$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa File: aca8707a-936e-31c6-9bed-9ddd4677f562.roa (raw, json) Hash identifier: HSSFkRbd4Tn3VRJBb3HsM7Posyd8N7VryPOy90Q6rxk= Subject key identifier: 94:E4:1B:FB:C6:EB:64:D6:EA:F2:8C:E0:E0:7B:94:97:B2:69:58:81 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F07D778A36969FF2DB6300100 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 3257 IP address blocks: 173.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:78:a3:69:69:ff:2d:b6:30:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=0c954e75-31c0-4b1c-a4c8-8437dcb0ef5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:97:01:72:ce:99:ae:19:86:81:1c:46:29:c2: 83:ea:04:31:4b:5d:92:32:e4:da:aa:fd:5c:6a:e9: be:c9:51:63:47:fa:5b:ab:06:06:f7:90:54:47:ee: fd:8f:8b:9d:52:14:25:f6:91:c1:e6:ee:24:e3:90: 69:b3:2f:1c:21:3e:9a:37:0d:16:f6:cd:87:98:2c: fe:31:1a:32:76:1d:0f:cb:6e:fa:2b:72:ab:fd:74: d3:76:c4:19:e1:bd:1b:59:1a:94:af:fa:f1:11:a1: 1e:b6:29:e0:7b:ad:68:7a:70:cc:a3:05:e5:31:44: f6:eb:76:ad:04:25:b9:4b:f0:12:de:a3:e9:8a:55: 0d:f2:7d:d0:91:d3:6a:7c:ed:21:72:a5:30:e5:4d: ba:22:7b:10:d2:0c:44:bd:50:a2:cd:10:b5:1f:ff: 89:1f:e2:5f:53:cf:8c:2f:bf:10:2d:13:d2:9f:10: 76:14:b9:9e:03:a5:71:1f:a4:af:25:d8:bd:2f:90: 5a:51:47:58:c1:4f:64:e6:09:0e:6c:e6:9d:b4:9e: f7:4b:a4:7d:cb:bc:68:ce:16:d2:16:32:1e:00:e3: 4c:a3:29:f3:f4:1d:e2:ec:2c:b6:7c:2f:e2:62:36: 7b:9d:27:01:ea:92:bc:3f:ec:66:d8:e4:69:7e:b2: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E4:1B:FB:C6:EB:64:D6:EA:F2:8C:E0:E0:7B:94:97:B2:69:58:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c8:7a:a4:54:c8:2b:e1:b1:9b:dd:1f:4a:31:ca:58:68:c8: a9:b2:b0:c6:93:10:03:bc:bf:19:9b:79:6f:f3:01:73:c5:2a: fb:e2:3e:1e:57:81:5e:0a:d1:04:57:fc:b0:62:36:7b:06:de: c2:85:d2:bb:51:a9:23:6b:d8:fb:83:79:7a:e8:f0:c4:1a:e7: 68:31:a9:6e:61:1b:70:45:92:d0:d3:9c:1e:94:43:71:62:aa: 99:08:35:66:5f:e4:a3:ea:25:9c:53:95:de:88:2a:ad:94:5c: cd:bf:64:5e:41:38:60:05:b7:99:e1:bb:56:a6:c5:74:c5:eb: f1:31:0a:0c:21:65:c6:e8:6c:cd:04:66:ef:89:36:3c:99:7a: 72:5b:5c:b4:38:09:5e:13:b3:da:95:e9:c6:fa:a3:04:66:ac: c7:11:6a:8d:51:c8:0a:ab:f7:64:d6:4f:34:b0:6d:76:cb:76: 43:69:15:ac:55:8c:e3:f9:0d:8e:84:37:f1:87:21:1f:21:57: 57:82:91:af:08:d1:41:ba:0c:fa:82:a2:ae:fc:30:3d:c8:1f: b4:8d:a7:9c:e9:51:ac:fb:d5:9d:ac:0a:0b:6f:cd:49:42:02: df:9d:41:94:25:18:8f:cc:70:2f:34:27:88:72:9f:cf:06:9e: 9f:18:f5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13ijaWn/LbYwAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk MGM5NTRlNzUtMzFjMC00YjFjLWE0YzgtODQzN2RjYjBlZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpcBcs6ZrhmGgRxGKcKD6gQxS12SMuTaqv1c aum+yVFjR/pbqwYG95BUR+79j4udUhQl9pHB5u4k45Bpsy8cIT6aNw0W9s2HmCz+ MRoydh0Py276K3Kr/XTTdsQZ4b0bWRqUr/rxEaEetinge61oenDMowXlMUT263at BCW5S/AS3qPpilUN8n3QkdNqfO0hcqUw5U26InsQ0gxEvVCizRC1H/+JH+JfU8+M L78QLRPSnxB2FLmeA6VxH6SvJdi9L5BaUUdYwU9k5gkObOadtJ73S6R9y7xozhbS FjIeAONMoynz9B3i7Cy2fC/iYjZ7nScB6pK8P+xm2ORpfrJgGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTkG/vG62TW6vKM4OB7lJeyaViBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWNhODcwN2EtOTM2ZS0z MWM2LTliZWQtOWRkZDQ2NzdmNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3IeqRUyCvhsZvdH0oxylhoyKmysMaTEAO8vxmbeW/zAXPFKvviPh5X gV4K0QRX/LBiNnsG3sKF0rtRqSNr2PuDeXro8MQa52gxqW5hG3BFktDTnB6UQ3Fi qpkINWZf5KPqJZxTld6IKq2UXM2/ZF5BOGAFt5nhu1amxXTF6/ExCgwhZcbobM0E Zu+JNjyZenJbXLQ4CV4Ts9qV6cb6owRmrMcRao1RyAqr92TWTzSwbXbLdkNpFaxV jOP5DY6EN/GHIR8hV1eCka8I0UG6DPqCoq78MD3IH7SNp5zpUaz71Z2sCgtvzUlC At+dQZQlGI/McC80J4hyn88Gnp8Y9Z0= -----END CERTIFICATE-----Generated at Sun Sep 20 18:00:38 2026 by rpki-client