$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/391012a3-8d40-3af1-b936-e903543bb56b.roa File: 391012a3-8d40-3af1-b936-e903543bb56b.roa (raw, json) Hash identifier: p3Hi4Ri7OtNCnMAdnZCB9ZjwmAS6uIrcFwOgd5nF8Bo= Subject key identifier: DB:BB:6C:60:13:4D:80:F6:A7:06:95:A2:DD:9A:84:81:97:3D:5F:C2 Certificate issuer: /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278 Certificate serial: 010D0C9F4328584F8F3DB806B1248C2F7AD36580 Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/391012a3-8d40-3af1-b936-e903543bb56b.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 14618 IP address blocks: 168.100.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b8:06:b1:24:8c:2f:7a:d3:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=acc450a1-cc8f-446a-961b-fc619aec47db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:aa:95:df:ac:43:d1:e7:05:90:f7:d1:16: 2e:89:ba:56:fd:41:31:76:8c:07:b4:1a:0b:93:a1: 84:2e:df:27:e8:03:78:d2:2d:46:ba:f4:50:1e:5e: 3f:ec:80:f3:1d:e6:eb:ad:e3:1e:0a:c6:0e:5f:e1: 20:58:f7:2d:e2:07:e0:f6:5f:d2:ae:1a:ec:6a:bc: 3c:f4:a0:de:13:c2:0b:2e:62:97:e8:7c:16:a4:99: 03:02:dc:c2:e1:59:36:9e:b5:6a:b2:dc:a9:ca:ec: 84:e7:94:c2:e7:88:7d:ef:df:d9:b9:cd:cb:01:2f: 36:c4:7a:7e:44:c2:56:a0:12:2c:ef:ad:17:23:0f: 7b:48:b0:7f:b9:72:0d:4f:63:04:d0:b2:51:60:98: cb:eb:1b:dd:e6:88:22:67:51:21:2c:9f:3a:9f:75: 69:e5:d6:1b:7a:ae:fe:bb:55:63:0b:bd:43:da:d8: f3:36:1a:d9:e4:21:c3:1f:7c:65:2d:38:08:90:a2: 41:66:db:2d:bb:e5:3c:e6:d9:90:e4:92:d1:d1:ce: a0:78:80:72:e9:49:b0:4b:ba:81:7e:d0:a7:95:26: 10:6c:d0:cd:e8:3d:1f:c4:7c:b1:de:72:bd:5c:8f: 12:ad:4c:7c:1c:25:18:22:89:99:bc:c7:21:17:80: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:6C:60:13:4D:80:F6:A7:06:95:A2:DD:9A:84:81:97:3D:5F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/391012a3-8d40-3af1-b936-e903543bb56b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl X509v3 Authority Key Identifier: keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer sbgp-ipAddrBlock: critical IPv4: 168.100.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:36:ee:cd:0a:96:ff:dd:4a:37:63:1e:e6:18:71:db:98: 6c:c9:a7:85:38:37:52:fc:8b:ba:8d:cd:dd:51:f0:b0:e8:39: a0:d8:5c:71:35:fb:43:99:e0:f6:72:c2:19:e0:73:89:cd:38: 65:40:de:bc:5e:1f:86:44:a5:74:c9:19:86:d3:35:cd:bc:e9: 1d:db:46:26:f5:8f:60:95:ed:c0:75:54:99:c5:3f:da:af:a2: ac:ee:51:0a:70:22:1c:ef:2d:16:29:de:9e:8e:d8:37:e7:e9: ee:66:96:a2:0c:fe:8a:0c:bd:a6:ee:e2:58:d9:15:e2:a2:c6: b1:91:1c:fd:a8:ae:6a:69:2c:92:64:3e:b5:d5:33:14:1d:41: d8:02:40:31:bf:19:55:fe:5c:53:dd:40:7e:cd:23:6a:90:50: 92:bf:a2:5c:56:2e:c1:eb:2d:48:7e:77:cb:ac:00:74:ac:71: 95:89:5d:3c:9b:de:f7:c5:09:5f:95:da:8b:2d:3b:cc:11:df: 40:79:63:f9:55:1f:4b:e7:57:a0:1c:c8:1f:a9:ac:44:0e:ae: fd:4e:eb:c3:c1:4a:d0:17:a0:d1:18:38:9f:a9:80:ba:d6:75: 07:83:9c:d0:da:43:e3:d2:03:e4:1b:bd:5f:7f:dc:7e:cb:6c: 34:e8:ce:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbgGsSSML3rTZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmZjMzc0MWItZGVmZi00ZWNmLWJjMzctMjYyYjIwZTFl Mjc4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWNjNDUwYTEtY2M4Zi00NDZhLTk2MWItZmM2MTlhZWM0N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvduqld+sQ9HnBZD30RYuibpW/UExdowHtBoL k6GELt8n6AN40i1GuvRQHl4/7IDzHebrreMeCsYOX+EgWPct4gfg9l/Srhrsarw8 9KDeE8ILLmKX6HwWpJkDAtzC4Vk2nrVqstypyuyE55TC54h979/Zuc3LAS82xHp+ RMJWoBIs760XIw97SLB/uXINT2ME0LJRYJjL6xvd5ogiZ1EhLJ86n3Vp5dYbeq7+ u1VjC71D2tjzNhrZ5CHDH3xlLTgIkKJBZtstu+U85tmQ5JLR0c6geIBy6UmwS7qB ftCnlSYQbNDN6D0fxHyx3nK9XI8SrUx8HCUYIomZvMchF4AXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu7bGATTYD2pwaVot2ahIGXPV/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMz NzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJiMjBlMWUyNzgvMzkxMDEyYTMtOGQ0MC0z YWYxLWI5MzYtZTkwMzU0M2JiNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZjMzc0MWItZGVmZi00ZWNmLWJj MzctMjYyYjIwZTFlMjc4LzZmYzM3NDFiLWRlZmYtNGVjZi1iYzM3LTI2MmIyMGUx ZTI3OC5jcmwwHwYDVR0jBBgwFoAU48Ch8+RHuqq9mAhrsX88GNUiBEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMzNzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJi MjBlMWUyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKiNu7NCpb/3Uo3Yx7mGHHbmGzJp4U4N1L8i7qNzd1R8LDoOaDYXHE1 +0OZ4PZywhngc4nNOGVA3rxeH4ZEpXTJGYbTNc286R3bRib1j2CV7cB1VJnFP9qv oqzuUQpwIhzvLRYp3p6O2Dfn6e5mlqIM/ooMvabu4ljZFeKixrGRHP2ormppLJJk PrXVMxQdQdgCQDG/GVX+XFPdQH7NI2qQUJK/olxWLsHrLUh+d8usAHSscZWJXTyb 3vfFCV+V2ostO8wR30B5Y/lVH0vnV6AcyB+prEQOrv1O68PBStAXoNEYOJ+pgLrW dQeDnNDaQ+PSA+QbvV9/3H7LbDTozto= -----END CERTIFICATE-----Generated at Thu Nov 5 16:15:59 2026 by rpki-client