$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de6ba7-4722-3ee5-a9ff-587372b3c02e.roa File: 09de6ba7-4722-3ee5-a9ff-587372b3c02e.roa (raw, json) Hash identifier: gM42EclHXxW78H98VJd6lDCqRKu5dccyewJrmVPIV90= Subject key identifier: D7:E5:65:93:7B:6A:FC:E2:BB:40:3A:0D:58:14:12:10:28:3F:4A:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497428BA0CC2C8A33BE3F400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de6ba7-4722-3ee5-a9ff-587372b3c02e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.30.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:28:ba:0c:c2:c8:a3:3b:e3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6bdb9795-6c52-44d5-8d8d-e55c615df6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:d1:77:52:6e:55:25:b9:fd:da:5d:e5:4a: e7:3b:29:81:d9:0e:9a:9c:1e:af:f8:70:51:69:ba: 0f:23:db:7e:08:5b:35:b4:52:f8:d2:28:a4:a5:cc: 46:ee:1a:94:d0:6e:d4:b5:be:99:80:73:29:2f:71: d8:e1:ea:b1:3c:ff:db:4d:9d:75:32:3d:ff:f6:0b: 70:db:2b:08:eb:04:4e:d1:64:f8:29:40:fa:ec:8f: 60:b5:84:58:6b:00:d9:0f:45:d2:9a:03:7e:01:21: fa:67:e0:5a:93:f0:18:dc:00:9b:01:80:40:2b:36: 81:15:03:0a:ce:2f:3d:a5:f1:f4:2a:cc:54:24:c8: de:b4:e7:f7:bb:3f:d1:85:20:9c:ce:0e:04:44:9c: 1b:fe:f3:65:fc:75:31:ae:de:8f:df:82:b1:19:e6: d8:77:d0:6a:cc:30:cb:74:5a:12:17:2a:36:56:56: 1f:92:03:6d:ee:ec:96:64:a9:c6:5d:46:36:de:8d: 2a:46:80:36:3b:0c:8a:64:3d:cd:05:3e:cf:86:a8: 0d:21:d0:88:c8:0d:dc:08:dc:10:2a:ac:23:ee:bd: 0d:d2:e6:80:d3:61:d5:b4:32:ec:1c:66:57:32:28: 8a:f4:a6:7b:9b:22:76:11:a8:55:b9:9b:34:36:6d: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E5:65:93:7B:6A:FC:E2:BB:40:3A:0D:58:14:12:10:28:3F:4A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de6ba7-4722-3ee5-a9ff-587372b3c02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f1:c2:40:01:d0:99:92:35:9b:f2:88:a8:57:8a:fc:fb:02: 83:c0:12:45:74:c3:4f:f5:a4:67:22:c3:65:6c:a5:03:ab:e6: e8:25:f6:7b:d7:b6:57:90:48:5c:3a:f1:49:32:25:ff:8d:97: fc:05:27:ac:e0:33:45:59:b8:4b:10:f2:87:cc:55:68:7a:49: e8:a5:07:40:9a:4f:51:50:fe:f2:8c:33:34:d4:8e:70:83:8f: 24:07:20:d2:38:ad:75:5d:21:b4:da:48:14:a3:42:35:bb:7b: 94:40:51:96:77:6c:7c:7f:34:72:34:34:b1:6c:c4:71:e4:63: 74:37:3f:86:9f:30:19:73:c8:8d:06:9a:5e:c3:51:6c:7c:f6: b7:33:8e:18:33:2b:fa:95:df:3d:e4:5b:4e:ee:fd:10:e0:16: b9:45:2d:2b:b3:86:14:21:38:35:33:4c:89:50:7e:3d:13:69: 25:b5:90:55:64:50:20:22:92:ef:34:b2:e9:fa:7d:56:f4:b2: a5:02:6d:7e:77:35:7e:e1:34:d7:08:51:dc:31:30:6b:38:e6: 7e:7a:c0:64:8f:35:39:0a:0c:8b:a8:28:69:b1:01:ae:c1:fc: 1c:7f:68:89:4d:5e:dd:bf:91:89:df:b9:92:90:a5:da:b9:77: 84:24:43:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCi6DMLIozvj9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmJkYjk3OTUtNmM1Mi00NGQ1LThkOGQtZTU1YzYxNWRmNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMLRd1JuVSW5/dpd5UrnOymB2Q6anB6v+HBR aboPI9t+CFs1tFL40iikpcxG7hqU0G7Utb6ZgHMpL3HY4eqxPP/bTZ11Mj3/9gtw 2ysI6wRO0WT4KUD67I9gtYRYawDZD0XSmgN+ASH6Z+Bak/AY3ACbAYBAKzaBFQMK zi89pfH0KsxUJMjetOf3uz/RhSCczg4ERJwb/vNl/HUxrt6P34KxGebYd9BqzDDL dFoSFyo2VlYfkgNt7uyWZKnGXUY23o0qRoA2OwyKZD3NBT7PhqgNIdCIyA3cCNwQ Kqwj7r0N0uaA02HVtDLsHGZXMiiK9KZ7myJ2EahVuZs0Nm3gSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNflZZN7avziu0A6DVgUEhAoP0oqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkZTZiYTctNDcyMi0z ZWU1LWE5ZmYtNTg3MzcyYjNjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfxwkAB0JmSNZvyiKhXivz7AoPAEkV0w0/1pGciw2VspQOr5ugl9nvX tleQSFw68UkyJf+Nl/wFJ6zgM0VZuEsQ8ofMVWh6SeilB0CaT1FQ/vKMMzTUjnCD jyQHINI4rXVdIbTaSBSjQjW7e5RAUZZ3bHx/NHI0NLFsxHHkY3Q3P4afMBlzyI0G ml7DUWx89rczjhgzK/qV3z3kW07u/RDgFrlFLSuzhhQhODUzTIlQfj0TaSW1kFVk UCAiku80sun6fVb0sqUCbX53NX7hNNcIUdwxMGs45n56wGSPNTkKDIuoKGmxAa7B /Bx/aIlNXt2/kYnfuZKQpdq5d4QkQ70= -----END CERTIFICATE-----Generated at Sun Sep 27 10:49:33 2026 by rpki-client