$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa File: 41821b7b-ed24-3365-9e0e-7db6422bd17d.roa (raw, json) Hash identifier: VPczR+KI2McE8sEIQK0ZPFbV+bNEmiK9cDo6qK6xYBg= Subject key identifier: 04:53:89:52:EC:E3:88:B3:F0:5D:30:A8:92:A7:1E:4D:0F:80:39:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497366C2ACEF1DFAD7FEF380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:66:c2:ac:ef:1d:fa:d7:fe:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b7308da5-0d8b-4c71-8c9f-593483b19107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a0:49:52:ac:2d:ff:49:1e:31:c8:d0:82:26: 6b:9b:65:2f:e9:93:ea:d2:f4:7b:d2:53:f9:49:3c: df:e1:0b:0a:08:a5:e0:11:a3:2f:cb:69:05:13:17: 43:3d:90:da:a7:e4:fb:42:6f:69:3a:26:a1:23:56: c2:a5:6c:39:32:f3:5a:2e:cb:d3:54:2d:19:b7:3a: f7:9e:9a:5e:c6:bd:97:d5:46:05:dd:d1:d2:f3:cf: 76:a4:99:a9:23:f8:a3:e2:08:63:b9:66:9a:36:fe: 41:5b:ff:db:63:75:a5:49:04:06:ca:98:fc:06:89: 46:ea:05:dd:b4:77:51:83:87:f5:97:8b:16:1b:34: 4e:c6:5d:fb:f3:fd:7c:d1:fc:9e:7a:63:8f:c0:8a: 31:d5:55:d8:d0:90:48:ec:8d:f1:4c:24:16:c9:16: 05:ef:2b:64:e4:88:dc:21:a3:20:e0:13:fc:a9:04: c5:4b:4f:6d:1f:66:36:6e:a0:89:d9:22:ad:75:87: 19:87:be:00:59:b9:76:a3:df:6a:5a:53:25:27:6d: 61:7b:42:a6:52:bb:47:c2:b4:f7:ba:01:20:e6:37: ef:00:aa:2c:be:ae:a1:41:23:ec:73:d2:ac:ff:d2: ed:7f:e0:2c:44:b1:ce:b4:e7:b0:cd:87:61:f3:55: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:89:52:EC:E3:88:B3:F0:5D:30:A8:92:A7:1E:4D:0F:80:39:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f4:19:71:2c:0f:04:23:21:95:27:6b:e3:89:f9:a4:d1:ac: 11:55:81:d2:d8:f0:05:47:9f:83:db:16:fd:f3:36:c3:5d:20: b4:54:2d:1a:33:8e:09:80:03:15:f2:08:e1:5f:6f:be:a9:d6: 0c:22:70:7b:a8:c7:c4:f6:65:a6:07:05:c0:8b:03:b3:ae:64: fd:0f:ea:a8:b2:4d:14:fd:a9:e5:17:2a:4b:6f:0a:7a:44:7e: 28:84:8c:93:50:f5:bf:69:5f:40:d2:c7:e6:74:47:18:cc:15: 38:7d:ab:7e:3c:20:b3:ad:c4:95:36:de:35:98:35:bd:f8:20: e7:25:c3:55:c7:83:60:c1:13:6c:cf:9e:04:35:4c:d4:7d:9a: 40:1a:5f:08:d8:82:a3:ad:31:32:28:a5:80:3c:cd:81:e1:b2: 51:08:4a:93:30:77:52:c2:43:96:1b:39:0f:bc:ba:61:15:ac: c7:fb:f8:f7:27:9a:43:1b:9a:1c:ae:76:ac:0f:f3:70:d8:9b: ae:f4:8b:bb:9f:13:fe:7e:be:50:06:eb:fc:82:a5:62:77:e7: 2c:e2:98:72:e0:c8:66:d9:a0:15:82:00:7c:14:46:8c:b9:57: 38:b9:57:ed:42:fa:52:f1:66:a5:d2:26:a0:05:15:4d:6d:78: 43:fa:fb:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2bCrO8d+tf+84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjczMDhkYTUtMGQ4Yi00YzcxLThjOWYtNTkzNDgzYjE5MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6BJUqwt/0keMcjQgiZrm2Uv6ZPq0vR70lP5 STzf4QsKCKXgEaMvy2kFExdDPZDap+T7Qm9pOiahI1bCpWw5MvNaLsvTVC0Ztzr3 nppexr2X1UYF3dHS8892pJmpI/ij4ghjuWaaNv5BW//bY3WlSQQGypj8BolG6gXd tHdRg4f1l4sWGzROxl378/180fyeemOPwIox1VXY0JBI7I3xTCQWyRYF7ytk5Ijc IaMg4BP8qQTFS09tH2Y2bqCJ2SKtdYcZh74AWbl2o99qWlMlJ21he0KmUrtHwrT3 ugEg5jfvAKosvq6hQSPsc9Ks/9Ltf+AsRLHOtOewzYdh81UzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARTiVLs44iz8F0wqJKnHk0PgDlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDE4MjFiN2ItZWQyNC0z MzY1LTllMGUtN2RiNjQyMmJkMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL0GXEsDwQjIZUna+OJ+aTRrBFVgdLY8AVHn4PbFv3zNsNdILRULRoz jgmAAxXyCOFfb76p1gwicHuox8T2ZaYHBcCLA7OuZP0P6qiyTRT9qeUXKktvCnpE fiiEjJNQ9b9pX0DSx+Z0RxjMFTh9q348ILOtxJU23jWYNb34IOclw1XHg2DBE2zP ngQ1TNR9mkAaXwjYgqOtMTIopYA8zYHhslEISpMwd1LCQ5YbOQ+8umEVrMf7+Pcn mkMbmhyudqwP83DYm670i7ufE/5+vlAG6/yCpWJ35yzimHLgyGbZoBWCAHwURoy5 Vzi5V+1C+lLxZqXSJqAFFU1teEP6+z4= -----END CERTIFICATE-----Generated at Mon Sep 28 14:18:52 2026 by rpki-client