$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa File: 0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa (raw, json) Hash identifier: +qG2sdR8gNTG/6QMPuayDPwY9LWyfRjMn5NeqmbQPyU= Subject key identifier: 96:48:F7:E4:9C:56:4C:0A:E1:9C:AE:9A:0A:E5:65:73:48:28:A5:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F20F7B544364061E24C74DA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b5:44:36:40:61:e2:4c:74:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=01ed5bc3-d89d-4405-b9b8-bb1190f7f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:9d:fb:6e:f8:c4:fe:67:8e:d8:48:a2:73: 54:73:e8:cd:7d:60:ce:61:3b:56:dd:e7:28:5c:24: f6:12:97:5d:55:a3:43:5e:10:15:3c:8c:6e:16:9e: 03:ee:aa:37:76:37:67:54:ce:cb:49:60:e8:63:a1: b0:a7:d8:75:1f:af:83:42:04:8c:66:42:f3:e3:9f: dc:3f:4d:21:16:a4:83:eb:d8:95:70:8e:0e:fa:55: f7:13:97:55:7e:f2:91:90:90:90:6a:21:79:ac:ff: 1b:2a:6d:09:53:7c:ed:cf:d3:bc:03:f8:da:bb:5a: 91:75:f5:f4:26:e1:fc:32:b6:d9:bb:3c:bf:b8:47: 11:e6:32:d7:da:d1:8f:81:e9:47:d7:a4:8c:93:49: 50:27:79:8f:5a:9b:40:2a:e9:4d:42:0a:15:f6:93: 87:3a:1a:83:4e:0a:8b:08:db:6f:21:b9:cb:46:4a: 82:1a:34:80:1a:d6:28:76:29:aa:d7:4b:54:bb:a4: 03:d9:09:84:e2:38:dd:0d:33:4e:87:2c:d8:b2:63: 30:01:03:03:c8:ce:99:bf:5f:e0:79:80:02:73:3c: 95:83:3e:55:17:6c:e1:65:24:a8:19:b8:7c:45:cf: fd:05:b6:86:5d:d5:a8:37:15:96:1e:52:11:9a:ca: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:F7:E4:9C:56:4C:0A:E1:9C:AE:9A:0A:E5:65:73:48:28:A5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:45:a6:9c:49:c1:9d:fb:58:89:0b:a7:7e:1b:d4:fb:11:9f: 16:62:87:b3:45:2d:c3:de:bd:2e:44:01:a9:7d:83:11:01:02: ec:68:00:37:65:3c:45:97:f2:db:74:be:5c:93:81:fc:7d:a5: d7:59:f1:ce:36:eb:72:35:cd:41:f3:72:35:c6:fd:0e:e2:14: 5b:e6:10:18:c6:03:9c:4e:07:1e:2f:0a:d0:5b:35:42:ab:d6: 49:ac:b0:33:34:32:f0:31:d8:d2:ed:18:0a:44:a6:ae:3c:4e: 22:e7:28:70:ee:e3:fc:fd:c4:d5:15:ae:a2:f9:65:cf:23:41: e0:93:38:2e:a9:88:0b:c3:a2:30:80:5c:c0:6a:3d:5d:52:e5: 5b:70:fb:bc:28:64:ac:29:ed:db:eb:45:ca:95:9a:49:a4:44: 91:65:26:ce:a8:45:c0:ed:cc:b8:08:8f:67:5c:0b:20:38:24: 66:09:7c:c3:10:8f:25:03:8b:c1:2f:49:d9:40:8c:16:a8:2f: d4:f1:04:5c:2f:d2:ba:a4:28:65:4a:cc:c9:6a:3e:00:52:70: 27:6c:45:2b:f4:a2:35:7b:da:b4:11:f0:ff:0a:81:1b:ec:6d: a1:21:24:96:79:6d:45:6a:0f:0c:0f:8f:5e:c4:7a:cc:8b:f0: a6:da:da:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97VENkBh4kx02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDFlZDViYzMtZDg5ZC00NDA1LWI5YjgtYmIxMTkwZjdmNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOed+274xP5njthIonNUc+jNfWDOYTtW3eco XCT2EpddVaNDXhAVPIxuFp4D7qo3djdnVM7LSWDoY6Gwp9h1H6+DQgSMZkLz45/c P00hFqSD69iVcI4O+lX3E5dVfvKRkJCQaiF5rP8bKm0JU3ztz9O8A/jau1qRdfX0 JuH8MrbZuzy/uEcR5jLX2tGPgelH16SMk0lQJ3mPWptAKulNQgoV9pOHOhqDTgqL CNtvIbnLRkqCGjSAGtYodimq10tUu6QD2QmE4jjdDTNOhyzYsmMwAQMDyM6Zv1/g eYACczyVgz5VF2zhZSSoGbh8Rc/9BbaGXdWoNxWWHlIRmsrU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZI9+ScVkwK4ZyumgrlZXNIKKXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg2MWI3YjgtNDdmMS0z ZmYyLWExNWQtZjU2NjkwNTJlNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtFppxJwZ37WIkLp34b1PsRnxZih7NFLcPevS5EAal9gxEBAuxoADdl PEWX8tt0vlyTgfx9pddZ8c4263I1zUHzcjXG/Q7iFFvmEBjGA5xOBx4vCtBbNUKr 1kmssDM0MvAx2NLtGApEpq48TiLnKHDu4/z9xNUVrqL5Zc8jQeCTOC6piAvDojCA XMBqPV1S5Vtw+7woZKwp7dvrRcqVmkmkRJFlJs6oRcDtzLgIj2dcCyA4JGYJfMMQ jyUDi8EvSdlAjBaoL9TxBFwv0rqkKGVKzMlqPgBScCdsRSv0ojV72rQR8P8KgRvs baEhJJZ5bUVqDwwPj17EesyL8Kba2v0= -----END CERTIFICATE-----Generated at Sat Oct 3 13:20:39 2026 by rpki-client