrBna6pzfZp0Vllx1zqE+h64ovt048C+DMdQpMtuv8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv4LQKE2M1A4i5/j723gJAeS2ghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTNjNDdhNjUtZjEwOC0z MzBlLWExZDQtZDVhMjZhMjYwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrccwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzdyu108n1se1XXVihV+ozglPYlDCsCmnhMS67zTADL43FQx4eXDWeg tB06LkQQ5w+72zj/IQ3sq0Jn+Nl73nvWciR4/tDXfg9WrGZf7BtIPhtIbzN/159A Dii6i8Uvdg5FDtH+jarOVnSEyWJpUK+4sXEFOTgfEJoVH3VpX4Ofmnv+A2MHBkK5 JA9EN0ulSiZFPuyLdNfSBj0IvLfQORuW4cy8D+P8/YGPmg/v2Wxf83Qgo1OMuNTS arU+DoGHWA1eo8TP/dQ/DbXAzwGw832OOi3HCzmIowqXx7phDwrXS0VKDPRYjZ3B FoEke8V0qweL61tBsfz5wAkPV4nfaoU= -----END CERTIFICATE-----Generated at Sun Oct 11 23:50:19 2026 by rpki-client