$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa File: 3bb61dcd-da0f-3ec1-8416-831c406b030b.roa (raw, json) Hash identifier: Do5QXUVmp5/w3xi9mz74yVGbWSgKp2cBFiZuCTfEPm4= Subject key identifier: 0E:85:E7:DC:DB:CC:0C:7C:69:D6:5C:9E:87:CA:2A:4A:77:DA:E7:D5 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584EED521A0F7CFFF4DE89F0BBC0 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 15054 IP address blocks: 63.246.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1a:0f:7c:ff:f4:de:89:f0:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c734b7f9-05f8-40a7-82fa-aa259722c1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:70:59:c5:6e:a5:92:9e:08:ac:17:f7:06: d3:59:5b:bc:ac:83:91:07:28:21:4c:9d:95:7d:e7: b2:5c:09:53:54:bf:4a:da:81:6a:6f:9b:3d:b7:c0: f4:9e:be:97:a2:d3:31:01:b9:63:43:d4:f3:5e:d6: 99:db:28:81:82:53:7f:54:38:88:e9:5d:48:24:a6: 89:fa:66:fe:ec:8c:0c:27:b2:3e:14:cc:84:e8:d5: db:f4:73:28:17:60:ff:b9:6c:e4:6c:55:c0:15:c8: 83:63:5a:7a:ba:0c:8a:a5:c6:d8:9b:03:ef:8d:d5: 9c:82:6f:6f:7b:5f:dd:81:87:1f:9c:7f:1e:fc:a8: 3c:4e:d5:1c:cc:56:b1:65:f2:02:ef:14:4c:b6:1e: d4:7d:50:cf:42:9a:2f:84:d6:d5:55:6d:57:24:b4: 6d:5a:ad:d7:fa:39:c0:a9:97:fd:a4:75:89:34:0c: f4:66:e3:18:7d:be:71:6e:fe:51:c4:83:5e:56:c1: 9c:7e:7e:d8:bc:77:60:00:50:77:1b:b4:e8:e8:05: 1c:14:7e:a6:5f:b4:78:47:95:b8:0f:36:ba:c5:61: 13:9b:f8:02:95:91:1c:15:ce:28:fd:7f:25:4d:f5: d4:2f:a6:03:3e:08:88:66:bd:0b:b1:19:00:09:27: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:E7:DC:DB:CC:0C:7C:69:D6:5C:9E:87:CA:2A:4A:77:DA:E7:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 63.246.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a0:a2:1c:bc:f8:42:1d:7f:52:93:bd:e2:c8:9c:b9:c5:b2: 10:3b:ec:6d:62:06:07:51:49:ae:3f:06:37:50:f6:4a:0f:16: de:87:3f:fc:dc:f1:f9:5a:0c:aa:1c:e7:bf:60:0a:97:30:23: 1d:f0:8d:3f:5c:63:cf:1b:0f:d7:f7:d9:38:f0:67:04:b8:67: 65:21:e9:96:2c:79:1b:2d:d5:93:d6:f7:5c:d8:6d:e1:42:ab: 47:e8:d3:3a:12:cd:4f:26:52:9a:00:95:45:4b:23:08:ee:87: 5f:91:72:a0:75:27:05:64:83:6f:00:0b:b5:88:70:1f:9c:f1: 42:15:f0:9e:59:d2:16:b9:7e:21:c4:42:65:bc:a0:4f:70:f7: 0b:90:ef:c8:6f:d7:be:ea:50:be:4b:d1:e3:cd:fb:ae:3a:dc: 6e:ee:34:82:9d:3d:de:1f:cf:f4:89:fb:44:12:4d:da:61:c9: 2b:b7:df:d8:8c:2d:3d:3a:06:48:a5:7d:1d:76:01:48:b4:b1: e5:aa:18:58:2b:64:fe:6e:cf:e5:19:41:2f:e0:38:9b:2f:27: 3a:b8:da:bb:34:4a:0c:f6:c3:bc:02:f0:56:17:d3:5e:6a:c9: 5f:05:ae:b7:a1:f3:c2:02:45:7d:e7:cb:23:a7:9f:2a:1f:40: 49:46:64:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhoPfP/03onwu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzczNGI3ZjktMDVmOC00MGE3LTgyZmEtYWEyNTk3MjJjMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+pwWcVupZKeCKwX9wbTWVu8rIORByghTJ2V feeyXAlTVL9K2oFqb5s9t8D0nr6XotMxAbljQ9TzXtaZ2yiBglN/VDiI6V1IJKaJ +mb+7IwMJ7I+FMyE6NXb9HMoF2D/uWzkbFXAFciDY1p6ugyKpcbYmwPvjdWcgm9v e1/dgYcfnH8e/Kg8TtUczFaxZfIC7xRMth7UfVDPQpovhNbVVW1XJLRtWq3X+jnA qZf9pHWJNAz0ZuMYfb5xbv5RxINeVsGcfn7YvHdgAFB3G7To6AUcFH6mX7R4R5W4 Dza6xWETm/gClZEcFc4o/X8lTfXUL6YDPgiIZr0LsRkACSfxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6F59zbzAx8adZcnofKKkp32ufVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvM2JiNjFkY2QtZGEwZi0z ZWMxLTg0MTYtODMxYzQwNmIwMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWgohy8+EIdf1KTveLInLnFshA77G1iBgdRSa4/BjdQ9koPFt6HP/zc 8flaDKoc579gCpcwIx3wjT9cY88bD9f32TjwZwS4Z2Uh6ZYseRst1ZPW91zYbeFC q0fo0zoSzU8mUpoAlUVLIwjuh1+RcqB1JwVkg28AC7WIcB+c8UIV8J5Z0ha5fiHE QmW8oE9w9wuQ78hv177qUL5L0ePN+6463G7uNIKdPd4fz/SJ+0QSTdphySu339iM LT06BkilfR12AUi0seWqGFgrZP5uz+UZQS/gOJsvJzq42rs0Sgz2w7wC8FYX015q yV8Frreh88ICRX3nyyOnnyofQElGZAs= -----END CERTIFICATE-----Generated at Thu Sep 24 23:07:22 2026 by rpki-client