$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa File: 5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa (raw, json) Hash identifier: /ltNx39+S6n+1z+Y693NTJQOT1dxKaEa2h9wtLlo1Mw= Subject key identifier: 1C:33:A8:DB:20:B9:2A:44:E1:22:BE:8F:2A:38:54:DE:D9:52:7C:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974F0890AC244FE3462F140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f0:89:0a:c2:44:fe:34:62:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d54fa297-c1fb-42b9-a33e-40c38207f7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:af:b4:df:46:3d:f6:ba:02:6a:8c:f8:62: 5a:7b:f5:da:19:4a:97:17:44:46:5b:95:e5:63:18: 24:b2:4d:d5:b5:ce:62:fe:5b:08:f4:38:c6:79:e9: 96:24:73:18:90:f0:cc:fb:4f:e5:d5:2e:b8:69:c1: 59:3b:a2:b6:c5:53:c4:fb:46:c8:8c:d0:18:39:b4: d1:94:83:46:3d:fc:f1:22:48:a6:b0:7c:6a:31:0d: 6e:33:b5:66:37:95:3b:ec:de:c2:48:60:67:61:65: 4b:41:59:57:f5:e5:24:e3:1f:e7:4a:18:80:b1:77: f0:94:c6:22:2e:ec:40:4f:67:38:96:8a:d0:b0:18: 59:d2:20:c4:bc:36:9c:5f:79:5a:df:90:41:e8:a2: 6d:bf:25:0b:93:e4:a5:82:14:9d:ff:65:1b:e3:38: 09:e2:b9:ff:d2:fb:a8:3f:03:9a:66:70:6c:6f:07: 8c:e7:c7:0a:50:4a:66:0f:29:ff:37:87:7c:19:0f: 9d:9d:41:e1:93:6a:02:c9:61:bc:a2:79:83:90:f3: 2c:24:51:14:dd:bf:eb:eb:50:c0:b1:51:ad:04:81: f8:37:cb:5b:a9:f1:ed:cb:3d:cc:9e:24:5b:03:37: a9:9b:30:af:51:47:0e:c1:32:8b:5b:b7:93:98:5b: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:33:A8:DB:20:B9:2A:44:E1:22:BE:8F:2A:38:54:DE:D9:52:7C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:19:47:21:5c:8e:84:32:a3:3d:6f:02:ef:ea:c0:c3:61:b0: f9:a5:ef:69:38:7b:aa:da:2b:88:6c:36:5a:25:3e:da:28:53: e9:c7:bb:56:45:21:fe:3c:32:65:e8:5c:da:fd:a2:c5:4e:18: d8:6b:97:85:98:de:f4:3a:93:89:1f:a1:b9:4e:fb:40:1b:15: 41:4b:0d:fa:10:1d:43:55:2d:9a:07:f3:07:8c:f1:d0:4a:8b: 10:fc:8d:ce:83:bb:5c:c6:0b:ec:a8:9f:07:a1:5f:db:ff:4b: 17:7f:2c:7f:8e:31:a7:d3:98:fd:2e:7d:12:7d:52:03:0c:82: ec:2b:3a:5c:72:e0:34:6e:1e:d7:0c:19:70:95:d9:97:fe:6d: db:ab:f0:75:7d:c2:eb:2c:44:9f:c0:d5:ad:cc:99:a7:ff:b4: fa:d8:15:d8:9b:38:21:2a:65:67:89:a4:37:50:07:18:dc:64: 92:84:f4:cb:07:cb:b9:76:b1:34:6c:d7:4d:56:c7:8d:56:f1: 08:fa:55:22:7e:ce:7d:f4:e2:58:d2:06:70:f3:1b:84:5b:63: f4:32:ea:e3:dc:f5:91:b1:30:ec:93:dd:d6:7e:ba:a7:10:dc: 2a:16:1e:c9:4a:a4:ff:6f:42:0d:7c:01:0a:dc:ce:c8:79:b9: db:8d:e4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPCJCsJE/jRi8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU0ZmEyOTctYzFmYi00MmI5LWEzM2UtNDBjMzgyMDdmN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoivtN9GPfa6AmqM+GJae/XaGUqXF0RGW5Xl Yxgksk3Vtc5i/lsI9DjGeemWJHMYkPDM+0/l1S64acFZO6K2xVPE+0bIjNAYObTR lINGPfzxIkimsHxqMQ1uM7VmN5U77N7CSGBnYWVLQVlX9eUk4x/nShiAsXfwlMYi LuxAT2c4lorQsBhZ0iDEvDacX3la35BB6KJtvyULk+SlghSd/2Ub4zgJ4rn/0vuo PwOaZnBsbweM58cKUEpmDyn/N4d8GQ+dnUHhk2oCyWG8onmDkPMsJFEU3b/r61DA sVGtBIH4N8tbqfHtyz3MniRbAzepmzCvUUcOwTKLW7eTmFuJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwzqNsguSpE4SK+jyo4VN7ZUnw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI2MGJjYzAtM2ViNi0z YjdjLTg3MWEtYThjZWY2NzY5MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgZRyFcjoQyoz1vAu/qwMNhsPml72k4e6raK4hsNlolPtooU+nHu1ZF If48MmXoXNr9osVOGNhrl4WY3vQ6k4kfoblO+0AbFUFLDfoQHUNVLZoH8weM8dBK ixD8jc6Du1zGC+yonwehX9v/Sxd/LH+OMafTmP0ufRJ9UgMMguwrOlxy4DRuHtcM GXCV2Zf+bdur8HV9wussRJ/A1a3Mmaf/tPrYFdibOCEqZWeJpDdQBxjcZJKE9MsH y7l2sTRs101Wx41W8Qj6VSJ+zn304ljSBnDzG4RbY/Qy6uPc9ZGxMOyT3dZ+uqcQ 3CoWHslKpP9vQg18AQrczsh5uduN5Ls= -----END CERTIFICATE-----Generated at Sun Sep 27 04:58:01 2026 by rpki-client