$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa File: 09d7a587-a979-367c-95a2-0cb463b5d3be.roa (raw, json) Hash identifier: DWTeFGOI7f4qnBTk+f4d6/MvQn+D07qghDsQQrDW9Q8= Subject key identifier: B1:B9:08:DB:44:C1:AB:22:E0:A8:D6:C7:59:92:A1:63:8E:DB:68:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987AA39A61E2461101D3280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:aa:39:a6:1e:24:61:10:1d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5363033-3d27-4ffa-967e-1e36f3d016b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f7:c0:12:ee:d2:f0:43:70:eb:aa:35:e4:39: a6:76:bb:d1:42:c8:5c:33:8e:5e:4c:08:16:60:7a: ab:82:96:e6:33:3b:00:77:71:1d:02:ff:ef:93:9d: 28:8a:62:e7:57:2d:e5:c2:10:4d:37:e5:71:04:45: 24:9a:62:e4:37:9c:cd:a4:a9:84:a0:72:c5:df:a8: 76:d6:a1:85:99:b6:a3:52:30:01:25:19:a5:46:b6: 18:99:c4:56:aa:8f:ab:e1:b5:13:dc:da:56:2c:86: a0:01:aa:7b:cd:68:a6:a8:93:48:84:9f:9f:e2:6b: 1e:a5:69:0e:40:e2:15:68:75:5a:b3:8c:a5:95:8b: d6:e7:fd:49:ae:fb:86:53:b7:a7:42:13:f1:ae:25: 2c:89:62:94:c7:71:2c:c0:b1:68:ea:e6:16:25:97: ec:2a:30:52:97:83:f6:ce:fd:99:85:62:e5:a0:fc: 15:7c:1a:0f:92:09:8c:cc:7b:36:b2:0f:f4:a4:21: ee:a9:2c:af:17:a3:1f:c8:b6:52:6d:92:d1:b4:39: 24:34:35:d2:e0:44:77:e5:07:87:ee:b8:d8:bc:95: 8c:45:b4:47:ce:1a:00:d2:81:e4:4c:12:7b:e5:4a: a8:52:04:1c:eb:4e:40:d9:17:d0:0d:71:d0:90:f4: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B9:08:DB:44:C1:AB:22:E0:A8:D6:C7:59:92:A1:63:8E:DB:68:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8d:60:13:f2:31:d5:c2:d4:c8:32:2b:4b:90:9d:77:8e:9e: d6:88:61:3c:7b:af:f6:0f:ef:53:81:13:41:95:3e:8f:97:2f: f2:33:db:c9:db:12:ec:c7:b6:2a:04:13:d0:28:98:23:9c:8b: ed:f7:aa:72:ae:32:b5:bd:e0:17:4a:9a:32:7a:3f:4d:d4:e8: 23:85:ee:f9:94:71:8f:9b:38:f8:2f:fa:e7:64:8f:3b:3c:26: 50:b0:56:2f:59:10:7a:40:cb:45:11:38:ce:36:8b:51:9f:c5: bb:05:26:80:a8:3c:cc:f2:fd:6d:f7:1a:d5:27:01:66:f6:d0: e7:8e:87:5b:33:92:4e:2b:4e:34:1a:42:9a:df:d1:ed:b0:4b: 1f:13:35:45:33:66:b1:e1:dd:11:ef:5f:6c:11:46:e3:f7:e1: 35:c3:df:bf:d6:48:18:5a:ab:8d:1b:83:9b:2e:00:a4:df:63: 26:01:ed:c1:33:65:99:28:c8:0e:9c:cc:8f:0f:d4:f2:98:00: 3e:17:1c:45:88:d0:ed:ae:2c:2c:fd:ef:d3:3b:4f:83:a9:a3: ea:e2:9a:13:57:38:1b:fa:f9:21:20:4b:29:b4:08:27:de:36: 27:b7:3e:30:60:22:47:7d:55:c7:be:d8:92:ec:d5:d3:f9:44: 3e:fa:9f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh6o5ph4kYRAdMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzUzNjMwMzMtM2QyNy00ZmZhLTk2N2UtMWUzNmYzZDAxNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PfAEu7S8ENw66o15DmmdrvRQshcM45eTAgW YHqrgpbmMzsAd3EdAv/vk50oimLnVy3lwhBNN+VxBEUkmmLkN5zNpKmEoHLF36h2 1qGFmbajUjABJRmlRrYYmcRWqo+r4bUT3NpWLIagAap7zWimqJNIhJ+f4msepWkO QOIVaHVas4yllYvW5/1JrvuGU7enQhPxriUsiWKUx3EswLFo6uYWJZfsKjBSl4P2 zv2ZhWLloPwVfBoPkgmMzHs2sg/0pCHuqSyvF6MfyLZSbZLRtDkkNDXS4ER35QeH 7rjYvJWMRbRHzhoA0oHkTBJ75UqoUgQc605A2RfQDXHQkPRQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG5CNtEwasi4KjWx1mSoWOO22iGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkN2E1ODctYTk3OS0z NjdjLTk1YTItMGNiNDYzYjVkM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeNYBPyMdXC1MgyK0uQnXeOntaIYTx7r/YP71OBE0GVPo+XL/Iz28nb EuzHtioEE9AomCOci+33qnKuMrW94BdKmjJ6P03U6COF7vmUcY+bOPgv+udkjzs8 JlCwVi9ZEHpAy0UROM42i1GfxbsFJoCoPMzy/W33GtUnAWb20OeOh1szkk4rTjQa Qprf0e2wSx8TNUUzZrHh3RHvX2wRRuP34TXD37/WSBhaq40bg5suAKTfYyYB7cEz ZZkoyA6czI8P1PKYAD4XHEWI0O2uLCz979M7T4Opo+rimhNXOBv6+SEgSym0CCfe Nie3PjBgIkd9Vce+2JLs1dP5RD76n6I= -----END CERTIFICATE-----Generated at Sun Sep 27 06:14:37 2026 by rpki-client