$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa File: a9bb93b5-67a8-32e8-b395-ea74723d3667.roa (raw, json) Hash identifier: ij9ta/uKvzFCYFcnllGIeQUZAr9JOhss3EhpG/MpsL4= Subject key identifier: 90:AA:27:1A:F1:08:D0:9D:86:13:06:34:40:B6:D4:D8:89:C4:C5:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972C5C339E1EBD5B75F1340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.22.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c5:c3:39:e1:eb:d5:b7:5f:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9aac3f5a-2ce9-4322-90e5-3a1bd860b5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:74:cb:ec:11:9a:2a:dd:b3:54:cc:32:b9: 36:bc:a6:d0:6a:d1:13:c5:a5:7d:5e:5a:d7:07:fc: 39:76:83:f9:6e:0b:9b:9a:0b:43:ca:c5:c6:c3:19: 1b:51:19:78:ae:4c:a1:4e:cf:5a:a1:e9:2c:39:1b: 72:b5:7d:53:53:7b:c5:e8:69:d7:e9:9f:26:92:6a: d4:10:63:27:04:b0:1a:d1:ac:1b:bb:5f:aa:bc:3c: 69:f4:70:75:60:95:5c:0d:e7:0f:94:74:8b:63:57: 6b:1f:99:cf:c0:62:ff:0d:8c:05:86:18:a8:c1:a3: 49:a3:30:89:88:1f:f8:0f:7d:9d:7e:c2:58:c3:05: ff:21:bd:cf:b4:5e:78:5e:f6:2f:a5:58:00:eb:16: d6:07:04:e8:5c:8e:5e:b9:a6:25:75:99:a4:11:a5: e8:df:6f:3b:01:1c:74:f7:81:c8:8b:ec:3c:0e:df: 99:f8:89:e8:3f:7d:70:41:d0:2e:c5:83:06:43:0b: db:1f:8c:3e:6f:13:18:22:7b:15:e4:b7:f9:66:09: 44:c4:f5:af:73:4d:b2:c0:02:f1:68:79:69:1e:f5: 89:48:9b:04:c0:9c:d4:bd:71:17:6e:dc:28:76:c2: 7e:e3:b3:e2:84:0a:e3:04:86:b5:e7:89:1b:af:16: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AA:27:1A:F1:08:D0:9D:86:13:06:34:40:B6:D4:D8:89:C4:C5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b7:ee:92:e4:50:fd:fd:a6:f5:e2:ab:6f:70:e8:35:88:62: d9:ce:c4:06:11:17:b1:c8:13:6b:f1:37:31:38:eb:79:6a:95: ef:e8:b0:92:1d:f7:b0:4d:e0:68:7e:bd:6e:af:9e:67:51:54: 26:a2:7b:5d:3a:4d:dc:07:d3:e4:99:75:93:52:d0:17:11:f2: bf:0b:ff:2f:24:be:79:0c:68:57:e5:f3:63:3c:f4:20:ad:4c: ad:f9:48:9e:0f:42:ad:7c:07:e7:5c:4d:d3:46:b0:5a:90:4c: b5:52:d8:4e:54:a6:b5:8c:30:7c:1c:52:a9:d1:4b:27:01:ca: 84:59:72:92:23:11:70:14:66:e5:43:66:ef:ff:77:58:95:50: 26:cc:98:08:b4:e3:87:cc:44:62:04:53:7f:03:8a:e9:0f:d0: 51:3e:9c:f7:79:b9:6b:a3:e8:3e:5b:0c:e1:b1:50:f0:30:03: 0b:1a:72:bb:2d:6a:51:eb:b2:82:d6:1e:0a:50:d7:1c:40:ab: bf:9e:0c:8c:40:fa:71:6f:ca:38:69:fb:a6:d0:be:4d:b7:00: 8b:1e:5c:fa:06:3d:e8:b8:25:dc:c3:d0:db:3f:df:e3:69:fb: 09:bc:7b:f2:ea:ae:ea:16:d5:8c:8a:3f:71:ce:de:a4:d2:78: ba:0d:0c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsXDOeHr1bdfE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFhYzNmNWEtMmNlOS00MzIyLTkwZTUtM2ExYmQ4NjBiNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq10y+wRmirds1TMMrk2vKbQatETxaV9XlrX B/w5doP5bgubmgtDysXGwxkbURl4rkyhTs9aoeksORtytX1TU3vF6GnX6Z8mkmrU EGMnBLAa0awbu1+qvDxp9HB1YJVcDecPlHSLY1drH5nPwGL/DYwFhhiowaNJozCJ iB/4D32dfsJYwwX/Ib3PtF54XvYvpVgA6xbWBwToXI5euaYldZmkEaXo3287ARx0 94HIi+w8Dt+Z+InoP31wQdAuxYMGQwvbH4w+bxMYInsV5Lf5ZglExPWvc02ywALx aHlpHvWJSJsEwJzUvXEXbtwodsJ+47PihArjBIa154kbrxaxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCqJxrxCNCdhhMGNEC21NiJxMX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTliYjkzYjUtNjdhOC0z MmU4LWIzOTUtZWE3NDcyM2QzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC37pLkUP39pvXiq29w6DWIYtnOxAYRF7HIE2vxNzE463lqle/osJId 97BN4Gh+vW6vnmdRVCaie106TdwH0+SZdZNS0BcR8r8L/y8kvnkMaFfl82M89CCt TK35SJ4PQq18B+dcTdNGsFqQTLVS2E5UprWMMHwcUqnRSycByoRZcpIjEXAUZuVD Zu//d1iVUCbMmAi044fMRGIEU38DiukP0FE+nPd5uWuj6D5bDOGxUPAwAwsacrst alHrsoLWHgpQ1xxAq7+eDIxA+nFvyjhp+6bQvk23AIseXPoGPei4JdzD0Ns/3+Np +wm8e/LqruoW1YyKP3HO3qTSeLoNDOM= -----END CERTIFICATE-----Generated at Mon Sep 28 00:21:15 2026 by rpki-client