$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa File: 33970069-3209-3c10-8707-5939c7c3d774.roa (raw, json) Hash identifier: pO4bzxUZ3HvMnMHi93bEx7c67fk/6Qd5xi9E8CPybXA= Subject key identifier: 6D:6F:68:CC:25:06:EF:0A:3C:1C:86:BD:BD:A1:5C:44:31:1A:D9:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6F3446C3A70B178CD200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.16.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6f:34:46:c3:a7:0b:17:8c:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f7ff50e3-331b-4d0f-89de-e87a7c55dd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:6a:71:34:36:f7:4f:65:bf:76:90:fe:16: 66:02:55:c2:20:71:72:36:1e:9c:8d:7e:8f:74:e7: 64:42:1d:98:71:83:38:03:f0:05:c3:e5:84:e7:76: 7b:50:19:d6:3e:77:18:c2:45:2c:f1:84:c3:63:7d: 9a:f9:59:58:67:cb:2d:5a:fa:7f:8e:f7:ad:a3:41: 23:1c:30:d2:a6:69:4d:15:7d:cc:26:ec:8a:c5:4e: c2:80:d0:ea:05:cb:9f:66:24:32:57:77:ea:79:8b: c1:64:ce:01:89:fa:3d:14:45:ab:d0:87:24:8b:cb: fc:21:da:12:f0:05:df:a1:ce:25:a5:72:75:85:3e: 09:98:52:ff:b6:13:7b:63:46:b7:e7:d9:b4:a4:e0: a9:56:b4:77:fa:bc:f3:9b:72:4e:7a:f5:e0:b8:e7: 01:ea:75:e0:a8:f5:df:80:ba:02:5b:cc:44:2e:a7: 48:26:15:f6:3e:52:af:89:bf:b5:5c:e6:04:e8:41: 46:60:55:1e:04:b7:1d:6e:b9:b5:f4:ba:8e:13:cc: 05:c0:1e:e8:0a:8b:be:37:b5:1d:47:24:06:89:92: 6b:93:c3:46:6a:d0:be:85:69:3a:40:f2:89:64:d2: 41:32:d3:6a:9e:ec:25:0d:f6:5e:83:d9:01:3d:53: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:68:CC:25:06:EF:0A:3C:1C:86:BD:BD:A1:5C:44:31:1A:D9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:47:dc:68:f6:a4:0a:b1:34:d8:ff:68:fb:81:51:38:42:a5: 08:a2:aa:1d:8b:7a:25:55:a2:eb:16:80:ce:b2:46:2d:d9:5f: e3:0c:7c:73:20:59:b7:e6:23:34:0c:7c:05:f6:f0:ca:1c:24: b9:d3:c3:9e:9c:66:5f:cf:0a:32:54:e4:66:56:db:f2:7c:bd: 63:02:0a:31:cd:a9:1f:e1:87:f7:cb:5a:37:bf:e5:1d:3e:c7: aa:47:6a:18:93:de:b6:a2:b9:ad:ff:db:e1:4c:54:f7:5c:e5: a5:d9:10:4d:dc:d1:68:a3:b1:c9:52:b4:c9:03:84:3b:27:70: b6:a3:b3:cc:90:ed:5b:71:77:b7:2d:54:18:51:f8:fe:33:49: 6a:77:bc:d8:a5:1e:e8:8a:92:ba:ed:d0:59:2b:6f:35:0c:65: ab:af:0b:6b:e5:0b:06:13:a2:cd:d8:88:1b:9c:6b:3d:ee:72: 66:75:5f:3a:ac:9d:6f:29:e7:93:0c:8d:ab:d3:89:52:ba:e2: c3:c8:ea:91:10:80:11:40:f5:d2:48:73:99:a8:14:4a:1f:45: d5:17:f7:73:e4:c2:e0:32:5b:d9:f7:76:ba:b8:e1:45:f6:20: f0:f2:35:25:66:ec:18:72:a9:09:1f:ac:a2:63:62:d6:81:03: 14:51:47:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW80RsOnCxeM0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjdmZjUwZTMtMzMxYi00ZDBmLTg5ZGUtZTg3YTdjNTVkZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApotqcTQ2909lv3aQ/hZmAlXCIHFyNh6cjX6P dOdkQh2YcYM4A/AFw+WE53Z7UBnWPncYwkUs8YTDY32a+VlYZ8stWvp/jveto0Ej HDDSpmlNFX3MJuyKxU7CgNDqBcufZiQyV3fqeYvBZM4Bifo9FEWr0Icki8v8IdoS 8AXfoc4lpXJ1hT4JmFL/thN7Y0a359m0pOCpVrR3+rzzm3JOevXguOcB6nXgqPXf gLoCW8xELqdIJhX2PlKvib+1XOYE6EFGYFUeBLcdbrm19LqOE8wFwB7oCou+N7Ud RyQGiZJrk8NGatC+hWk6QPKJZNJBMtNqnuwlDfZeg9kBPVOihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1vaMwlBu8KPByGvb2hXEQxGtlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzM5NzAwNjktMzIwOS0z YzEwLTg3MDctNTkzOWM3YzNkNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtH3Gj2pAqxNNj/aPuBUThCpQiiqh2LeiVVousWgM6yRi3ZX+MMfHMg WbfmIzQMfAX28MocJLnTw56cZl/PCjJU5GZW2/J8vWMCCjHNqR/hh/fLWje/5R0+ x6pHahiT3raiua3/2+FMVPdc5aXZEE3c0WijsclStMkDhDsncLajs8yQ7Vtxd7ct VBhR+P4zSWp3vNilHuiKkrrt0FkrbzUMZauvC2vlCwYTos3YiBucaz3ucmZ1Xzqs nW8p55MMjavTiVK64sPI6pEQgBFA9dJIc5moFEofRdUX93PkwuAyW9n3drq44UX2 IPDyNSVm7BhyqQkfrKJjYtaBAxRRR0g= -----END CERTIFICATE-----Generated at Sun Oct 11 09:38:18 2026 by rpki-client