$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/0848cd70-11d3-39e7-a700-3a5f83ef545c.roa File: 0848cd70-11d3-39e7-a700-3a5f83ef545c.roa (raw, json) Hash identifier: 9/4JHbq0qIi/3Mn0eS9pZqe0pB46dFO4UCsgX2bQ0YA= Subject key identifier: 41:F4:F1:32:E3:33:86:8C:2F:47:17:7D:0C:56:48:1C:2C:10:1B:21 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584F3A17CB23FEC8135D56DF8580 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/0848cd70-11d3-39e7-a700-3a5f83ef545c.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 12312 IP address blocks: 173.213.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:23:fe:c8:13:5d:56:df:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=b082176b-482a-4ad7-8dc7-2af00c1e9672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:80:31:eb:bb:79:cb:c6:52:af:8a:88:48: 08:10:46:1a:af:de:2f:e5:d2:4a:19:7f:dd:a7:9c: da:e4:83:b5:e5:44:85:5a:07:9b:b7:77:67:02:9b: 98:a9:be:57:a0:6e:78:77:af:71:7e:6d:83:17:31: ad:a7:0a:d7:0d:ee:53:cb:28:ec:70:0b:c8:6a:05: 0e:0c:85:83:b1:66:2b:18:f7:d7:79:24:76:21:8f: 41:60:fb:0b:bc:39:56:bc:02:88:6c:bb:96:d0:54: ea:a3:b8:68:97:41:25:23:c4:b0:8f:2c:c5:64:44: 64:23:98:a2:c6:9d:09:a4:20:76:68:0d:2f:1b:bf: 86:be:71:74:df:40:1c:4e:7f:8f:95:ef:bd:ab:25: 2f:08:4b:54:fc:ea:76:69:8f:c1:c0:eb:cf:f2:35: 3b:3b:57:98:d1:31:a8:0c:2c:27:2f:02:07:c2:05: cd:50:10:e7:40:9b:b9:d5:7e:39:1f:a2:14:5f:30: ed:2e:43:81:95:3d:00:be:15:18:30:65:1f:b3:0e: 23:d7:22:07:77:ba:41:72:df:b9:5a:43:48:e4:2c: 19:34:0f:cc:51:48:f7:d3:e4:94:ef:30:db:ad:50: f0:e3:66:15:a4:f0:56:b8:3b:2f:dd:f8:f9:74:c6: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:F1:32:E3:33:86:8C:2F:47:17:7D:0C:56:48:1C:2C:10:1B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/0848cd70-11d3-39e7-a700-3a5f83ef545c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0c:b4:71:d7:48:95:cb:2a:4a:1a:a4:ca:81:36:54:b5:4b: 2d:9e:e7:54:0c:07:57:57:4a:dc:91:d4:6c:c7:f7:a5:aa:76: f3:7f:b6:c0:58:76:d8:a9:1d:44:75:4b:5d:ed:18:c5:89:40: 2d:a1:d1:f4:34:dc:ad:2e:a8:e7:b7:b8:a3:e0:7f:24:e8:b5: b9:25:28:77:f2:44:31:8f:f4:a3:f9:35:5d:ed:d3:5b:72:a2: 8b:42:a6:ea:6e:f4:30:f7:fd:06:78:b5:36:3c:a9:84:4c:b4: b2:f6:4d:e1:70:a9:f7:d8:99:e7:de:51:b9:56:c1:a7:92:89: f1:ac:5a:af:d1:f5:a5:b2:74:28:c6:e2:31:20:11:67:39:bd: 13:ee:b8:12:25:e5:cb:1b:6f:c4:1e:96:37:9c:03:cb:75:f3: 40:ca:28:4c:85:b6:9e:e9:87:ae:60:d9:d2:00:a1:b8:8c:60: b8:54:0b:07:ef:88:21:ca:c1:2b:bb:75:8a:35:df:89:33:57: a6:cc:f3:be:9a:0f:3c:99:f9:75:8e:fc:f3:bb:66:6b:d8:13: 1e:72:67:b2:0e:9a:1d:75:43:d5:18:88:df:41:32:15:5a:8a: ab:cc:2b:cd:03:62:b5:bd:f3:a7:88:0d:fd:64:23:d7:11:72: 68:e6:0a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8sj/sgTXVbfhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YjA4MjE3NmItNDgyYS00YWQ3LThkYzctMmFmMDBjMWU5NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdaAMeu7ecvGUq+KiEgIEEYar94v5dJKGX/d p5za5IO15USFWgebt3dnApuYqb5XoG54d69xfm2DFzGtpwrXDe5TyyjscAvIagUO DIWDsWYrGPfXeSR2IY9BYPsLvDlWvAKIbLuW0FTqo7hol0ElI8SwjyzFZERkI5ii xp0JpCB2aA0vG7+GvnF030AcTn+Ple+9qyUvCEtU/Op2aY/BwOvP8jU7O1eY0TGo DCwnLwIHwgXNUBDnQJu51X45H6IUXzDtLkOBlT0AvhUYMGUfsw4j1yIHd7pBct+5 WkNI5CwZNA/MUUj30+SU7zDbrVDw42YVpPBWuDsv3fj5dMY9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH08TLjM4aML0cXfQxWSBwsEBshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvMDg0OGNkNzAtMTFkMy0z OWU3LWE3MDAtM2E1ZjgzZWY1NDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMMtHHXSJXLKkoapMqBNlS1Sy2e51QMB1dXStyR1GzH96WqdvN/tsBY dtipHUR1S13tGMWJQC2h0fQ03K0uqOe3uKPgfyTotbklKHfyRDGP9KP5NV3t01ty ootCpupu9DD3/QZ4tTY8qYRMtLL2TeFwqffYmefeUblWwaeSifGsWq/R9aWydCjG 4jEgEWc5vRPuuBIl5csbb8QeljecA8t180DKKEyFtp7ph65g2dIAobiMYLhUCwfv iCHKwSu7dYo134kzV6bM876aDzyZ+XWO/PO7ZmvYEx5yZ7IOmh11Q9UYiN9BMhVa iqvMK80DYrW986eIDf1kI9cRcmjmCs4= -----END CERTIFICATE-----Generated at Tue Sep 22 10:25:36 2026 by rpki-client