$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa File: 9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa (raw, json) Hash identifier: yi7zdWjoF7YCuCapl53FR0ebwuRjSrk0++9K3cPEFEs= Subject key identifier: 34:90:47:B4:EF:B6:28:BC:6D:87:E0:A0:B6:37:AD:63:8B:43:4D:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49730A14854DA290723F2000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0a:14:85:4d:a2:90:72:3f:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7287d531-4793-4dfc-a22d-0e6f831183ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:bd:2a:07:ea:cf:0c:eb:39:4c:04:ef:11: 8c:1f:6d:d4:03:94:78:14:6f:b1:84:86:46:9f:80: 2b:92:f9:c2:b3:92:2d:ed:48:fe:71:52:7b:2c:70: e7:90:2e:3c:20:8d:04:ff:24:0f:5d:51:05:2f:61: 8e:f9:b0:51:57:93:0b:39:37:d3:c0:0c:5c:5e:32: 89:8c:7f:12:05:50:8b:12:36:ae:11:b3:91:0b:9d: 36:03:5f:d6:83:8d:00:80:0e:a3:df:6c:08:cf:86: 3a:49:65:36:c2:c7:a6:54:71:50:c6:8a:8f:0a:73: 9a:b4:0f:94:2f:61:a2:9e:31:3d:f2:96:4c:e7:32: ea:96:d7:5d:bb:b7:ee:09:da:e6:1b:03:53:54:b2: 38:d0:06:68:57:1e:bc:c3:89:32:82:cb:c9:f5:a5: 7b:ca:4d:4e:f2:67:85:d4:4e:39:ec:fd:01:9a:0c: fc:0e:66:c0:81:8c:aa:20:68:bd:c5:59:ce:ac:70: ea:85:4c:eb:b8:8a:e3:d3:8a:96:fd:f0:ae:c2:03: e4:f6:fd:bb:c6:1c:37:bf:10:0f:e7:5a:3c:78:54: b6:c7:88:ae:86:49:a1:bd:b3:98:ab:24:1d:ae:a2: 69:e2:5a:e8:56:2a:f6:59:33:8f:1a:09:70:f0:4e: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:90:47:B4:EF:B6:28:BC:6D:87:E0:A0:B6:37:AD:63:8B:43:4D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a7:fa:5a:e5:7e:60:a2:67:53:63:12:e2:1b:96:5d:71:44: c6:d7:94:91:b1:09:67:46:55:7c:4d:55:7a:f5:ba:08:da:c2: da:d4:11:a8:e5:89:74:9f:b5:68:f6:50:fe:37:4c:fa:b2:fb: 37:32:a2:3e:ef:d2:27:3d:e9:df:0c:b8:33:ca:0d:50:1a:a7: 42:c2:46:7e:6e:50:3b:b6:08:0f:56:05:8b:b5:96:33:05:14: bc:3e:a0:fa:55:49:4a:f2:2d:aa:5d:38:f8:98:3a:d7:87:a9: 52:05:3c:95:7f:cf:49:66:2c:ea:68:9a:55:d1:32:ea:46:29: 96:6d:c5:34:a3:ed:11:ad:51:e5:a8:58:85:65:39:c1:33:df: 70:7e:9f:47:0f:73:8c:64:04:d3:a2:e8:0e:ee:7c:e2:fc:a4: f0:e8:8f:04:0f:02:10:ec:50:8e:5e:ff:b2:14:a7:ae:c1:e2: 6f:34:cc:bd:1c:43:d8:46:6a:1a:29:0e:9a:66:32:77:86:71: 82:33:f0:42:96:94:b1:38:27:0f:2a:e1:66:05:f4:2c:51:24: 18:aa:1d:e8:64:e3:aa:f0:56:e2:c0:27:eb:7e:26:46:3a:0f: f3:58:c3:4c:72:5e:59:61:40:8a:38:e6:9d:c6:55:9d:14:a7: 91:a8:ba:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwoUhU2ikHI/IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzI4N2Q1MzEtNDc5My00ZGZjLWEyMmQtMGU2ZjgzMTE4M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwa9KgfqzwzrOUwE7xGMH23UA5R4FG+xhIZG n4ArkvnCs5It7Uj+cVJ7LHDnkC48II0E/yQPXVEFL2GO+bBRV5MLOTfTwAxcXjKJ jH8SBVCLEjauEbORC502A1/Wg40AgA6j32wIz4Y6SWU2wsemVHFQxoqPCnOatA+U L2GinjE98pZM5zLqltddu7fuCdrmGwNTVLI40AZoVx68w4kygsvJ9aV7yk1O8meF 1E457P0Bmgz8DmbAgYyqIGi9xVnOrHDqhUzruIrj04qW/fCuwgPk9v27xhw3vxAP 51o8eFS2x4iuhkmhvbOYqyQdrqJp4lroVir2WTOPGglw8E4VyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSQR7Tvtii8bYfgoLY3rWOLQ02VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWRiNGIxMjQtOGU0MS0z NjRhLWI2M2QtOWUyMGZiN2I3ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWn+lrlfmCiZ1NjEuIbll1xRMbXlJGxCWdGVXxNVXr1ugjawtrUEajl iXSftWj2UP43TPqy+zcyoj7v0ic96d8MuDPKDVAap0LCRn5uUDu2CA9WBYu1ljMF FLw+oPpVSUryLapdOPiYOteHqVIFPJV/z0lmLOpomlXRMupGKZZtxTSj7RGtUeWo WIVlOcEz33B+n0cPc4xkBNOi6A7ufOL8pPDojwQPAhDsUI5e/7IUp67B4m80zL0c Q9hGahopDppmMneGcYIz8EKWlLE4Jw8q4WYF9CxRJBiqHehk46rwVuLAJ+t+JkY6 D/NYw0xyXllhQIo45p3GVZ0Up5GourA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:14:23 2026 by rpki-client