$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33f7e2a5-72ed-3933-9765-212fa199530f.roa File: 33f7e2a5-72ed-3933-9765-212fa199530f.roa (raw, json) Hash identifier: UFX0pHhsmBExjIYgttlro29wjZt5veEwDCv4Rl5ekDk= Subject key identifier: C1:F3:EC:57:25:5D:1E:FE:4C:F8:88:10:A4:51:01:01:A0:52:B8:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498C1BC7A1C323256DE41200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33f7e2a5-72ed-3933-9765-212fa199530f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1b:c7:a1:c3:23:25:6d:e4:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbdec3a9-1a77-48a5-99a7-8639dd8e5f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:27:71:6c:21:ae:a8:6b:01:22:ec:6b:3c: d7:ab:c4:8b:84:b0:ab:42:6d:21:4c:ba:7f:b8:f3: 14:cd:1d:ee:c2:2f:c8:8f:9c:ec:29:3f:be:28:9f: c7:e5:0b:18:7f:68:42:6c:cf:c7:dc:17:b5:a2:fb: 90:c9:f2:5f:ce:2c:19:de:90:b5:95:ae:42:11:d1: 9e:42:1a:c7:66:69:59:45:fd:cf:8d:13:6a:1d:0a: 9e:36:d5:a0:8a:03:48:9a:db:db:cd:49:90:79:44: 06:69:dc:c8:78:67:b5:64:f5:f9:9f:0d:2c:68:bd: 6b:5f:db:ca:d8:a0:ae:3d:0b:5d:01:5e:d8:81:5a: fb:75:f0:79:24:2f:4c:bb:0f:b9:a1:e4:48:27:ed: 70:94:f4:e6:e3:45:61:66:45:c4:a7:d8:52:69:6a: 5b:a2:9b:4b:7b:f4:7c:4b:05:3c:7a:25:26:a3:c6: 2c:15:c4:6f:d1:46:4d:61:08:02:f1:9c:18:ef:5c: 6b:3d:1c:4d:2b:4a:f0:51:be:1a:21:22:81:07:73: cf:64:14:52:68:ba:9c:c2:67:95:4c:06:6e:d3:70: ea:a5:25:ee:8a:48:35:79:83:eb:5d:ae:12:3e:f0: 1e:27:1a:56:e2:a6:3e:2f:38:66:3c:be:7a:03:86: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F3:EC:57:25:5D:1E:FE:4C:F8:88:10:A4:51:01:01:A0:52:B8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33f7e2a5-72ed-3933-9765-212fa199530f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9e:dc:bd:05:90:04:3a:85:ab:65:44:97:4c:f2:e7:f4:79: 5d:be:a9:3e:9b:0f:c7:87:bb:48:54:ad:15:c7:8a:e8:17:fa: 96:e2:6d:cc:66:3d:6a:1d:cd:e0:c7:91:92:11:11:36:31:64: ef:ea:bf:38:59:7e:39:e1:74:31:aa:51:d8:8a:ec:70:63:ec: 0e:aa:eb:ce:cd:20:f6:bd:58:9b:68:58:cd:c5:1d:3d:76:90: cd:ec:7c:04:90:d2:8e:48:67:59:93:e8:a4:75:05:47:16:41: bb:f2:8c:d8:2b:64:0b:4b:1d:58:8d:32:2f:9f:f0:20:6b:bb: 7a:fb:23:fa:de:b2:14:91:c1:5e:9e:d3:81:61:0d:24:df:48: ab:6e:c8:f9:f9:b8:b0:85:f5:db:c2:d8:22:ef:63:e4:a2:44: 32:48:8a:ea:7c:dc:c8:aa:01:88:a4:bc:58:36:5c:52:7f:cd: fb:5f:ed:6e:ba:8f:bc:b7:9a:1b:fe:21:bc:0e:f2:e2:7f:6c: ab:2e:dc:4f:1a:1f:d2:48:7b:1c:03:03:18:06:0d:9a:80:5f: 94:62:28:2e:1f:96:5e:e9:f6:d0:e7:8b:07:ac:44:2f:a4:9a: 68:ab:03:e2:91:45:7b:52:0f:d2:09:7a:25:62:a4:ba:04:83: 8d:3b:04:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBvHocMjJW3kEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJkZWMzYTktMWE3Ny00OGE1LTk5YTctODYzOWRkOGU1ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfEncWwhrqhrASLsazzXq8SLhLCrQm0hTLp/ uPMUzR3uwi/Ij5zsKT++KJ/H5QsYf2hCbM/H3Be1ovuQyfJfziwZ3pC1la5CEdGe QhrHZmlZRf3PjRNqHQqeNtWgigNImtvbzUmQeUQGadzIeGe1ZPX5nw0saL1rX9vK 2KCuPQtdAV7YgVr7dfB5JC9Muw+5oeRIJ+1wlPTm40VhZkXEp9hSaWpboptLe/R8 SwU8eiUmo8YsFcRv0UZNYQgC8ZwY71xrPRxNK0rwUb4aISKBB3PPZBRSaLqcwmeV TAZu03DqpSXuikg1eYPrXa4SPvAeJxpW4qY+LzhmPL56A4Zt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHz7FclXR7+TPiIEKRRAQGgUrjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzNmN2UyYTUtNzJlZC0z OTMzLTk3NjUtMjEyZmExOTk1MzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWe3L0FkAQ6hatlRJdM8uf0eV2+qT6bD8eHu0hUrRXHiugX+pbibcxm PWodzeDHkZIRETYxZO/qvzhZfjnhdDGqUdiK7HBj7A6q687NIPa9WJtoWM3FHT12 kM3sfASQ0o5IZ1mT6KR1BUcWQbvyjNgrZAtLHViNMi+f8CBru3r7I/reshSRwV6e 04FhDSTfSKtuyPn5uLCF9dvC2CLvY+SiRDJIiup83MiqAYikvFg2XFJ/zftf7W66 j7y3mhv+IbwO8uJ/bKsu3E8aH9JIexwDAxgGDZqAX5RiKC4fll7p9tDniwesRC+k mmirA+KRRXtSD9IJeiVipLoEg407BPU= -----END CERTIFICATE-----Generated at Sun Sep 27 08:21:04 2026 by rpki-client