$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: 39dYH7VtksGd72ysyw9UOrkSJVMFlwIkYH+jbY+aGn8= Subject key identifier: 7B:FA:AA:0E:9F:75:D3:B1:31:2B:E7:33:01:31:FE:98:38:2B:42:C3 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584EFF7774D25D1A24E805787470 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:74:d2:5d:1a:24:e8:05:78:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=c09b1e3b-bf58-4a40-8c46-5b4f523d262f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:ce:70:0f:92:0d:3c:74:10:c7:ea:aa:f6: 39:67:55:25:e6:33:09:89:92:0b:db:38:f9:c5:4c: 76:f2:cc:db:ad:69:88:c7:5c:a0:fa:4f:fb:ba:52: b9:bb:df:0c:82:18:b6:5a:3b:f8:9f:5b:5b:a3:27: c1:8e:c5:8d:8e:4c:2f:67:a8:32:7e:96:03:90:16: ba:1b:1a:82:cd:77:b7:81:9e:26:05:d1:b2:38:3b: c3:ee:59:6e:b0:94:95:df:78:ac:43:aa:0e:cb:ea: 84:b2:36:de:09:1d:1f:8f:b6:e3:16:86:c1:d2:90: a4:5d:b3:6f:b3:b8:43:32:65:49:6f:f3:72:f9:37: 6b:66:c6:50:6b:f9:86:6e:9f:b4:ec:03:df:87:69: b1:23:82:06:31:0b:2c:6d:18:b8:5a:2f:09:ed:cb: 05:75:52:bf:0e:a8:1b:d5:46:6e:f6:2f:8e:6a:50: 8d:97:69:2e:ee:c8:0e:95:ee:a7:51:11:15:4f:2e: b8:bd:d0:83:c3:94:f5:46:d3:0e:a6:f2:9c:2e:17: 27:a8:84:24:4b:8a:0a:36:95:3f:29:1f:a9:06:e0: 45:03:7a:ff:d3:f3:d7:c7:39:f1:71:85:83:d2:f8: bc:2b:31:84:ff:a4:4b:6b:fa:41:d3:ff:d1:3e:14: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:AA:0E:9F:75:D3:B1:31:2B:E7:33:01:31:FE:98:38:2B:42:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7b:c6:69:55:92:a6:a4:e3:65:51:0d:73:03:c8:ff:a5:20: bd:9f:0e:69:25:b7:64:27:ed:9b:05:36:91:b1:aa:ed:1a:26: 70:2f:c0:64:2f:f8:6d:cf:51:62:be:d9:eb:5d:ba:a9:87:ba: 0c:45:4f:b0:6f:47:74:77:5f:66:69:d0:90:b4:1e:f1:18:58: 46:ea:f2:0e:98:10:5e:20:88:b0:8b:04:b7:65:16:86:f4:76: 56:f8:6d:d5:6f:ca:29:3f:72:f5:f8:2e:a1:fb:c6:af:85:e4: d8:e0:c9:83:df:ec:25:d2:48:20:80:b6:29:ea:1c:4a:c9:e1: 13:df:35:75:35:9a:40:22:ae:1d:25:9d:9c:34:b7:c6:92:66: 77:66:eb:33:b3:5f:3a:5f:8a:12:4b:2b:c9:a4:be:1f:e8:b3: 9f:b9:e1:68:c0:aa:d4:63:12:82:36:71:c3:84:bc:8d:5a:cd: fc:77:3d:06:12:e2:12:83:84:0f:a9:9b:5a:ad:b9:d3:01:d0: f2:11:c6:66:60:43:04:70:1f:86:ca:b1:d9:3b:f6:14:43:ca: 51:c9:af:4d:b8:ff:0c:b6:41:df:0b:3c:38:49:ea:68:c0:c3: d3:1d:72:d5:3f:91:99:53:ab:f1:8e:d2:d4:0f:bd:af:c6:42: 7b:28:9a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3TSXRok6AV4dHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YzA5YjFlM2ItYmY1OC00YTQwLThjNDYtNWI0ZjUyM2QyNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SfOcA+SDTx0EMfqqvY5Z1Ul5jMJiZIL2zj5 xUx28szbrWmIx1yg+k/7ulK5u98Mghi2Wjv4n1tboyfBjsWNjkwvZ6gyfpYDkBa6 GxqCzXe3gZ4mBdGyODvD7llusJSV33isQ6oOy+qEsjbeCR0fj7bjFobB0pCkXbNv s7hDMmVJb/Ny+TdrZsZQa/mGbp+07APfh2mxI4IGMQssbRi4Wi8J7csFdVK/Dqgb 1UZu9i+OalCNl2ku7sgOle6nUREVTy64vdCDw5T1RtMOpvKcLhcnqIQkS4oKNpU/ KR+pBuBFA3r/0/PXxznxcYWD0vi8KzGE/6RLa/pB0//RPhTPSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv6qg6fddOxMSvnMwEx/pg4K0LDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV7xmlVkqak42VRDXMDyP+lIL2fDmklt2Qn7ZsFNpGxqu0aJnAvwGQv +G3PUWK+2etduqmHugxFT7BvR3R3X2Zp0JC0HvEYWEbq8g6YEF4giLCLBLdlFob0 dlb4bdVvyik/cvX4LqH7xq+F5NjgyYPf7CXSSCCAtinqHErJ4RPfNXU1mkAirh0l nZw0t8aSZndm6zOzXzpfihJLK8mkvh/os5+54WjAqtRjEoI2ccOEvI1azfx3PQYS 4hKDhA+pm1qtudMB0PIRxmZgQwRwH4bKsdk79hRDylHJr024/wy2Qd8LPDhJ6mjA w9MdctU/kZlTq/GO0tQPva/GQnsomig= -----END CERTIFICATE-----Generated at Tue Sep 22 14:52:33 2026 by rpki-client