$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa File: 8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa (raw, json) Hash identifier: JkIO9Yqy+dT2fP+VceJlG5GA8R5sR/r6EnmuYQ4B7jc= Subject key identifier: 8A:B4:EC:3B:B2:70:95:CA:C5:40:66:E4:FF:3C:B2:46:07:07:86:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974E1F31672D4120AC29A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e1:f3:16:72:d4:12:0a:c2:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1bead7d-6a3a-4f14-9517-b1cc5e5cc541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:3d:af:6f:72:8b:f4:87:b7:af:89:21:b1: c7:41:46:5f:62:54:40:dc:89:db:68:e4:b7:e2:6c: 46:e9:35:4f:7b:5e:fe:42:9a:5b:ba:ab:7c:d7:15: 9b:da:7d:8f:3d:d9:fe:be:a7:b9:f9:b8:86:6e:d0: 1e:cc:34:a3:a0:cf:f2:4d:78:18:dc:2c:14:b6:e6: f9:38:1b:4a:35:67:69:ff:66:c7:71:fd:07:c3:69: 0d:5f:e9:13:33:c8:58:89:a1:90:1d:69:28:75:31: bb:f9:7b:22:1c:0f:ad:69:27:f1:66:f6:6f:2e:d8: d1:43:ff:fb:c0:a4:90:f6:b7:1c:1e:27:b5:0c:e9: ff:42:aa:0d:48:ba:a3:27:dc:da:43:4c:50:4e:63: ab:5e:6f:53:79:ab:93:a6:af:36:c0:e6:ac:80:0f: 58:be:0f:c3:88:8e:25:24:0c:e5:e3:7f:37:b7:25: 13:c1:75:3c:00:0d:2b:e0:49:1c:9f:ac:a6:f8:f3: eb:40:bc:01:53:bd:68:fc:bf:43:32:01:99:b0:33: 74:ed:58:82:a0:be:32:b2:50:a4:33:7a:ad:b9:0f: de:36:63:0d:8c:36:4d:44:f8:c0:35:58:39:93:76: 47:d3:0f:26:11:99:31:91:21:9f:ae:0b:a2:6a:36: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B4:EC:3B:B2:70:95:CA:C5:40:66:E4:FF:3C:B2:46:07:07:86:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e3:7d:8f:b5:ef:7c:29:38:bc:a9:dc:ce:4c:fc:b9:46:b4: 29:08:af:73:54:c0:f6:07:80:5e:06:e9:ef:aa:01:30:cf:d3: 25:35:96:c9:18:d3:a1:e3:c1:58:39:3e:b0:a9:2c:55:b8:47: 67:2f:b6:72:80:f2:9d:f8:cb:25:7a:17:26:a2:b4:09:e1:e4: 72:55:6d:45:d6:bd:0e:3a:39:66:04:33:9f:13:36:50:7e:c1: 27:b7:cb:2e:7e:90:fc:fa:4e:41:bf:b7:cc:19:70:31:1d:30: e6:66:ea:44:b5:ea:5a:c5:7f:1e:09:7d:3e:b7:89:9a:da:21: f5:63:1a:8f:b8:72:07:ff:a8:6a:85:b6:f6:e4:69:2a:f9:a6: db:77:d1:b0:ce:42:d4:21:bf:ae:e4:0b:e4:a3:fa:41:75:e1: 92:98:6a:ec:f3:f3:c6:c7:1f:aa:d8:70:25:b4:d1:61:34:36: 0e:dd:99:17:07:93:73:ed:77:d8:7a:5b:e7:8e:85:aa:ef:62: 8b:d9:0b:a7:81:a4:a0:6a:a4:d6:23:57:8c:2f:79:2b:a6:58: 8e:d3:df:46:c5:5a:af:c6:a5:9d:47:45:e8:1d:2b:05:c7:b2: ed:62:cc:43:79:95:97:bc:31:c8:42:78:89:eb:d2:4e:3d:92: fa:68:39:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOHzFnLUEgrCmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFiZWFkN2QtNmEzYS00ZjE0LTk1MTctYjFjYzVlNWNjNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBI9r29yi/SHt6+JIbHHQUZfYlRA3InbaOS3 4mxG6TVPe17+Qppbuqt81xWb2n2PPdn+vqe5+biGbtAezDSjoM/yTXgY3CwUtub5 OBtKNWdp/2bHcf0Hw2kNX+kTM8hYiaGQHWkodTG7+XsiHA+taSfxZvZvLtjRQ//7 wKSQ9rccHie1DOn/QqoNSLqjJ9zaQ0xQTmOrXm9TeauTpq82wOasgA9Yvg/DiI4l JAzl4383tyUTwXU8AA0r4Ekcn6ym+PPrQLwBU71o/L9DMgGZsDN07ViCoL4yslCk M3qtuQ/eNmMNjDZNRPjANVg5k3ZH0w8mEZkxkSGfrguiaja/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq07DuycJXKxUBm5P88skYHB4aYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNjM2E0MTAtZWJmMS0z NTk2LWE5NjMtOGViNWFmMWM3YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/jfY+173wpOLyp3M5M/LlGtCkIr3NUwPYHgF4G6e+qATDP0yU1lskY 06HjwVg5PrCpLFW4R2cvtnKA8p34yyV6FyaitAnh5HJVbUXWvQ46OWYEM58TNlB+ wSe3yy5+kPz6TkG/t8wZcDEdMOZm6kS16lrFfx4JfT63iZraIfVjGo+4cgf/qGqF tvbkaSr5ptt30bDOQtQhv67kC+Sj+kF14ZKYauzz88bHH6rYcCW00WE0Ng7dmRcH k3Ptd9h6W+eOharvYovZC6eBpKBqpNYjV4wveSumWI7T30bFWq/GpZ1HRegdKwXH su1izEN5lZe8MchCeInr0k49kvpoOfc= -----END CERTIFICATE-----Generated at Fri Sep 25 07:11:58 2026 by rpki-client