$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa File: a4698492-8bf7-3bc4-bf6c-137506aace77.roa (raw, json) Hash identifier: zo7ehywaVnBUfRoaq8exDm3baxa93BvmjnmdCX5J5UU= Subject key identifier: D1:4F:95:03:4B:AD:A3:EB:5D:B0:9F:7C:17:90:96:AD:A6:0F:18:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49746A93BB925F09F40BEE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:6a:93:bb:92:5f:09:f4:0b:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d0b80ee-0ac4-4af9-9af9-ebae11de6dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:40:3f:b1:a0:45:59:e0:c6:c2:73:7c:01: 8f:52:80:7a:7d:75:09:3d:4d:ea:ae:b7:fa:56:b8: 7e:c9:4c:e8:1a:31:16:22:12:d2:7c:2b:09:ca:71: 8a:ba:ca:d0:9a:a7:59:44:d8:d3:8c:02:3b:43:18: 07:bb:43:6e:dd:69:f7:93:0c:2f:35:b2:cd:ed:97: b6:e9:56:af:77:b1:62:ca:57:66:c0:8a:11:27:d2: 65:97:bf:0c:70:fa:9c:62:e0:b4:40:07:53:a3:ba: 6e:89:8d:03:d5:20:1d:b0:1b:bd:81:31:c2:2d:99: 07:cf:f3:1b:dc:ad:61:61:37:f3:ad:9c:fe:9d:48: ff:19:01:68:0b:de:47:f6:7c:a5:ec:27:3f:0c:7a: 1e:6e:50:b1:ff:4f:93:dc:9f:5d:48:3e:c8:85:88: 0a:bb:6e:c5:75:01:22:2d:30:20:c1:b6:37:d2:9a: a3:4f:1a:c2:70:0c:e1:b7:12:07:99:04:15:86:83: 05:4c:22:ff:3a:af:92:98:ec:d2:39:ec:e1:66:fd: 1b:e2:50:66:07:d4:a8:99:58:39:3c:f9:c4:53:29: 7e:cb:51:06:6e:b7:23:ba:3c:84:0c:31:85:2d:60: 53:91:1d:db:dc:ff:77:8c:97:da:26:9e:b9:43:84: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:95:03:4B:AD:A3:EB:5D:B0:9F:7C:17:90:96:AD:A6:0F:18:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6f:22:70:94:59:2c:ae:73:44:a8:41:0f:e6:7a:8b:35:ae: ee:82:09:2d:79:0b:02:c2:6e:91:4c:bb:1c:a3:78:08:25:19: 1b:e8:0e:4f:0f:51:6d:02:27:da:c0:13:be:09:50:25:6d:73: 0c:2c:b5:15:4b:7d:e5:fb:a2:08:6e:d0:f7:a2:7c:3a:32:b6: 3c:46:a9:54:c3:cc:f4:bd:8e:d3:26:6c:03:25:69:28:04:7d: 7e:7d:fc:5a:55:e8:ed:41:26:98:15:93:ea:d0:a7:73:57:cc: fd:d0:b2:95:d5:ab:d5:ca:dc:06:cf:62:7b:b7:b6:ff:18:06: 6b:90:d6:24:6f:9a:32:a4:e8:ba:83:96:c3:33:1f:63:12:6e: cb:6f:a1:c1:56:88:da:ef:3f:f3:a7:f7:b9:c3:ba:8d:7e:f0: 34:30:e0:03:89:50:67:7b:12:75:9f:a6:f6:ae:c9:cb:37:f7: d8:dd:d5:87:5e:57:31:bc:22:1f:c4:f5:c1:e0:4c:02:6e:9d: 5d:3e:60:2b:d8:43:a6:34:4a:b7:57:65:18:ec:10:bc:0c:7d: 7d:e5:09:62:6f:b6:5b:d6:b9:12:37:28:20:70:06:35:5c:78: b7:21:4b:f4:a4:33:f3:95:0c:be:df:27:15:b1:05:1c:6d:3d: 59:fa:e2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGqTu5JfCfQL7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQwYjgwZWUtMGFjNC00YWY5LTlhZjktZWJhZTExZGU2ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15AP7GgRVngxsJzfAGPUoB6fXUJPU3qrrf6 Vrh+yUzoGjEWIhLSfCsJynGKusrQmqdZRNjTjAI7QxgHu0Nu3Wn3kwwvNbLN7Ze2 6Vavd7FiyldmwIoRJ9Jll78McPqcYuC0QAdTo7puiY0D1SAdsBu9gTHCLZkHz/Mb 3K1hYTfzrZz+nUj/GQFoC95H9nyl7Cc/DHoeblCx/0+T3J9dSD7IhYgKu27FdQEi LTAgwbY30pqjTxrCcAzhtxIHmQQVhoMFTCL/Oq+SmOzSOezhZv0b4lBmB9SomVg5 PPnEUyl+y1EGbrcjujyEDDGFLWBTkR3b3P93jJfaJp65Q4T8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFPlQNLraPrXbCffBeQlq2mDxjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTQ2OTg0OTItOGJmNy0z YmM0LWJmNmMtMTM3NTA2YWFjZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNvInCUWSyuc0SoQQ/meos1ru6CCS15CwLCbpFMuxyjeAglGRvoDk8P UW0CJ9rAE74JUCVtcwwstRVLfeX7oghu0PeifDoytjxGqVTDzPS9jtMmbAMlaSgE fX59/FpV6O1BJpgVk+rQp3NXzP3QspXVq9XK3AbPYnu3tv8YBmuQ1iRvmjKk6LqD lsMzH2MSbstvocFWiNrvP/On97nDuo1+8DQw4AOJUGd7EnWfpvauycs399jd1Yde VzG8Ih/E9cHgTAJunV0+YCvYQ6Y0SrdXZRjsELwMfX3lCWJvtlvWuRI3KCBwBjVc eLchS/SkM/OVDL7fJxWxBRxtPVn64ic= -----END CERTIFICATE-----Generated at Sat Sep 26 07:43:08 2026 by rpki-client