$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa File: 3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa (raw, json) Hash identifier: bcL7ADXWK3huSJRAGnvrTeUlGwFaITigyopkFH6LkMY= Subject key identifier: 4F:CB:1A:CF:E0:2B:E9:CE:F8:C7:42:0A:84:4C:F6:95:F4:D4:B4:51 Certificate issuer: /CN=e96beed0-0beb-4387-bde4-56aa0782ae2c Certificate serial: 010D0C9F4328584F0D6CED7A91C386FFF4FB1680 Authority key identifier: 08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 36326 IP address blocks: 158.51.132.0/23 maxlen: 24 2602:fcd9::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ed:7a:91:c3:86:ff:f4:fb:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96beed0-0beb-4387-bde4-56aa0782ae2c Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3ff99a05-097b-418b-a55c-aa58d8e4cfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:6e:bf:10:f7:48:c1:06:31:c1:93:02:a8: 55:e4:21:b2:a0:81:f5:ff:69:85:f8:4e:64:ed:97: 0d:71:d4:a6:e0:10:48:9d:a1:f1:fe:80:d2:8f:4a: 32:ff:01:84:55:81:12:ff:3c:a1:f5:33:d1:46:6d: f9:43:b3:b8:ef:6e:07:04:71:41:9a:a6:b7:ca:e5: 24:40:de:b7:87:c6:9b:3c:2a:3f:ff:80:da:7b:4a: be:c3:d4:ae:2a:4a:87:0f:03:b9:84:56:3c:a0:93: 69:b4:92:0c:d5:f6:e0:be:66:5e:08:5d:0a:c3:ab: 55:77:15:10:37:10:8d:80:b8:3a:a2:57:88:fd:16: 95:15:b0:f6:6f:be:f2:2a:f0:8d:79:3b:41:39:7e: 19:7b:83:90:25:e0:d7:c5:81:e3:6a:ec:85:14:e4: 0a:ed:2f:1a:cf:03:5b:71:ca:fc:30:88:6f:df:f3: 30:21:76:b0:28:98:06:23:5c:bb:75:57:f6:1e:07: 6a:a5:d0:55:9e:22:fd:1d:44:3b:f6:7d:5f:be:85: 9e:11:f6:c1:82:6f:f4:3e:c3:ae:ce:b1:0b:fd:5c: db:07:06:51:e9:92:4c:00:8f:41:eb:da:70:ba:47: ff:0a:64:41:11:1f:fe:b5:1e:1b:1b:be:90:73:05: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CB:1A:CF:E0:2B:E9:CE:F8:C7:42:0A:84:4C:F6:95:F4:D4:B4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl X509v3 Authority Key Identifier: keyid:08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.132.0/23 IPv6: 2602:fcd9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:76:ee:86:ef:93:f5:48:fc:7e:cc:ed:ed:45:88:26:a0:90: ca:3a:60:98:bf:45:b1:cb:63:08:32:06:dd:47:c3:b6:5a:92: d5:fa:0d:9a:4a:9e:15:55:a4:5e:25:8a:de:ea:62:a5:bc:7a: 1c:ff:af:67:7b:a3:1e:56:91:a7:24:bd:25:f4:57:95:d4:4a: a6:1c:ee:95:aa:a0:a5:25:22:52:89:51:3f:cb:7e:dd:0e:34: c8:e8:d3:4c:10:62:d4:04:91:d9:bc:f4:c5:18:75:c1:47:30: f7:82:29:65:83:c5:f4:32:16:4c:5f:02:c7:ea:9e:05:cb:11: ef:13:70:fa:af:28:78:f5:54:9a:2d:5f:41:ae:14:56:e3:7d: 39:59:5b:08:8e:32:92:0f:35:f7:27:b0:3c:16:3c:11:66:67: e8:85:13:7f:90:5d:22:64:49:f9:1e:3d:97:e3:b2:b9:b3:08: 3e:72:3e:5a:d3:94:20:8f:b5:3c:a1:ce:70:7c:15:e8:7e:0f: 3c:c4:97:ee:eb:cd:45:b9:8e:31:0e:97:9f:ac:e9:42:cb:80: 23:74:63:6e:9c:eb:4a:70:e8:2b:90:a3:a1:a7:1b:d7:c1:2b: c1:29:a2:3f:13:a8:81:e4:33:37:d1:4b:5f:28:57:ce:a9:4a: df:bd:73:0d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8NbO16kcOG//T7FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YmVlZDAtMGJlYi00Mzg3LWJkZTQtNTZhYTA3ODJh ZTJjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk M2ZmOTlhMDUtMDk3Yi00MThiLWE1NWMtYWE1OGQ4ZTRjZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuluvxD3SMEGMcGTAqhV5CGyoIH1/2mF+E5k 7ZcNcdSm4BBInaHx/oDSj0oy/wGEVYES/zyh9TPRRm35Q7O4724HBHFBmqa3yuUk QN63h8abPCo//4Dae0q+w9SuKkqHDwO5hFY8oJNptJIM1fbgvmZeCF0Kw6tVdxUQ NxCNgLg6oleI/RaVFbD2b77yKvCNeTtBOX4Ze4OQJeDXxYHjauyFFOQK7S8azwNb ccr8MIhv3/MwIXawKJgGI1y7dVf2HgdqpdBVniL9HUQ79n1fvoWeEfbBgm/0PsOu zrEL/VzbBwZR6ZJMAI9B69pwukf/CmRBER/+tR4bG76QcwUP3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFE/LGs/gK+nO+MdCCoRM9pX01LRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lOTZi ZWVkMC0wYmViLTQzODctYmRlNC01NmFhMDc4MmFlMmMvM2IyYjdmZGMtOGE5ZC0z NzY4LWJjMDEtYzhlMmRhMjdlZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTk2YmVlZDAtMGJlYi00Mzg3LWJk ZTQtNTZhYTA3ODJhZTJjL2U5NmJlZWQwLTBiZWItNDM4Ny1iZGU0LTU2YWEwNzgy YWUyYy5jcmwwHwYDVR0jBBgwFoAUCOaguK8dDjk0PyK5OhKttL9ngQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lOTZiZWVkMC0wYmViLTQzODctYmRlNC01NmFh MDc4MmFlMmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBnjOEMA4E AgACMAgDBgQmAvzZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcdu6G75P1SPx+zO3tRYgmoJDKOmCYv0Wx y2MIMgbdR8O2WpLV+g2aSp4VVaReJYre6mKlvHoc/69ne6MeVpGnJL0l9FeV1Eqm HO6VqqClJSJSiVE/y37dDjTI6NNMEGLUBJHZvPTFGHXBRzD3gillg8X0MhZMXwLH 6p4FyxHvE3D6ryh49VSaLV9BrhRW4305WVsIjjKSDzX3J7A8FjwRZmfohRN/kF0i ZEn5Hj2X47K5swg+cj5a05Qgj7U8oc5wfBXofg88xJfu681FuY4xDpefrOlCy4Aj dGNunOtKcOgrkKOhpxvXwSvBKaI/E6iB5DM30UtfKFfOqUrfvXMN -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:24 2026 by rpki-client