$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6f8727b-20a5-35ba-a191-82b4fde40996.roa File: d6f8727b-20a5-35ba-a191-82b4fde40996.roa (raw, json) Hash identifier: BzNMEGq2ew3Q8kBWxE5OWSxaZC0N1IIoBSlS3LowmYw= Subject key identifier: C8:8E:37:4B:B3:DA:37:5D:68:00:E7:4C:84:E7:CB:1A:1E:2C:2A:83 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F13024B74B0560A53B1DD8200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6f8727b-20a5-35ba-a191-82b4fde40996.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 215607 IP address blocks: 173.232.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4b:74:b0:56:0a:53:b1:dd:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=3e623d0d-0aa3-47c1-90ce-7a1d84f84180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:0b:1e:ce:65:fa:29:61:cc:5e:84:6e:a4: 1b:32:74:b2:c0:39:3b:54:38:70:72:a3:ed:e5:f8: 02:0e:74:95:e6:bf:99:a5:97:5c:f4:b2:f3:9d:b2: bd:ac:36:8d:2d:34:e9:ed:8b:a7:ca:fe:17:82:f0: f8:f7:cc:be:04:d4:74:b2:07:34:6b:13:d6:55:fa: a9:52:43:f2:d3:5f:7c:90:51:c8:dd:07:3c:3e:b0: e9:c4:3e:a5:7c:b6:94:a0:78:6c:b8:a3:4a:5f:0b: 8c:3e:29:4d:38:f6:cb:c7:45:09:ec:15:52:be:1d: 13:6e:45:04:08:85:1a:48:9a:6f:e8:58:ca:10:eb: 2a:62:4b:39:f6:fc:61:bf:09:dd:5c:ff:8e:a6:fc: 96:98:f1:b5:e7:94:f9:ba:c6:8d:2f:32:2e:b6:52: e6:46:a8:2a:ce:9f:2f:72:8c:47:98:1a:4f:0d:8e: 68:07:21:cf:e9:77:f5:a4:82:d6:6b:8c:fa:30:29: a4:87:ae:c0:83:23:fb:bd:97:e4:2d:77:5f:77:3e: b1:32:93:92:42:05:f8:2b:5b:2b:b8:21:1d:fa:67: 61:29:51:38:fa:61:ec:de:d5:a4:1c:d2:df:f2:81: 7f:cf:32:31:fd:ed:60:53:2a:61:cd:28:c2:fe:c5: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8E:37:4B:B3:DA:37:5D:68:00:E7:4C:84:E7:CB:1A:1E:2C:2A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6f8727b-20a5-35ba-a191-82b4fde40996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:90:0b:47:b1:ec:e3:c5:47:6a:15:52:56:33:e5:cb:b0:3b: d8:58:92:de:68:27:35:fa:34:99:82:3d:9c:c9:af:fc:e0:f8: 32:f6:ef:f3:3f:33:0c:6c:46:9a:87:bf:3c:0a:2e:95:76:c9: b4:92:d5:95:bf:97:bb:5d:41:1f:a8:a1:55:0e:b2:04:cb:01: d6:56:ce:26:e4:e7:82:f6:cf:34:35:09:11:42:01:70:6f:ce: 8a:ee:9b:dc:21:a5:6d:96:93:3e:27:30:bc:65:db:4e:98:6c: 9f:d9:69:6b:96:66:a0:00:0b:6b:b4:fa:9c:08:a5:95:53:70: d3:34:8e:c6:bf:0c:e1:5f:15:cd:49:0e:54:15:9c:66:ae:ab: c3:6b:49:12:e5:4a:8e:7b:28:75:81:33:5c:e0:64:63:38:a5: a5:b4:3e:67:93:97:40:29:f1:38:5c:7e:a0:93:23:9d:13:4d: 36:9e:93:e1:ae:28:7f:4f:88:ac:1a:16:9f:d4:0b:e7:33:b1: 48:ee:09:ce:c1:3e:70:63:55:14:09:3d:9d:45:20:c2:69:ab: f7:88:8d:43:39:cb:11:39:d1:ad:18:60:9c:cd:a4:cf:f4:76: 74:e4:0b:7d:a3:45:7b:dc:b4:d6:06:0f:76:6e:88:50:59:bb: 82:3d:72:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkt0sFYKU7HdggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk M2U2MjNkMGQtMGFhMy00N2MxLTkwY2UtN2ExZDg0Zjg0MTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIULHs5l+ilhzF6EbqQbMnSywDk7VDhwcqPt 5fgCDnSV5r+ZpZdc9LLznbK9rDaNLTTp7Yunyv4XgvD498y+BNR0sgc0axPWVfqp UkPy0198kFHI3Qc8PrDpxD6lfLaUoHhsuKNKXwuMPilNOPbLx0UJ7BVSvh0TbkUE CIUaSJpv6FjKEOsqYks59vxhvwndXP+OpvyWmPG155T5usaNLzIutlLmRqgqzp8v coxHmBpPDY5oByHP6Xf1pILWa4z6MCmkh67AgyP7vZfkLXdfdz6xMpOSQgX4K1sr uCEd+mdhKVE4+mHs3tWkHNLf8oF/zzIx/e1gUyphzSjC/sWunQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiON0uz2jddaADnTITnyxoeLCqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDZmODcyN2ItMjBhNS0z NWJhLWExOTEtODJiNGZkZTQwOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreg7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeQC0ex7OPFR2oVUlYz5cuwO9hYkt5oJzX6NJmCPZzJr/zg+DL27/M/ MwxsRpqHvzwKLpV2ybSS1ZW/l7tdQR+ooVUOsgTLAdZWzibk54L2zzQ1CRFCAXBv zorum9whpW2Wkz4nMLxl206YbJ/ZaWuWZqAAC2u0+pwIpZVTcNM0jsa/DOFfFc1J DlQVnGauq8NrSRLlSo57KHWBM1zgZGM4paW0PmeTl0Ap8ThcfqCTI50TTTaek+Gu KH9PiKwaFp/UC+czsUjuCc7BPnBjVRQJPZ1FIMJpq/eIjUM5yxE50a0YYJzNpM/0 dnTkC32jRXvctNYGD3ZuiFBZu4I9cjo= -----END CERTIFICATE-----Generated at Sun Sep 20 15:06:54 2026 by rpki-client