$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81ed4e1a-fac5-3104-9af2-5d9b7b86ea1e.roa File: 81ed4e1a-fac5-3104-9af2-5d9b7b86ea1e.roa (raw, json) Hash identifier: szfbREkpA9EiWo+wGB/Vn3rqGdsiB35MJDhnZXf6rVw= Subject key identifier: BC:53:05:DD:3A:68:1E:4A:42:30:61:65:04:10:A4:CF:B7:63:3D:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49730DE07F23168B56917280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81ed4e1a-fac5-3104-9af2-5d9b7b86ea1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.26.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0d:e0:7f:23:16:8b:56:91:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e578e492-d2aa-47c8-96f7-f51c58cf52aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:c5:aa:98:49:9d:98:5c:1c:89:54:84:21: eb:8c:c3:0e:81:48:aa:be:0e:1f:60:3f:83:11:cd: 38:1a:42:25:40:31:aa:fa:ea:40:4d:c0:e8:28:2c: 66:96:38:4d:67:79:4c:09:b2:74:1b:aa:bb:24:84: 78:2b:37:f8:6a:a5:4a:1a:c8:31:5b:d4:11:7c:27: d3:6a:53:cf:e1:f5:83:24:18:08:e9:b3:fd:28:34: af:87:78:64:a0:aa:6c:de:34:c9:e6:fe:1a:94:42: 36:87:41:08:eb:f3:c3:d3:26:2b:b1:66:7a:bd:69: 76:a2:e8:5a:5d:92:63:bf:9e:e9:b1:65:70:1b:10: d4:9f:94:6c:b7:b6:f3:b6:79:7c:91:fe:cf:e6:ec: e0:36:b9:b9:8e:4c:c5:dd:d6:d9:05:2b:10:ab:e0: 9f:f3:4a:dc:77:95:2d:d9:6d:2e:2a:25:b4:25:6b: 35:cd:07:d9:85:14:c3:33:e2:b1:db:cb:dd:1d:e3: 06:3e:23:b5:63:58:6c:de:3c:1d:99:14:d5:fd:61: db:a0:f4:db:cd:fb:fd:38:76:cb:52:1e:6a:33:5c: 63:c3:f1:ba:f3:5e:d0:4c:d9:d5:83:9d:01:66:91: de:eb:7c:ae:42:3c:d3:01:4b:ad:32:4a:dc:f3:16: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:53:05:DD:3A:68:1E:4A:42:30:61:65:04:10:A4:CF:B7:63:3D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81ed4e1a-fac5-3104-9af2-5d9b7b86ea1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:97:46:5c:74:7b:14:f2:ce:15:4f:74:8a:a8:13:33:17:95: 71:4a:fb:33:be:b4:f4:bc:d3:94:2b:9c:4c:36:bf:45:99:c1: af:0a:a7:0d:70:02:54:98:37:78:ac:73:6d:63:b9:a6:f0:e5: b2:85:62:e6:35:58:c5:b9:82:0b:93:c7:9f:43:cf:f3:f9:99: be:d9:52:86:7f:85:e8:d0:a0:cd:49:13:31:ec:6a:74:b7:90: 4c:18:5a:ee:4b:06:3d:60:79:7c:26:25:28:2a:21:7f:49:d0: 23:73:d5:33:12:dc:15:63:71:9a:fe:fd:cc:ab:fe:8e:ac:a1: 27:d5:7d:fd:18:87:b5:56:53:f6:fe:bc:bd:37:fb:2e:ff:a1: c6:1a:9c:82:9b:62:8a:56:6f:5e:66:ed:0f:ee:f6:44:97:0b: 64:97:84:dc:35:c3:30:4d:02:c1:e6:c1:98:35:af:e7:1b:09: f6:fe:c0:9c:42:61:ee:c4:2d:f6:86:3b:39:61:97:4c:24:d0: 4d:ff:6e:77:ee:26:92:94:26:34:af:82:ca:9c:74:40:79:98: b3:4c:b1:99:13:4d:b8:d7:58:72:36:7e:44:14:81:c2:d8:2c: 25:5c:e4:1c:4e:07:f5:79:f8:d3:fe:b5:14:d3:94:66:90:2c: e9:1e:80:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw3gfyMWi1aRcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTU3OGU0OTItZDJhYS00N2M4LTk2ZjctZjUxYzU4Y2Y1MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp7FqphJnZhcHIlUhCHrjMMOgUiqvg4fYD+D Ec04GkIlQDGq+upATcDoKCxmljhNZ3lMCbJ0G6q7JIR4Kzf4aqVKGsgxW9QRfCfT alPP4fWDJBgI6bP9KDSvh3hkoKps3jTJ5v4alEI2h0EI6/PD0yYrsWZ6vWl2ouha XZJjv57psWVwGxDUn5Rst7bztnl8kf7P5uzgNrm5jkzF3dbZBSsQq+Cf80rcd5Ut 2W0uKiW0JWs1zQfZhRTDM+Kx28vdHeMGPiO1Y1hs3jwdmRTV/WHboPTbzfv9OHbL Uh5qM1xjw/G6817QTNnVg50BZpHe63yuQjzTAUutMkrc8xYtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxTBd06aB5KQjBhZQQQpM+3Yz2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODFlZDRlMWEtZmFjNS0z MTA0LTlhZjItNWQ5YjdiODZlYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqXRlx0exTyzhVPdIqoEzMXlXFK+zO+tPS805QrnEw2v0WZwa8Kpw1w AlSYN3isc21juabw5bKFYuY1WMW5gguTx59Dz/P5mb7ZUoZ/hejQoM1JEzHsanS3 kEwYWu5LBj1geXwmJSgqIX9J0CNz1TMS3BVjcZr+/cyr/o6soSfVff0Yh7VWU/b+ vL03+y7/ocYanIKbYopWb15m7Q/u9kSXC2SXhNw1wzBNAsHmwZg1r+cbCfb+wJxC Ye7ELfaGOzlhl0wk0E3/bnfuJpKUJjSvgsqcdEB5mLNMsZkTTbjXWHI2fkQUgcLY LCVc5BxOB/V5+NP+tRTTlGaQLOkegIc= -----END CERTIFICATE-----Generated at Sat Sep 26 10:55:04 2026 by rpki-client