$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa File: 3c427830-987a-3e1f-b4e3-0546d0f346af.roa (raw, json) Hash identifier: LtI58Dbxt6l/U0m5L3/7N5vku5hVO7+7qpMh4TMAE54= Subject key identifier: 78:3F:0E:76:E6:66:D0:4E:76:C0:89:F8:58:67:4F:B7:2D:B5:E9:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498904A6A70CC791781A0E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.23.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:04:a6:a7:0c:c7:91:78:1a:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6bedfb86-9206-4f61-858f-f239edbd72dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:39:4c:a5:fa:c7:bc:f9:59:41:69:64:75: fd:52:8e:0b:e8:cc:b0:e6:16:8c:66:58:7a:37:83: b6:eb:54:02:0a:17:25:5e:fc:fe:f0:29:e2:90:15: c4:17:3c:01:8d:c5:64:3f:ca:48:96:b1:88:04:ff: 8c:48:43:cc:7b:c4:db:0a:5a:ea:8d:dc:53:3a:86: 09:2a:a3:9f:1c:30:49:f0:b0:38:90:26:ca:7c:f1: ff:9c:4c:65:b8:db:ea:d2:c2:37:37:9f:d3:ac:9e: 3e:e1:17:8a:e4:46:60:db:ab:9b:32:b9:ff:6d:af: ee:ec:75:b7:5a:cb:32:3d:88:f8:db:4b:f9:b1:60: 18:27:15:e4:c4:58:22:23:51:83:81:4f:0a:f8:6e: 1e:bd:e5:24:3c:fd:f2:af:39:1e:d5:92:a4:8a:23: 03:fb:a9:a0:06:0d:b4:24:d4:5c:d4:a8:5b:34:6c: ec:5d:8a:2e:70:db:9a:a9:33:af:a2:de:22:cd:b2: b9:af:38:db:1c:9f:37:51:1f:16:af:99:20:cf:08: d0:10:60:6f:6d:e7:57:3b:22:c9:51:bf:8e:29:a1: 6d:3a:f7:a2:47:3b:5c:e9:f7:3a:1c:d1:13:d5:c2: a9:dd:1c:8e:7f:c7:26:ea:45:a9:d4:4d:c0:58:29: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3F:0E:76:E6:66:D0:4E:76:C0:89:F8:58:67:4F:B7:2D:B5:E9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ad:52:5a:4c:bc:9a:50:7e:2c:9e:6c:33:c7:19:4a:d5:b3: da:5f:23:43:e0:3b:ca:e6:e1:9e:4b:7f:60:a7:21:2c:8b:6b: fb:d0:24:d4:48:8e:e1:b0:05:fa:88:d4:1d:94:2f:6c:e0:9f: 03:52:47:f9:51:7a:c7:dc:4c:ee:d2:42:fa:40:ca:46:e2:c8: 10:4b:56:51:37:cb:8d:90:9e:b7:c3:fb:82:91:50:99:0a:75: 9e:95:2b:66:55:54:8b:fc:5e:0f:03:c4:6b:57:2e:76:61:50: b1:68:06:a4:2d:a8:a1:2a:73:ec:e5:e0:21:24:3e:5f:da:f1: 91:61:b1:11:58:09:b9:c6:ef:36:34:68:a2:cb:b2:cc:a9:0f: d6:08:45:86:5b:dc:be:2e:40:26:1c:08:6f:ad:53:7d:6e:cd: 6a:a4:4e:13:d1:b8:47:29:98:cf:d9:18:ba:d4:69:87:82:26: cf:a3:1f:8c:e3:80:a1:ab:5c:30:3b:bf:3c:9a:00:28:e1:d6: 08:1d:9c:17:09:6d:60:df:2f:37:fa:16:f7:ee:9d:75:a1:57: 97:ba:6e:78:f3:a0:c0:04:19:d9:5e:63:74:12:cf:0c:a6:7e: bf:1e:7e:06:4d:1a:da:b5:bb:69:a2:34:a3:16:36:a7:c5:a0: eb:35:15:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQSmpwzHkXgaDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmJlZGZiODYtOTIwNi00ZjYxLTg1OGYtZjIzOWVkYmQ3MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOs5TKX6x7z5WUFpZHX9Uo4L6Myw5haMZlh6 N4O261QCChclXvz+8CnikBXEFzwBjcVkP8pIlrGIBP+MSEPMe8TbClrqjdxTOoYJ KqOfHDBJ8LA4kCbKfPH/nExluNvq0sI3N5/TrJ4+4ReK5EZg26ubMrn/ba/u7HW3 WssyPYj420v5sWAYJxXkxFgiI1GDgU8K+G4eveUkPP3yrzke1ZKkiiMD+6mgBg20 JNRc1KhbNGzsXYoucNuaqTOvot4izbK5rzjbHJ83UR8Wr5kgzwjQEGBvbedXOyLJ Ub+OKaFtOveiRztc6fc6HNET1cKp3RyOf8cm6kWp1E3AWClJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg/DnbmZtBOdsCJ+FhnT7cttelXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M0Mjc4MzAtOTg3YS0z ZTFmLWI0ZTMtMDU0NmQwZjM0NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+tUlpMvJpQfiyebDPHGUrVs9pfI0PgO8rm4Z5Lf2CnISyLa/vQJNRI juGwBfqI1B2UL2zgnwNSR/lResfcTO7SQvpAykbiyBBLVlE3y42QnrfD+4KRUJkK dZ6VK2ZVVIv8Xg8DxGtXLnZhULFoBqQtqKEqc+zl4CEkPl/a8ZFhsRFYCbnG7zY0 aKLLssypD9YIRYZb3L4uQCYcCG+tU31uzWqkThPRuEcpmM/ZGLrUaYeCJs+jH4zj gKGrXDA7vzyaACjh1ggdnBcJbWDfLzf6FvfunXWhV5e6bnjzoMAEGdleY3QSzwym fr8efgZNGtq1u2miNKMWNqfFoOs1FaI= -----END CERTIFICATE-----Generated at Sat Sep 26 22:22:59 2026 by rpki-client