$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa File: 4ef047c8-a88e-3686-a62b-79f6c48536e9.roa (raw, json) Hash identifier: cCxv2foiIZq05YSJNIQsDNQ8VnA7AXrI8G/LvidC+n8= Subject key identifier: B0:54:94:42:5C:59:79:C1:C6:62:DE:1F:C4:FA:0F:93:5F:74:41:31 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497431D3FA6932D244F36A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:31:d3:fa:69:32:d2:44:f3:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb7f1187-5c4a-41dc-80ec-1f64f44f8706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:18:9a:9c:60:2c:c6:e8:fa:b9:2a:78:f3: a4:11:a3:d2:6b:71:05:70:21:a9:63:dd:80:2b:a8: bf:7d:63:62:40:6e:f4:2b:b5:38:29:22:a9:e6:cb: a0:df:9d:1f:2c:84:a4:6e:77:d4:da:9c:db:94:72: b4:ca:f7:3b:a9:c8:1e:eb:fe:99:f9:97:21:55:b5: 74:d7:3c:ed:52:12:08:a0:fa:5a:5a:63:f3:0c:70: a3:2f:82:8f:89:29:9d:3f:24:9e:f2:8e:8b:02:7b: 2f:e7:86:8e:d2:0d:4e:34:72:eb:85:96:92:7e:d1: ca:32:a1:72:33:6e:86:07:8b:28:ad:ac:91:5d:84: b7:6d:c8:3f:89:f4:23:fb:d6:50:e7:3c:e2:84:f2: 03:e7:86:b4:79:2f:27:58:62:2a:da:4c:cc:22:2a: a9:58:ab:e9:d0:c3:ac:03:92:1b:f8:35:14:79:77: 86:de:76:19:44:91:76:f3:f2:51:df:cf:9b:9c:d8: ab:19:1d:53:d7:5f:e7:ac:1d:50:6c:71:10:5f:c2: b6:fa:27:4e:21:3b:08:b5:6a:df:d3:92:ea:d7:0d: 00:c5:80:2b:b7:68:f2:c7:57:98:c2:3a:41:2c:7d: e0:45:54:2e:ed:3f:9d:b7:d9:d3:88:e4:3f:56:0a: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:94:42:5C:59:79:C1:C6:62:DE:1F:C4:FA:0F:93:5F:74:41:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bc:16:14:fc:db:36:ef:60:5c:d3:7d:5b:74:28:bc:52:03: c9:a3:33:d9:c8:fc:8c:71:bd:bf:58:be:b0:14:15:19:3c:70: 22:ff:48:c3:92:24:14:c4:4a:89:30:c8:07:34:72:9b:b3:68: 19:57:95:e9:37:21:0f:6c:36:06:d7:74:b6:59:ca:be:e2:f6: 2c:1a:dc:4e:8a:e8:3a:d2:11:40:17:ba:75:81:34:fd:bf:65: 9d:2f:b4:b4:05:21:94:fe:a4:f7:3b:a6:f3:70:0a:80:ae:40: 14:bf:f7:df:9d:59:53:44:e5:ec:0c:87:94:4d:4c:89:fb:50: 4c:1c:50:0b:e7:4a:99:70:5c:fe:d6:d8:47:34:ec:91:74:41: de:75:6a:a5:97:08:42:09:3d:e3:b8:70:a3:50:24:c5:f7:09: bc:d6:9f:ce:ce:cd:08:e3:2f:b9:ad:8e:ab:10:fd:51:25:bd: 13:44:5d:3a:ab:66:3d:cf:31:b6:20:d0:3f:1a:3a:b7:42:9c: c4:04:c2:52:9b:e2:96:a2:0e:81:27:65:33:36:96:4d:88:c1: dc:72:a1:ae:14:5b:36:1b:ea:46:2c:26:97:97:24:69:ab:a9: 2d:5e:04:3e:b2:98:08:0b:1d:ec:e4:fa:6c:b2:d6:83:a1:a3: 4d:a5:bb:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDHT+mky0kTzagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmI3ZjExODctNWM0YS00MWRjLTgwZWMtMWY2NGY0NGY4NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGQYmpxgLMbo+rkqePOkEaPSa3EFcCGpY92A K6i/fWNiQG70K7U4KSKp5sug350fLISkbnfU2pzblHK0yvc7qcge6/6Z+ZchVbV0 1zztUhIIoPpaWmPzDHCjL4KPiSmdPySe8o6LAnsv54aO0g1ONHLrhZaSftHKMqFy M26GB4sorayRXYS3bcg/ifQj+9ZQ5zzihPID54a0eS8nWGIq2kzMIiqpWKvp0MOs A5Ib+DUUeXeG3nYZRJF28/JR38+bnNirGR1T11/nrB1QbHEQX8K2+idOITsItWrf 05Lq1w0AxYArt2jyx1eYwjpBLH3gRVQu7T+dt9nTiOQ/VgoGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBUlEJcWXnBxmLeH8T6D5NfdEExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGVmMDQ3YzgtYTg4ZS0z Njg2LWE2MmItNzlmNmM0ODUzNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO8FhT82zbvYFzTfVt0KLxSA8mjM9nI/Ixxvb9YvrAUFRk8cCL/SMOS JBTESokwyAc0cpuzaBlXlek3IQ9sNgbXdLZZyr7i9iwa3E6K6DrSEUAXunWBNP2/ ZZ0vtLQFIZT+pPc7pvNwCoCuQBS/99+dWVNE5ewMh5RNTIn7UEwcUAvnSplwXP7W 2Ec07JF0Qd51aqWXCEIJPeO4cKNQJMX3CbzWn87OzQjjL7mtjqsQ/VElvRNEXTqr Zj3PMbYg0D8aOrdCnMQEwlKb4paiDoEnZTM2lk2Iwdxyoa4UWzYb6kYsJpeXJGmr qS1eBD6ymAgLHezk+myy1oOho02lux4= -----END CERTIFICATE-----Generated at Sun Oct 4 05:42:46 2026 by rpki-client