$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa File: 38bb4162-7340-3e15-9152-3b6cccac904f.roa (raw, json) Hash identifier: AWv5dm73F8IbiDeBKCRID60wyW6+elpbd3wbXqyWrnE= Subject key identifier: 33:72:71:55:76:7B:E5:7F:EF:D3:52:1F:1A:46:90:F4:6B:B8:89:CF Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F4328584F4976765820299159F03E6C80 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40545 IP address blocks: 72.18.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:76:58:20:29:91:59:f0:3e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3205cc0-e865-40d0-89b3-9aab1b010be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:63:3c:fa:52:c6:bf:ea:f7:aa:ad:28:24: e8:80:a4:eb:ea:78:b1:d9:2b:d8:15:3f:56:0e:da: a9:44:07:85:5d:ce:94:2f:de:39:dc:87:c5:69:b3: 9a:8e:20:d4:05:21:ff:fc:6e:b9:90:76:d9:c3:91: d7:97:78:0e:d1:ff:a4:42:0d:e4:e8:68:7e:97:10: c1:de:35:9e:db:dd:f0:22:34:0c:37:5a:b3:cb:53: 7d:80:bd:1e:ab:8e:95:d6:ec:4f:f6:ce:4a:1c:4a: 4d:38:77:98:ae:05:39:41:14:9c:be:83:3e:a5:f8: 48:36:90:61:3b:3a:01:bc:e0:8e:b0:d9:76:f5:06: c4:49:bc:7b:fd:e0:43:16:7d:8e:5c:87:0f:38:70: 0d:14:2b:c2:e5:7c:c1:be:bd:df:ff:15:a3:9d:45: 12:21:e6:cc:56:0d:d9:cd:12:72:d7:4e:8e:61:91: 34:08:b8:87:5b:b2:45:4e:0f:7f:62:f7:a6:0d:7a: 87:32:0d:14:e9:ad:1b:f6:85:3d:4c:4b:95:2e:dd: 48:98:0f:98:05:07:09:22:74:55:d3:c5:7c:cc:ee: be:33:4e:cd:e6:29:7f:b4:8a:21:39:25:0f:a1:2c: 92:04:dd:92:26:1a:0e:0a:5e:40:70:0b:51:4e:3f: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:72:71:55:76:7B:E5:7F:EF:D3:52:1F:1A:46:90:F4:6B:B8:89:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/38bb4162-7340-3e15-9152-3b6cccac904f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 72.18.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7a:d7:9e:b4:8b:ab:88:72:c5:4a:fe:fd:a0:b0:bc:2d:98: ca:bd:60:4e:98:29:33:22:2f:e5:77:d2:d8:09:77:b1:73:06: bb:ee:8a:79:0a:a6:20:d1:95:c8:b1:46:07:d3:93:87:90:c5: 3b:c0:ad:e9:23:07:05:1c:59:ab:05:b8:98:bb:ea:6b:4a:68: 96:4a:4d:b2:b4:27:a3:13:95:09:90:c0:af:2a:5e:4d:84:ad: 75:d5:f7:5d:ca:ec:21:7b:ed:e3:7b:e4:56:fc:8f:df:a9:a8: 46:7e:88:0f:7a:d5:71:77:9a:a1:bb:32:fc:e4:fd:e7:f8:36: 77:81:dd:9c:48:4f:e7:b8:b9:0f:2d:76:3c:44:ce:fb:a8:16: d5:33:25:2e:c8:e2:75:a5:5a:a9:d4:39:d8:16:c6:b7:85:8c: 47:f3:2f:15:c0:69:f3:81:fb:69:5b:c1:77:df:a7:ee:aa:56: ed:e6:15:c9:12:07:d5:de:4e:4f:5d:79:53:b3:d5:eb:e7:df: d4:78:59:5a:da:b8:bf:6a:6d:92:22:34:f9:46:70:fd:43:11: b2:2e:33:e7:ab:7d:e6:a4:00:54:52:32:70:ea:87:0b:05:a4: de:ec:80:a0:5d:47:fc:ac:94:9f:7a:e9:00:4c:3b:15:9b:7a: 82:7b:2a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnZYICmRWfA+bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjMyMDVjYzAtZTg2NS00MGQwLTg5YjMtOWFhYjFiMDEwYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHBjPPpSxr/q96qtKCTogKTr6nix2SvYFT9W DtqpRAeFXc6UL9453IfFabOajiDUBSH//G65kHbZw5HXl3gO0f+kQg3k6Gh+lxDB 3jWe293wIjQMN1qzy1N9gL0eq46V1uxP9s5KHEpNOHeYrgU5QRScvoM+pfhINpBh OzoBvOCOsNl29QbESbx7/eBDFn2OXIcPOHANFCvC5XzBvr3f/xWjnUUSIebMVg3Z zRJy106OYZE0CLiHW7JFTg9/YvemDXqHMg0U6a0b9oU9TEuVLt1ImA+YBQcJInRV 08V8zO6+M07N5il/tIohOSUPoSySBN2SJhoOCl5AcAtRTj+aWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNycVV2e+V/79NSHxpGkPRruInPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvMzhiYjQxNjItNzM0MC0z ZTE1LTkxNTItM2I2Y2NjYWM5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV61560i6uIcsVK/v2gsLwtmMq9YE6YKTMiL+V30tgJd7FzBrvuinkK piDRlcixRgfTk4eQxTvArekjBwUcWasFuJi76mtKaJZKTbK0J6MTlQmQwK8qXk2E rXXV913K7CF77eN75Fb8j9+pqEZ+iA961XF3mqG7Mvzk/ef4NneB3ZxIT+e4uQ8t djxEzvuoFtUzJS7I4nWlWqnUOdgWxreFjEfzLxXAafOB+2lbwXffp+6qVu3mFckS B9XeTk9deVOz1evn39R4WVrauL9qbZIiNPlGcP1DEbIuM+erfeakAFRSMnDqhwsF pN7sgKBdR/yslJ966QBMOxWbeoJ7Kk4= -----END CERTIFICATE-----Generated at Wed Oct 14 21:40:49 2026 by rpki-client