$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898fb546-acdd-35de-9070-c54de935a8b6.roa File: 898fb546-acdd-35de-9070-c54de935a8b6.roa (raw, json) Hash identifier: aBPiTu8eLpcNE1SnlFYf8aXjP39TvTMsLgMb62OaR5E= Subject key identifier: 3A:C6:C0:F9:A7:CE:59:A2:DA:0F:C0:59:82:13:6B:7D:8C:7F:50:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6A6E5A17336AFE557680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898fb546-acdd-35de-9070-c54de935a8b6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 150.195.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6a:6e:5a:17:33:6a:fe:55:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3b1f3895-a80c-4320-83a4-9ed884ab5ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:0b:85:bc:a1:c0:4a:0c:20:ad:61:18:6f: 4e:dd:7a:74:00:1d:6c:db:7e:fb:81:c0:7e:97:f5: 6d:f3:66:f7:31:b1:af:50:c8:64:40:8b:f9:df:e3: 42:fe:bd:ca:68:19:8d:d6:b5:17:b2:26:07:ec:7a: 2b:fe:fa:69:98:b3:49:c5:96:70:78:6b:8e:82:67: 79:32:11:74:80:fa:6e:ee:dc:35:1b:cd:13:88:5d: 2e:aa:ee:1d:51:02:b4:cb:51:bc:42:00:15:7c:d8: 35:7b:ea:47:0c:80:53:de:fb:6f:a8:56:ed:19:40: d3:da:bf:ce:21:e2:18:4d:0d:df:8c:bf:8e:2c:6e: d0:89:f6:49:7a:bc:1c:2d:64:ad:c1:a9:3a:67:a8: 1f:59:79:aa:71:72:be:fc:ef:89:6c:7d:93:3f:df: 37:d0:28:23:a5:53:1d:ea:ae:e0:bb:32:1c:cc:8c: 6f:7f:bc:bd:e3:39:b5:9a:c8:9e:e7:5e:90:45:e8: e0:0a:6c:40:b0:9c:15:19:f9:66:ee:25:75:64:2f: d4:30:b0:48:71:c5:7f:ef:c7:58:02:6f:d6:53:b7: 06:3a:98:98:f5:97:52:bd:ec:57:a6:0f:8f:33:0f: 08:7c:fc:e5:92:36:83:74:bb:4b:f3:cb:1e:c3:55: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C6:C0:F9:A7:CE:59:A2:DA:0F:C0:59:82:13:6B:7D:8C:7F:50:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898fb546-acdd-35de-9070-c54de935a8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:72:7f:88:27:f0:ae:8b:b7:1e:9f:ee:a7:fe:4e:ca:e5:0a: a6:a8:6d:56:db:c4:ba:a5:35:ee:e2:d9:64:a8:3a:e6:ee:53: d7:07:c8:cf:8e:80:f9:ab:88:b9:3d:5d:80:cb:aa:bb:16:ac: 99:3c:80:31:64:9f:61:79:59:22:dc:4b:2c:c4:da:fc:b8:e9: 08:78:60:01:de:35:64:b8:e9:8d:92:80:0a:ac:81:85:04:92: 86:fb:8a:55:4b:56:27:e9:87:e9:ca:ce:76:15:fb:f6:fe:0e: e5:76:aa:6a:c5:ca:82:08:08:19:00:74:6f:44:27:96:a4:39: 4d:ce:05:a4:9a:df:bc:f8:82:bb:e1:90:85:7d:41:c4:c3:56: fe:c6:08:56:8f:e8:92:b3:80:c2:a0:c3:07:d5:93:b7:68:aa: 73:9d:92:be:b9:05:4f:c4:05:a8:81:df:28:83:0a:5a:dd:b4: 16:50:ce:44:8a:f2:e6:75:bb:b9:e9:f7:1f:b4:1e:83:be:d4: 76:2c:71:b5:93:ad:ce:77:1d:ec:e2:26:a1:9d:d6:ae:b5:85: 29:ba:ba:77:38:b3:c8:ed:59:ac:f6:53:02:6d:66:df:1d:c1: e8:dc:16:60:5d:d8:3a:19:46:75:67:3f:d0:ec:b0:43:e1:ce: a7:00:f4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWpuWhczav5VdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2IxZjM4OTUtYTgwYy00MzIwLTgzYTQtOWVkODg0YWI1Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXULhbyhwEoMIK1hGG9O3Xp0AB1s2377gcB+ l/Vt82b3MbGvUMhkQIv53+NC/r3KaBmN1rUXsiYH7Hor/vppmLNJxZZweGuOgmd5 MhF0gPpu7tw1G80TiF0uqu4dUQK0y1G8QgAVfNg1e+pHDIBT3vtvqFbtGUDT2r/O IeIYTQ3fjL+OLG7QifZJerwcLWStwak6Z6gfWXmqcXK+/O+JbH2TP9830CgjpVMd 6q7guzIczIxvf7y94zm1msie516QRejgCmxAsJwVGflm7iV1ZC/UMLBIccV/78dY Am/WU7cGOpiY9ZdSvexXpg+PMw8IfPzlkjaDdLtL88sew1WC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrGwPmnzlmi2g/AWYITa32Mf1AYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODk4ZmI1NDYtYWNkZC0z NWRlLTkwNzAtYzU0ZGU5MzVhOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRyf4gn8K6Ltx6f7qf+TsrlCqaobVbbxLqlNe7i2WSoOubuU9cHyM+O gPmriLk9XYDLqrsWrJk8gDFkn2F5WSLcSyzE2vy46Qh4YAHeNWS46Y2SgAqsgYUE kob7ilVLVifph+nKznYV+/b+DuV2qmrFyoIICBkAdG9EJ5akOU3OBaSa37z4grvh kIV9QcTDVv7GCFaP6JKzgMKgwwfVk7doqnOdkr65BU/EBaiB3yiDClrdtBZQzkSK 8uZ1u7np9x+0HoO+1HYscbWTrc53HeziJqGd1q61hSm6unc4s8jtWaz2UwJtZt8d wejcFmBd2DoZRnVnP9DssEPhzqcA9Bw= -----END CERTIFICATE-----Generated at Sat Sep 26 16:27:53 2026 by rpki-client