$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1442c7cf-ecbc-3915-b6e4-7fa9310eeb00.roa File: 1442c7cf-ecbc-3915-b6e4-7fa9310eeb00.roa (raw, json) Hash identifier: ivQu1RrD2bgL6/IgB5Q8LZRZMGtVTtI/dDeRwrdkZz4= Subject key identifier: 89:F6:C1:96:86:EE:4F:6A:71:F0:87:3A:EF:7B:8D:15:EA:9C:08:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0672A666A1F1A68E8904FB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1442c7cf-ecbc-3915-b6e4-7fa9310eeb00.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a6:66:a1:f1:a6:8e:89:04:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=a52495d0-ac00-4538-895e-10781d7c2af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:92:70:14:40:37:29:d2:1d:12:5d:6b:f8:4a: 64:d7:d6:19:6e:96:a2:06:28:23:16:1d:6a:1c:d6: ab:28:c3:68:4f:46:ce:03:23:a3:d0:78:c1:2a:8e: c2:80:af:21:c4:dc:84:b3:3b:39:21:95:32:e3:4a: 1c:3f:02:4e:41:0c:24:b2:89:02:6e:1d:33:b9:26: ea:78:71:ea:3e:7b:86:11:89:01:e9:8e:f8:52:a3: c9:43:09:76:15:9b:5e:cd:76:e7:22:0b:c9:10:5a: 17:25:a0:4e:66:87:6f:d4:f3:8d:83:7f:f3:b8:41: d6:44:51:13:e7:1a:e1:4a:82:df:d8:29:06:91:2f: fe:29:7c:a3:57:1c:d8:36:cd:c7:52:2f:23:0f:64: 65:6f:98:89:3d:4a:2b:f5:3a:ff:19:11:43:85:18: 76:4a:f0:c2:20:5a:52:4f:b5:f5:51:e0:fc:90:48: df:92:66:dc:7e:92:29:01:2d:82:87:10:bf:93:58: a5:36:1e:98:1d:46:26:c8:76:30:62:0a:b9:0b:58: 15:5d:16:9c:23:9e:a7:55:3e:36:1b:b2:fd:8f:0f: e4:da:9c:f5:1a:8d:74:64:f7:89:6b:b9:be:c9:8e: 1b:57:36:a8:fc:52:89:72:7f:2a:06:45:93:8e:a2: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F6:C1:96:86:EE:4F:6A:71:F0:87:3A:EF:7B:8D:15:EA:9C:08:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1442c7cf-ecbc-3915-b6e4-7fa9310eeb00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:17:65:fc:f1:89:64:b4:5f:00:0a:98:5e:92:00:fe:a0:cd: f9:bd:48:51:60:d6:f2:be:2b:fc:24:02:9d:e4:a5:c9:5e:0d: 29:94:bd:aa:5f:23:b9:29:c2:c0:e5:43:43:8e:78:cf:37:d6: 16:5a:5e:a9:29:09:be:3b:89:01:10:f8:b1:8a:78:ce:c4:9b: c7:c6:3f:07:6b:d0:c9:3a:5d:44:1a:42:2b:ed:b6:f7:67:c5: c7:62:29:5b:ca:c8:02:73:f9:db:4b:aa:86:11:ee:06:1d:31: b8:c5:e4:2e:3f:a1:c8:36:3f:84:94:b4:40:df:11:96:80:cc: 1d:8a:63:a1:82:ab:a4:4e:11:a8:b2:93:61:41:6c:87:52:74: 92:e3:2e:d0:8c:6f:e5:cd:41:1f:47:26:18:e0:7a:f9:94:9b: cc:b4:ed:ab:df:dd:15:0c:05:c8:c1:da:f1:1c:6c:82:f9:f9: 0f:29:14:b3:b5:b6:11:9b:63:35:35:1b:e1:62:30:a5:fd:65: 1e:b3:3f:21:94:cd:13:94:d4:23:cd:2d:18:c9:95:ac:d8:6a: 37:f0:eb:9e:81:4c:76:5e:ad:aa:d7:c0:55:93:8e:48:47:a0: 9a:de:bb:8c:c2:aa:82:35:2a:44:21:2c:78:bc:d5:4e:1e:8f: 43:2f:a4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqZmofGmjokE+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YTUyNDk1ZDAtYWMwMC00NTM4LTg5NWUtMTA3ODFkN2MyYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pJwFEA3KdIdEl1r+Epk19YZbpaiBigjFh1q HNarKMNoT0bOAyOj0HjBKo7CgK8hxNyEszs5IZUy40ocPwJOQQwksokCbh0zuSbq eHHqPnuGEYkB6Y74UqPJQwl2FZtezXbnIgvJEFoXJaBOZodv1PONg3/zuEHWRFET 5xrhSoLf2CkGkS/+KXyjVxzYNs3HUi8jD2Rlb5iJPUor9Tr/GRFDhRh2SvDCIFpS T7X1UeD8kEjfkmbcfpIpAS2ChxC/k1ilNh6YHUYmyHYwYgq5C1gVXRacI56nVT42 G7L9jw/k2pz1Go10ZPeJa7m+yY4bVzao/FKJcn8qBkWTjqI6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn2wZaG7k9qcfCHOu97jRXqnAiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQ0MmM3Y2YtZWNiYy0z OTE1LWI2ZTQtN2ZhOTMxMGVlYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEXZfzxiWS0XwAKmF6SAP6gzfm9SFFg1vK+K/wkAp3kpcleDSmUvapf I7kpwsDlQ0OOeM831hZaXqkpCb47iQEQ+LGKeM7Em8fGPwdr0Mk6XUQaQivttvdn xcdiKVvKyAJz+dtLqoYR7gYdMbjF5C4/ocg2P4SUtEDfEZaAzB2KY6GCq6ROEaiy k2FBbIdSdJLjLtCMb+XNQR9HJhjgevmUm8y07avf3RUMBcjB2vEcbIL5+Q8pFLO1 thGbYzU1G+FiMKX9ZR6zPyGUzROU1CPNLRjJlazYajfw656BTHZerarXwFWTjkhH oJreu4zCqoI1KkQhLHi81U4ej0MvpNA= -----END CERTIFICATE-----Generated at Sun Sep 27 19:31:08 2026 by rpki-client