$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/cf3b7b9e-cbd7-300c-b7c0-f8d99e3e3223.roa File: cf3b7b9e-cbd7-300c-b7c0-f8d99e3e3223.roa (raw, json) Hash identifier: AhXz0ctaXKgO4uoEKqu1GgnEZ6fT8X97YzXeeMCXuIs= Subject key identifier: 12:86:9E:BF:7E:14:B2:E1:8E:27:89:40:B3:BE:E9:34:6D:C8:A9:A2 Certificate issuer: /CN=6172d736-c698-4515-a8d5-e8f599b88b89 Certificate serial: 010D0C9F4328584F35E7C18CC1014EBE63044140 Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/cf3b7b9e-cbd7-300c-b7c0-f8d99e3e3223.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 55108 IP address blocks: 64.239.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c1:8c:c1:01:4e:be:63:04:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=c551dc3c-d6d5-4389-bf3e-95ee86613ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:3e:16:2a:c2:73:12:36:15:97:b5:6c:e7: 90:db:0e:6d:f4:29:c8:f2:d7:7a:92:3f:68:54:e4: e7:b3:28:2e:49:16:60:c6:fc:f4:37:6e:9b:68:89: cf:22:e0:36:e8:b9:0d:0d:d9:51:ca:78:62:6e:dc: 9c:6d:c6:84:f8:a8:20:82:7a:b0:a0:8f:8f:94:f1: 30:f0:dd:ee:47:56:5d:5f:87:4c:ab:23:cb:7a:6c: c8:41:60:cc:17:97:67:a3:c5:d2:33:04:23:20:ae: ee:92:b0:59:51:0c:d6:dc:12:4b:26:a0:b6:1e:cf: 23:3c:01:38:c4:a7:b6:a6:94:96:26:07:8a:cc:82: 5a:b0:24:8a:f9:ad:26:2b:40:84:2c:7a:f8:af:61: fa:62:6a:ea:b4:1f:66:97:39:a5:d7:6f:ac:d5:ca: 09:e7:e6:d7:4a:f2:75:9a:10:74:f3:4c:61:e0:63: 5f:e2:5d:88:59:8c:4f:54:49:f5:1c:20:f1:d9:75: 2b:2a:9b:29:68:64:52:31:ad:e6:f6:f3:6a:15:1d: 2a:65:b7:b0:82:d4:0d:37:64:3e:e1:56:5f:89:ba: c8:81:78:73:9d:ae:53:c3:22:2d:6f:f1:0c:48:7c: d5:b2:20:df:ca:f2:f5:f2:b2:c6:aa:85:c3:54:b6: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:9E:BF:7E:14:B2:E1:8E:27:89:40:B3:BE:E9:34:6D:C8:A9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/cf3b7b9e-cbd7-300c-b7c0-f8d99e3e3223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl X509v3 Authority Key Identifier: keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer sbgp-ipAddrBlock: critical IPv4: 64.239.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:49:23:2c:5b:5b:c2:db:e5:6b:38:6a:87:6e:ca:89:86:7c: 95:25:a8:f4:49:84:eb:09:04:5c:67:44:90:f9:df:a3:74:7b: 3f:df:82:87:af:c6:f5:5d:b4:91:9d:67:75:09:a0:a3:22:a5: 27:ee:8e:66:4e:e1:b2:bb:a1:8c:ff:e9:e6:4b:9c:3c:4d:53: 55:7b:94:cf:46:9f:a6:89:8d:72:60:2c:02:57:f4:45:2f:bd: 8c:7a:01:74:b8:14:8b:ba:15:ef:c0:73:54:f6:01:59:67:5b: f1:89:eb:38:08:09:e1:b6:06:22:d2:6e:5d:19:b1:ce:83:f6: e8:70:c3:ce:e7:1a:19:da:0c:79:af:74:37:58:7b:c1:c2:51: 13:e2:cc:4b:33:ae:b5:fd:6d:7a:3d:56:c0:22:76:ac:bd:15: 78:30:b6:77:8d:e7:79:22:03:51:08:b2:a6:4b:7c:55:3c:5b: 8b:d0:45:4d:10:97:c3:72:2d:a1:2d:e1:d4:8f:61:6e:24:65: eb:93:13:92:02:d9:bd:16:cc:b5:d2:06:1d:cc:f2:99:71:c2: aa:8a:97:cd:88:96:14:6a:ec:73:58:54:3e:3b:2e:b8:ae:5e: 4c:bd:cb:74:3b:27:d6:a3:68:89:bc:78:eb:d2:c7:af:f3:57: 70:9b:c2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158GMwQFOvmMEQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE3MmQ3MzYtYzY5OC00NTE1LWE4ZDUtZThmNTk5Yjg4 Yjg5MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk YzU1MWRjM2MtZDZkNS00Mzg5LWJmM2UtOTVlZTg2NjEzYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zQ+FirCcxI2FZe1bOeQ2w5t9CnI8td6kj9o VOTnsyguSRZgxvz0N26baInPIuA26LkNDdlRynhibtycbcaE+KgggnqwoI+PlPEw 8N3uR1ZdX4dMqyPLemzIQWDMF5dno8XSMwQjIK7ukrBZUQzW3BJLJqC2Hs8jPAE4 xKe2ppSWJgeKzIJasCSK+a0mK0CELHr4r2H6YmrqtB9mlzml12+s1coJ5+bXSvJ1 mhB080xh4GNf4l2IWYxPVEn1HCDx2XUrKpspaGRSMa3m9vNqFR0qZbewgtQNN2Q+ 4VZfibrIgXhzna5TwyItb/EMSHzVsiDfyvL18rLGqoXDVLZATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKGnr9+FLLhjieJQLO+6TRtyKmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MTcy ZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1OTliODhiODkvY2YzYjdiOWUtY2JkNy0z MDBjLWI3YzAtZjhkOTllM2UzMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjE3MmQ3MzYtYzY5OC00NTE1LWE4 ZDUtZThmNTk5Yjg4Yjg5LzYxNzJkNzM2LWM2OTgtNDUxNS1hOGQ1LWU4ZjU5OWI4 OGI4OS5jcmwwHwYDVR0jBBgwFoAUPDhGyhlVkbOYX3BUrptLlX98WUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MTcyZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1 OTliODhiODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQO8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFJIyxbW8Lb5Ws4aoduyomGfJUlqPRJhOsJBFxnRJD536N0ez/fgoev xvVdtJGdZ3UJoKMipSfujmZO4bK7oYz/6eZLnDxNU1V7lM9Gn6aJjXJgLAJX9EUv vYx6AXS4FIu6Fe/Ac1T2AVlnW/GJ6zgICeG2BiLSbl0Zsc6D9uhww87nGhnaDHmv dDdYe8HCURPizEszrrX9bXo9VsAidqy9FXgwtneN53kiA1EIsqZLfFU8W4vQRU0Q l8NyLaEt4dSPYW4kZeuTE5IC2b0WzLXSBh3M8plxwqqKl82IlhRq7HNYVD47Lriu Xky9y3Q7J9ajaIm8eOvSx6/zV3Cbwks= -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:52 2026 by rpki-client