$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa File: a9688429-4443-3857-85f5-019546f02e81.roa (raw, json) Hash identifier: dBHRirV8L1rCY/6o0KzBIyxGDHG9W9+jJ2PyRJ3Iv/0= Subject key identifier: D6:F2:2C:8A:DB:A9:BD:18:7E:A2:5C:67:84:80:68:9D:EF:C2:FE:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974324C502DB27C616B8EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.23.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:32:4c:50:2d:b2:7c:61:6b:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d9eed6a-d17b-4f3a-9440-9a161d79a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:f1:30:2d:1e:1b:35:b9:00:e0:b0:c9:bc: 1c:85:3c:dd:7e:07:88:8f:43:d8:16:c1:d8:5a:2c: 8e:fe:a2:d6:ed:36:4c:1b:4e:de:ae:1c:2b:ff:bc: 3d:73:75:c6:cd:31:e0:c6:4e:dc:45:74:8d:b2:73: 4e:f9:6e:6a:da:91:5f:ec:0c:3f:10:a9:be:0d:20: 31:4f:8f:52:60:e8:f3:d6:73:61:ab:64:82:49:d3: 13:cb:9f:24:13:dc:62:58:ec:e4:64:0d:57:03:1d: 2f:d1:87:47:23:2c:a7:dc:54:12:71:eb:a8:b4:d5: d3:2b:c7:b6:0f:c8:5b:b8:1e:28:5c:34:b9:ba:38: 21:e7:b4:10:23:91:7d:f5:8c:2a:94:94:2a:56:42: c0:3e:82:58:2b:e4:f8:b2:da:43:4f:f4:f9:91:b1: 19:49:4c:d0:c0:72:1c:bb:f5:bd:cd:61:69:08:dc: 25:ca:1e:c4:0b:cd:6c:cc:34:e8:31:78:de:1b:c2: 05:5b:82:de:3a:ce:31:28:64:69:cc:70:dd:01:57: 85:b3:cf:ce:9c:b1:59:2b:3e:cd:96:d9:ab:07:f3: 3f:ce:d0:7d:6e:0f:9e:53:c8:c2:a9:55:b4:07:0e: b8:b7:eb:35:66:c6:26:c3:17:59:ee:a4:6b:bc:b7: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:2C:8A:DB:A9:BD:18:7E:A2:5C:67:84:80:68:9D:EF:C2:FE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9688429-4443-3857-85f5-019546f02e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f6:86:8d:a3:be:4d:84:0c:d5:47:b5:1f:e4:50:e7:5c:d9: 28:ff:be:a9:b3:4a:5f:88:6e:f0:fb:81:ea:20:17:63:69:cb: 6b:53:5b:4d:df:78:fd:96:91:d7:34:86:4a:08:9b:e0:1e:be: 5c:0a:fe:de:c6:2f:78:68:08:a0:ef:0c:0a:55:a5:54:ce:97: b4:22:e7:0b:99:50:3f:38:cb:52:71:d0:18:22:94:82:e2:b2: 54:1c:3a:85:ff:a6:f7:33:d8:a5:6f:a7:a9:84:20:7d:1a:75: 6a:b4:46:82:6e:34:18:ee:dd:c5:ca:93:89:a3:1b:3a:35:66: 0f:c8:f9:51:71:e5:90:a2:c4:4c:c4:71:d5:5c:49:d1:b4:f6: 9f:b5:af:e9:ef:87:6f:b6:2c:cb:a8:69:3d:59:35:88:4f:7c: dd:60:57:76:e2:19:42:9d:5d:50:19:98:3b:0e:f5:2e:08:54: 2b:84:a3:c4:01:94:6d:7a:18:1e:fc:e3:bf:f5:a4:e6:88:19: 18:1d:51:d5:02:1f:a7:9f:ee:f9:9f:ca:50:da:8b:cd:6a:b9: 63:35:f0:91:19:c8:f2:1c:ab:3e:97:7e:85:17:4d:5a:96:3c: 8d:2c:ad:fe:25:c4:2c:c3:ae:cb:0d:f9:74:e2:d0:e0:53:58: 42:76:17:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDJMUC2yfGFrjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQ5ZWVkNmEtZDE3Yi00ZjNhLTk0NDAtOWExNjFkNzlhMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2fxMC0eGzW5AOCwybwchTzdfgeIj0PYFsHY WiyO/qLW7TZMG07erhwr/7w9c3XGzTHgxk7cRXSNsnNO+W5q2pFf7Aw/EKm+DSAx T49SYOjz1nNhq2SCSdMTy58kE9xiWOzkZA1XAx0v0YdHIyyn3FQSceuotNXTK8e2 D8hbuB4oXDS5ujgh57QQI5F99YwqlJQqVkLAPoJYK+T4stpDT/T5kbEZSUzQwHIc u/W9zWFpCNwlyh7EC81szDToMXjeG8IFW4LeOs4xKGRpzHDdAVeFs8/OnLFZKz7N ltmrB/M/ztB9bg+eU8jCqVW0Bw64t+s1ZsYmwxdZ7qRrvLdFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbyLIrbqb0YfqJcZ4SAaJ3vwv7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk2ODg0MjktNDQ0My0z ODU3LTg1ZjUtMDE5NTQ2ZjAyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH72ho2jvk2EDNVHtR/kUOdc2Sj/vqmzSl+IbvD7geogF2Npy2tTW03f eP2Wkdc0hkoIm+AevlwK/t7GL3hoCKDvDApVpVTOl7Qi5wuZUD84y1Jx0BgilILi slQcOoX/pvcz2KVvp6mEIH0adWq0RoJuNBju3cXKk4mjGzo1Zg/I+VFx5ZCixEzE cdVcSdG09p+1r+nvh2+2LMuoaT1ZNYhPfN1gV3biGUKdXVAZmDsO9S4IVCuEo8QB lG16GB7847/1pOaIGRgdUdUCH6ef7vmfylDai81quWM18JEZyPIcqz6XfoUXTVqW PI0srf4lxCzDrssN+XTi0OBTWEJ2Fyg= -----END CERTIFICATE-----Generated at Sat Sep 26 14:58:11 2026 by rpki-client