$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa File: 47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa (raw, json) Hash identifier: pMxoEOB3Rel0rRlVT2Vch493kREFMWx/W/U2uAp/T54= Subject key identifier: BD:F9:B2:66:96:04:90:94:22:A3:1B:67:C4:18:AA:2D:7B:89:1A:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B50B75E4EFB336C3A1798 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:50:b7:5e:4e:fb:33:6c:3a:17:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9618e29-4174-43cd-9e32-55a36e04c72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:6c:4a:9e:6b:f8:40:82:ca:9c:58:e4:82: a7:62:a2:f9:df:de:30:e5:25:5b:b0:c9:63:d3:be: 53:56:67:41:2c:11:f4:40:b2:dc:9a:cf:e8:74:9c: 20:6f:ef:50:c0:a5:11:36:bf:8e:eb:a3:1e:a0:6b: 37:5b:30:34:68:d3:d4:65:f9:5d:6b:c4:59:42:3e: f7:7d:84:ff:32:01:66:25:7f:ef:ca:99:4f:86:e9: 3a:86:8a:36:2b:5a:8e:86:ea:39:ce:e0:4a:87:9b: cf:86:96:91:c1:4c:df:0e:d8:0a:7c:19:ba:ac:33: 15:5c:83:d8:53:e0:ed:27:d2:ab:f4:4e:8a:07:49: b1:a8:f4:3b:4a:e4:89:d4:48:1f:6b:cd:e7:9d:36: 54:b2:2a:0e:3f:39:02:34:3d:66:b4:83:5b:8f:34: 01:31:88:48:1b:a8:e2:18:1b:75:47:86:50:03:0c: fe:28:c0:75:29:18:25:5b:e1:25:b2:25:dd:eb:e4: dc:69:ff:b6:8c:ed:66:15:08:23:4d:49:49:58:49: ca:f8:46:e7:62:ae:f0:35:5c:54:76:94:71:4f:71: 1d:36:db:4c:5d:f5:7e:f2:2a:42:d6:98:86:6d:d7: fe:b9:a5:9a:2b:4c:f0:64:05:d4:65:03:26:20:26: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:B2:66:96:04:90:94:22:A3:1B:67:C4:18:AA:2D:7B:89:1A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:67:f9:df:1d:72:df:3e:68:ee:c8:1b:94:7d:19:a8:e1:fb: 3b:18:87:d1:09:7f:a5:d6:c1:66:fe:f8:a4:7f:5e:13:44:7d: e4:9d:0e:ad:c3:b8:79:82:5e:9b:9f:b6:ba:28:76:5b:0f:73: a6:85:0f:ff:ea:19:22:96:69:14:68:1b:6c:9d:f2:b4:59:18: d7:c4:5e:d0:12:0d:5b:8e:f4:35:b1:2a:bf:f0:ff:ea:8f:13: 27:4e:f9:59:ea:18:9e:14:58:60:92:dc:2c:96:73:91:00:75: b5:c5:7e:be:ac:0a:e1:be:52:bb:d3:23:99:6f:ff:06:b7:e4: 13:d6:2e:f0:24:39:18:29:e3:6d:af:71:fe:e2:52:46:bc:35: e6:fe:82:41:d5:64:50:27:86:1b:c1:61:e1:0d:af:56:9d:d2: cc:7d:b8:f7:b2:df:15:fd:d9:0e:66:d9:f7:22:84:d8:4d:0a: 1a:18:ae:cc:3e:a1:5f:9b:92:83:16:ea:a2:5a:e0:67:e5:e7: bf:d2:53:37:7a:f6:b9:6a:97:af:1f:d9:e8:c2:9e:c4:df:8b: 8d:f9:cb:2a:2b:c7:ef:a0:c7:34:0e:ed:f2:ce:87:be:89:bb: 5e:07:71:57:55:29:f2:9e:ef:e9:0c:13:5e:d6:de:22:02:50: fc:d4:ca:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1C3Xk77M2w6F5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk2MThlMjktNDE3NC00M2NkLTllMzItNTVhMzZlMDRjNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn1sSp5r+ECCypxY5IKnYqL5394w5SVbsMlj 075TVmdBLBH0QLLcms/odJwgb+9QwKURNr+O66MeoGs3WzA0aNPUZflda8RZQj73 fYT/MgFmJX/vyplPhuk6hoo2K1qOhuo5zuBKh5vPhpaRwUzfDtgKfBm6rDMVXIPY U+DtJ9Kr9E6KB0mxqPQ7SuSJ1Egfa83nnTZUsioOPzkCND1mtINbjzQBMYhIG6ji GBt1R4ZQAwz+KMB1KRglW+ElsiXd6+Tcaf+2jO1mFQgjTUlJWEnK+EbnYq7wNVxU dpRxT3EdNttMXfV+8ipC1piGbdf+uaWaK0zwZAXUZQMmICYuAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL35smaWBJCUIqMbZ8QYqi17iRomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDdmNmU2OWItODY3MS0z ZTA3LTg3NDAtMWFmZjVhYzVmNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJn+d8dct8+aO7IG5R9Gajh+zsYh9EJf6XWwWb++KR/XhNEfeSdDq3D uHmCXpuftroodlsPc6aFD//qGSKWaRRoG2yd8rRZGNfEXtASDVuO9DWxKr/w/+qP EydO+VnqGJ4UWGCS3CyWc5EAdbXFfr6sCuG+UrvTI5lv/wa35BPWLvAkORgp422v cf7iUka8Neb+gkHVZFAnhhvBYeENr1ad0sx9uPey3xX92Q5m2fcihNhNChoYrsw+ oV+bkoMW6qJa4Gfl57/SUzd69rlql68f2ejCnsTfi435yyorx++gxzQO7fLOh76J u14HcVdVKfKe7+kME17W3iICUPzUypM= -----END CERTIFICATE-----Generated at Sun Sep 27 14:50:09 2026 by rpki-client