$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e21fee4-9568-367d-9998-8a9303b029e3.roa File: 0e21fee4-9568-367d-9998-8a9303b029e3.roa (raw, json) Hash identifier: cVUlSRDth7Ic8+z5oX7Bpc/fXvDWxyf18kFIsEjk6pM= Subject key identifier: 43:5D:28:D8:BC:D1:F4:26:86:7B:A0:04:55:EA:72:7D:3C:4F:F8:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497428D2F32847392FF539C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e21fee4-9568-367d-9998-8a9303b029e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:28:d2:f3:28:47:39:2f:f5:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ace4e5eb-e71a-4d31-8e2d-a1c712a14c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:ff:37:c0:cc:b5:37:5d:0a:76:3e:48:33: 4c:2a:dc:21:a5:bb:31:4e:3e:a4:57:fc:4c:88:8b: 7f:ca:9b:c7:16:1a:be:0c:67:88:12:9b:19:c1:f3: ac:9c:d9:86:3a:3d:28:90:f4:2e:7e:ee:87:58:43: be:b4:7a:da:9d:e1:b6:a8:d3:0c:89:84:e2:80:4b: 68:df:79:3e:6a:cd:93:7a:2d:18:78:ab:33:58:fa: 14:c5:68:6a:8a:c6:91:cf:0a:17:3a:85:8c:40:29: 4d:0c:ed:43:4b:0f:2a:7e:82:c3:47:bb:8e:ca:aa: 33:f8:ee:f4:3d:27:8c:a9:b7:7e:1a:dc:0a:74:34: d7:e3:df:ad:89:33:30:11:5c:55:51:55:02:1a:97: 2e:29:20:e8:a4:d7:93:81:8b:3b:18:a7:c5:d9:2d: 55:d4:fa:5c:0e:32:dd:75:7d:f5:47:06:65:04:2b: 4b:94:db:bd:89:23:ab:7e:d1:fb:a8:f1:10:bc:5d: 92:b9:e6:6d:dd:aa:dd:c3:f2:a9:b9:ba:33:e8:50: 17:c1:69:6a:91:e0:2f:96:3c:1b:91:4a:89:ac:28: d1:18:97:cf:63:32:82:58:4c:c8:ef:44:b3:cd:d9: 53:f9:8b:a2:98:af:02:3e:17:8f:9e:49:1a:2b:61: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:28:D8:BC:D1:F4:26:86:7B:A0:04:55:EA:72:7D:3C:4F:F8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e21fee4-9568-367d-9998-8a9303b029e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:55:f3:b2:70:c7:0e:fd:72:6b:85:47:15:ea:ec:a8:44:62: 7c:52:24:ee:5f:c1:e5:f3:c6:23:2c:14:4a:29:cd:81:f1:88: fe:c6:cd:23:27:e0:fa:36:7d:d7:ea:f7:e5:cf:ed:e4:6d:b9: b7:5f:d4:a2:27:a9:ef:22:eb:eb:ce:4d:37:e6:c2:8b:d6:b8: bd:43:89:01:43:b3:fb:b2:ed:32:c4:97:57:1d:a2:ee:5e:17: 35:c4:cc:6e:22:63:51:d8:2e:c2:dd:0c:cc:b3:e3:a6:f3:1f: 91:8f:6c:b2:72:c1:bd:45:f2:23:af:88:43:97:cb:89:45:e7: 57:31:2a:d5:7d:3a:21:a8:cc:17:c7:6e:90:af:e4:ae:a0:20: 79:4a:75:9e:ad:87:d8:7e:ff:58:0d:76:30:35:16:39:68:56: d5:85:12:e8:96:bd:9a:d3:ef:c9:62:f3:a1:28:2e:75:ad:38: c1:fe:2c:97:97:f4:2e:b6:5f:2f:7d:ec:4a:53:f6:b7:4a:59: b1:d9:a4:21:dc:0d:9f:e3:bf:48:0d:39:3d:89:d1:35:b6:e0: dc:16:85:2e:22:4b:77:44:46:cb:be:d7:96:eb:45:6b:a7:c4: dc:5b:12:c3:1e:aa:a8:cb:e4:4a:62:4b:a2:06:b1:be:74:66: 68:53:25:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCjS8yhHOS/1OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWNlNGU1ZWItZTcxYS00ZDMxLThlMmQtYTFjNzEyYTE0YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhff/N8DMtTddCnY+SDNMKtwhpbsxTj6kV/xM iIt/ypvHFhq+DGeIEpsZwfOsnNmGOj0okPQufu6HWEO+tHraneG2qNMMiYTigEto 33k+as2Tei0YeKszWPoUxWhqisaRzwoXOoWMQClNDO1DSw8qfoLDR7uOyqoz+O70 PSeMqbd+GtwKdDTX49+tiTMwEVxVUVUCGpcuKSDopNeTgYs7GKfF2S1V1PpcDjLd dX31RwZlBCtLlNu9iSOrftH7qPEQvF2SueZt3ardw/Kpuboz6FAXwWlqkeAvljwb kUqJrCjRGJfPYzKCWEzI70SzzdlT+YuimK8CPhePnkkaK2EjKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENdKNi80fQmhnugBFXqcn08T/gSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGUyMWZlZTQtOTU2OC0z NjdkLTk5OTgtOGE5MzAzYjAyOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFV87Jwxw79cmuFRxXq7KhEYnxSJO5fweXzxiMsFEopzYHxiP7GzSMn 4Po2fdfq9+XP7eRtubdf1KInqe8i6+vOTTfmwovWuL1DiQFDs/uy7TLEl1cdou5e FzXEzG4iY1HYLsLdDMyz46bzH5GPbLJywb1F8iOviEOXy4lF51cxKtV9OiGozBfH bpCv5K6gIHlKdZ6th9h+/1gNdjA1FjloVtWFEuiWvZrT78li86EoLnWtOMH+LJeX 9C62Xy997EpT9rdKWbHZpCHcDZ/jv0gNOT2J0TW24NwWhS4iS3dERsu+15brRWun xNxbEsMeqqjL5EpiS6IGsb50ZmhTJQQ= -----END CERTIFICATE-----Generated at Sat Sep 26 04:05:58 2026 by rpki-client