$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa File: 376815db-2a35-3f76-bafa-0b1653000f0b.roa (raw, json) Hash identifier: 1Erc3Zj8nAUEK+8R3uepsEuzSv2C9faItjLhxoYPXPs= Subject key identifier: 00:6A:07:67:86:FB:54:7A:9B:F3:39:C1:34:D7:A0:F8:4A:8A:2B:7E Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584F6292DAE3B30FAC8654790C80 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 50304 IP address blocks: 172.102.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:da:e3:b3:0f:ac:86:54:79:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2e455d4f-48b8-458a-89c9-021245ca55ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:7f:a4:ef:3b:64:8e:b7:51:db:35:08:f3: f4:cd:f0:1e:5e:0f:6a:fe:0a:7e:0e:ca:2f:a2:89: 31:2b:40:4c:71:1b:f3:d0:30:81:fa:e1:0a:e1:22: d3:f3:45:df:52:7f:71:b6:d4:cb:99:d3:28:18:9e: 06:cc:da:50:1e:95:e5:db:aa:68:27:2a:bf:93:51: 41:f7:33:a6:0b:af:a7:f9:3e:c0:cd:38:48:22:89: bc:db:5f:9e:3f:49:00:6d:cb:ea:4b:01:4b:8e:65: 10:5e:3d:d3:19:a5:bb:ec:02:31:03:1b:1c:62:24: 94:f8:cb:0d:a3:b0:03:be:07:dc:ca:9f:64:b1:28: 96:57:4e:b8:c3:8f:e1:65:7b:e1:7e:09:54:12:8e: 81:2c:2d:08:e8:95:6a:b9:ce:94:4d:85:3d:15:3a: 1b:af:8a:07:9f:4e:88:6d:b5:6b:0d:74:79:74:ea: 57:01:e0:2f:5d:39:2e:92:e9:ae:ac:02:b5:19:c9: 4f:ed:2d:83:50:92:d2:8f:3b:78:a3:c2:ec:92:b0: cf:04:a1:fd:97:b0:a7:65:72:49:ce:ce:55:53:a1: 58:41:ff:de:20:83:7f:fd:0e:dc:e3:00:8b:80:68: 28:2c:11:85:d5:c4:b2:e9:c9:6c:cc:b7:b1:eb:1a: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:07:67:86:FB:54:7A:9B:F3:39:C1:34:D7:A0:F8:4A:8A:2B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3a:64:ee:b7:36:f8:fd:dc:69:c8:b0:29:01:72:b0:92:9c: ed:54:1c:b8:78:39:c6:2c:02:0f:80:e3:b0:43:f1:54:01:32: 5c:82:2a:a9:b3:17:3f:fb:f0:50:f4:dc:6e:5f:0c:97:00:12: 22:11:7f:b7:5e:fc:29:5a:80:43:b1:5b:43:31:2b:34:e1:65: 7e:17:14:73:3f:01:a3:f6:25:90:08:31:a0:e9:5e:63:93:c5: a9:e4:93:bd:8a:b1:69:80:e4:04:46:33:9f:b6:17:7e:57:84: f5:2a:61:e9:9a:85:65:e5:ce:63:d2:c0:09:74:6b:14:2e:5d: da:bb:6c:99:5f:28:f7:16:3c:19:81:cd:f6:f6:c1:5c:24:ea: 6a:dd:97:ba:4a:49:af:00:83:e5:46:90:1b:23:38:8f:75:b9: 6e:49:d3:f8:b1:5e:d9:f7:1c:09:12:58:96:d3:b8:4d:e7:18: 2a:f4:57:fe:6c:d3:c9:96:28:33:45:7a:7f:f2:d2:d5:1f:ee: 09:79:0d:b6:37:2e:85:17:0e:7d:27:41:63:bb:5e:81:9c:ed: 4a:30:f6:62:64:c9:de:46:77:98:12:3a:58:39:de:9d:36:04: c4:2f:3c:47:39:92:ca:d2:43:f7:68:97:96:13:ba:b4:10:6e: ff:39:bd:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktrjsw+shlR5DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmU0NTVkNGYtNDhiOC00NThhLTg5YzktMDIxMjQ1Y2E1NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVt/pO87ZI63Uds1CPP0zfAeXg9q/gp+Dsov ookxK0BMcRvz0DCB+uEK4SLT80XfUn9xttTLmdMoGJ4GzNpQHpXl26poJyq/k1FB 9zOmC6+n+T7AzThIIom821+eP0kAbcvqSwFLjmUQXj3TGaW77AIxAxscYiSU+MsN o7ADvgfcyp9ksSiWV064w4/hZXvhfglUEo6BLC0I6JVquc6UTYU9FTobr4oHn06I bbVrDXR5dOpXAeAvXTkukumurAK1GclP7S2DUJLSjzt4o8LskrDPBKH9l7CnZXJJ zs5VU6FYQf/eIIN//Q7c4wCLgGgoLBGF1cSy6clszLex6xoYFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABqB2eG+1R6m/M5wTTXoPhKiit+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMzc2ODE1ZGItMmEzNS0z Zjc2LWJhZmEtMGIxNjUzMDAwZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ06ZO63Nvj93GnIsCkBcrCSnO1UHLh4OcYsAg+A47BD8VQBMlyCKqmz Fz/78FD03G5fDJcAEiIRf7de/ClagEOxW0MxKzThZX4XFHM/AaP2JZAIMaDpXmOT xankk72KsWmA5ARGM5+2F35XhPUqYemahWXlzmPSwAl0axQuXdq7bJlfKPcWPBmB zfb2wVwk6mrdl7pKSa8Ag+VGkBsjOI91uW5J0/ixXtn3HAkSWJbTuE3nGCr0V/5s 08mWKDNFen/y0tUf7gl5DbY3LoUXDn0nQWO7XoGc7Uow9mJkyd5Gd5gSOlg53p02 BMQvPEc5ksrSQ/dol5YTurQQbv85vRE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:35:16 2026 by rpki-client