$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b9e5cd8-87a5-3056-8652-ec5791d4549c.roa File: 5b9e5cd8-87a5-3056-8652-ec5791d4549c.roa (raw, json) Hash identifier: RynurVheUbVWeJOarOIEykk4xTcKn4dbApZUvxldT28= Subject key identifier: 56:CD:5B:8B:6F:92:F4:68:FC:0C:4E:D3:79:AB:9F:82:E6:85:58:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A25C18A2DEBBCBBAE6A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b9e5cd8-87a5-3056-8652-ec5791d4549c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:25:c1:8a:2d:eb:bc:bb:ae:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02dd15df-366f-495b-bf88-487637262e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:09:41:17:dd:f4:24:7d:ec:f1:22:b9:cf: dd:16:c5:6a:e5:42:08:55:f3:e4:a1:97:47:b9:85: 86:00:48:42:d1:a8:08:b1:b6:7b:da:3a:8e:72:4a: c6:c1:38:ef:1e:74:5b:37:ff:b7:7e:08:a4:56:83: 0f:2e:da:cb:cf:51:ae:21:bf:04:fc:3c:1b:77:5f: 14:5a:4f:db:f1:d8:c6:37:5f:51:f7:0b:d5:d9:66: 82:31:2c:30:34:8a:24:af:24:ea:08:a1:b7:17:14: ad:6d:26:ef:bb:fe:9a:b4:ab:78:6c:50:83:2f:c3: d4:28:6d:ec:72:f1:c4:de:8e:98:68:95:28:99:f5: 50:8e:47:59:0b:6d:8c:6f:ee:f2:08:b5:5e:3b:cb: 1a:23:0e:09:b2:2e:70:b8:9b:3f:8a:39:08:bb:21: 3f:c6:90:29:bc:bb:eb:29:74:27:97:f9:43:10:7a: 1c:06:8b:41:0c:de:39:7c:2e:67:89:ee:a5:6e:51: c9:fa:85:b4:9a:a9:e7:3e:60:cc:b5:c5:4a:f3:0f: 14:bf:20:83:de:e9:48:b9:9e:5e:d5:f5:3f:38:e3: e9:32:7e:a5:09:d6:26:c2:f7:3d:de:3e:14:52:82: 66:8c:5e:61:57:3b:a7:a5:8d:81:24:c4:84:11:08: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:5B:8B:6F:92:F4:68:FC:0C:4E:D3:79:AB:9F:82:E6:85:58:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b9e5cd8-87a5-3056-8652-ec5791d4549c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:97:6b:0e:89:25:bd:87:30:c2:ae:9e:15:bb:15:5c:1c:a6: e3:16:e6:d2:21:ed:4e:3a:8a:6e:5c:01:74:05:fa:25:07:ae: 22:ad:49:8c:25:96:99:ad:a6:a4:ee:3f:9f:35:29:0e:cf:70: 80:17:8e:f6:43:51:b8:40:23:07:9c:21:13:6f:1d:7d:f3:a0: 00:ee:1e:a2:2e:27:a7:8e:bc:db:9d:27:a7:eb:31:24:f9:ab: 86:ec:0f:92:14:95:4d:42:32:b1:0e:29:23:39:71:19:39:bf: 35:4f:7d:a1:7e:20:5a:92:3e:e5:5f:22:01:1e:cf:6d:f7:5b: 1c:29:73:85:77:23:ac:e1:71:00:8a:b0:39:7c:23:d6:58:04: 8a:0c:b6:ec:fb:56:9e:d4:99:a0:69:96:c2:52:35:ca:de:74: 40:c3:e1:21:c5:a7:7a:1c:6a:e8:c1:be:94:d6:02:79:b9:58: 74:c0:97:99:24:50:e7:7a:8b:97:f3:42:d3:f4:fb:45:79:0e: b8:51:79:fc:4d:cd:c7:cc:71:38:6d:df:c4:71:09:7b:ee:ab: 76:34:92:31:1a:ee:93:5d:bc:38:ff:86:6b:17:b6:5e:c3:0a: 13:9c:ad:4a:bc:e5:fb:7e:de:66:ca:1d:b0:3f:b5:d4:24:4e: 45:77:7f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiiXBii3rvLuuaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDJkZDE1ZGYtMzY2Zi00OTViLWJmODgtNDg3NjM3MjYyZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEAJQRfd9CR97PEiuc/dFsVq5UIIVfPkoZdH uYWGAEhC0agIsbZ72jqOckrGwTjvHnRbN/+3fgikVoMPLtrLz1GuIb8E/Dwbd18U Wk/b8djGN19R9wvV2WaCMSwwNIokryTqCKG3FxStbSbvu/6atKt4bFCDL8PUKG3s cvHE3o6YaJUomfVQjkdZC22Mb+7yCLVeO8saIw4Jsi5wuJs/ijkIuyE/xpApvLvr KXQnl/lDEHocBotBDN45fC5nie6lblHJ+oW0mqnnPmDMtcVK8w8UvyCD3ulIuZ5e 1fU/OOPpMn6lCdYmwvc93j4UUoJmjF5hVzunpY2BJMSEEQigewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbNW4tvkvRo/AxO03mrn4LmhVgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWI5ZTVjZDgtODdhNS0z MDU2LTg2NTItZWM1NzkxZDQ1NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiXaw6JJb2HMMKunhW7FVwcpuMW5tIh7U46im5cAXQF+iUHriKtSYwl lpmtpqTuP581KQ7PcIAXjvZDUbhAIwecIRNvHX3zoADuHqIuJ6eOvNudJ6frMST5 q4bsD5IUlU1CMrEOKSM5cRk5vzVPfaF+IFqSPuVfIgEez233Wxwpc4V3I6zhcQCK sDl8I9ZYBIoMtuz7Vp7UmaBplsJSNcredEDD4SHFp3ocaujBvpTWAnm5WHTAl5kk UOd6i5fzQtP0+0V5DrhRefxNzcfMcTht38RxCXvuq3Y0kjEa7pNdvDj/hmsXtl7D ChOcrUq85ft+3mbKHbA/tdQkTkV3f1w= -----END CERTIFICATE-----Generated at Sat Sep 26 03:43:56 2026 by rpki-client