$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa File: 9a8cb9c9-2a82-314f-831e-767a34553ab5.roa (raw, json) Hash identifier: Y4ZcTkmKv87gMGw4S1IS/+J3e26COVH7ElTCkTZCSeM= Subject key identifier: B2:C8:4D:21:30:2B:6B:72:45:FA:A4:BB:87:83:7F:83:D9:12:15:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498BB1F39691D7E11DF063C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b1:f3:96:91:d7:e1:1d:f0:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=161a5eef-216a-48c4-8d06-df28d72111c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:d8:de:cd:1a:28:07:c2:4a:22:cf:28:1f: b5:bc:81:79:f7:e5:ad:76:bb:21:4f:f3:9f:05:ee: 95:b0:d0:99:b4:d6:7f:d9:2b:1f:b1:a3:13:3f:b6: a1:34:cf:53:a6:2d:41:ab:68:be:f5:8e:5c:4f:9c: 0f:78:df:99:78:c0:12:20:d9:27:20:4f:99:ca:fb: 6b:09:cf:59:0e:8b:bb:75:89:33:b1:a8:94:95:86: bf:37:6e:2b:ff:03:cb:12:ef:c7:7f:93:7a:4f:28: aa:4f:e7:c0:25:64:b0:38:4b:66:84:7d:83:38:46: be:ad:82:e3:1a:09:90:f5:b2:f3:7c:de:ae:9b:80: 62:a7:bd:a3:ee:46:37:50:dc:4f:89:88:2b:f3:49: 0c:a4:e6:cb:fe:65:83:50:e9:3f:c2:7f:ad:ce:52: 00:f0:41:f7:bc:35:80:cd:54:92:42:01:07:80:d6: d5:5c:93:39:93:ee:06:04:69:27:7e:9f:c1:8d:93: 70:0d:d4:88:13:14:24:ba:24:6a:d2:dc:99:48:78: d6:1f:cb:eb:72:17:ff:37:e1:b3:ad:aa:3a:c2:a1: 3c:4c:de:6a:b4:88:1b:b0:c6:22:1a:c2:9f:f8:46: 29:0d:d7:fa:8c:63:86:dd:76:d3:03:89:63:4f:ee: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:4D:21:30:2B:6B:72:45:FA:A4:BB:87:83:7F:83:D9:12:15:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:0a:be:fd:b4:ba:52:d3:92:ff:fe:f7:42:73:86:14:37: 23:69:0e:ad:8c:01:1a:52:2d:dd:19:0c:e7:b7:b2:fd:d1:ab: 79:80:87:ac:5a:c9:d0:b1:25:da:73:95:60:1b:c7:10:52:ce: 85:a4:38:cc:64:aa:54:e3:83:7a:b3:92:fe:2d:fa:7a:3f:ea: 68:47:2c:2f:6a:ea:be:10:90:e6:66:5a:9f:1b:7f:9e:bc:3c: c3:5d:2b:75:06:35:05:9a:36:7c:8c:c2:2a:82:be:1d:2a:92: b1:d9:09:e1:2c:89:92:d6:5b:14:9e:ca:0d:43:6a:3f:e6:f6: 20:a0:76:fe:9a:00:96:ec:96:57:23:3a:76:43:c4:42:6b:7c: ff:92:c7:3b:ba:b3:df:a3:e7:77:cb:56:0b:8d:38:1e:b0:9c: 5b:73:05:a5:c8:a3:f2:64:e0:6b:f8:17:e6:5c:1b:9c:a6:83: b7:7a:9b:99:4e:ed:1c:64:cb:60:75:8c:c1:ec:e4:e1:16:b4: a5:f5:5e:34:4f:e8:d4:bc:09:6e:4e:45:fd:20:aa:54:92:60: 87:ab:3c:64:5c:ff:5f:6d:8e:69:d0:59:43:50:68:67:15:b6: 15:c5:5b:da:57:a0:45:32:a5:b5:eb:31:9d:31:69:a8:40:cd: a8:d7:54:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7HzlpHX4R3wY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTYxYTVlZWYtMjE2YS00OGM0LThkMDYtZGYyOGQ3MjExMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilzY3s0aKAfCSiLPKB+1vIF59+WtdrshT/Of Be6VsNCZtNZ/2SsfsaMTP7ahNM9Tpi1Bq2i+9Y5cT5wPeN+ZeMASINknIE+Zyvtr Cc9ZDou7dYkzsaiUlYa/N24r/wPLEu/Hf5N6TyiqT+fAJWSwOEtmhH2DOEa+rYLj GgmQ9bLzfN6um4Bip72j7kY3UNxPiYgr80kMpObL/mWDUOk/wn+tzlIA8EH3vDWA zVSSQgEHgNbVXJM5k+4GBGknfp/BjZNwDdSIExQkuiRq0tyZSHjWH8vrchf/N+Gz rao6wqE8TN5qtIgbsMYiGsKf+EYpDdf6jGOG3XbTA4ljT+5mGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLITSEwK2tyRfqku4eDf4PZEhWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWE4Y2I5YzktMmE4Mi0z MTRmLTgzMWUtNzY3YTM0NTUzYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMYCr79tLpS05L//vdCc4YUNyNpDq2MARpSLd0ZDOe3sv3Rq3mAh6xa ydCxJdpzlWAbxxBSzoWkOMxkqlTjg3qzkv4t+no/6mhHLC9q6r4QkOZmWp8bf568 PMNdK3UGNQWaNnyMwiqCvh0qkrHZCeEsiZLWWxSeyg1Daj/m9iCgdv6aAJbsllcj OnZDxEJrfP+Sxzu6s9+j53fLVguNOB6wnFtzBaXIo/Jk4Gv4F+ZcG5ymg7d6m5lO 7Rxky2B1jMHs5OEWtKX1XjRP6NS8CW5ORf0gqlSSYIerPGRc/19tjmnQWUNQaGcV thXFW9pXoEUypbXrMZ0xaahAzajXVM0= -----END CERTIFICATE-----Generated at Sat Sep 26 12:06:37 2026 by rpki-client