$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa File: aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa (raw, json) Hash identifier: IJNOTHK5AxHUEBfhhv97UeTd0NBxXYSoJyBEDpA8Qo4= Subject key identifier: 67:ED:73:14:12:94:5D:6A:12:21:CA:A1:F6:5A:06:39:53:19:3D:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497344C8A625746FFC9F1680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:44:c8:a6:25:74:6f:fc:9f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=911e2c5a-7e84-446d-a4a4-c27d59c25e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:00:d9:1c:f1:0d:21:cf:8c:42:76:99:aa: 4a:73:b6:d9:2d:0b:66:d2:cf:5b:b4:be:b2:8b:da: ea:22:a1:e0:73:3f:c4:8f:dd:05:52:83:14:ad:f1: e1:58:eb:e9:fa:99:41:e4:50:18:42:26:ef:46:7c: 32:b5:bc:d6:e5:65:ac:37:cf:3a:86:3d:a1:f4:23: 0a:dd:22:77:7d:23:db:c8:a5:76:78:2d:ef:f7:e5: 29:2a:71:29:9e:48:d7:8b:65:67:c5:9c:66:27:5c: f9:e7:86:16:6b:25:b8:71:1e:97:84:68:0c:13:83: 16:86:05:e4:dc:dc:34:8c:4f:97:61:62:5d:65:50: 4f:f4:44:90:20:bf:0a:ac:27:88:ae:32:7c:8d:bd: 43:e1:90:8f:1e:00:09:b6:e8:0f:86:0c:62:a0:0c: 53:1f:74:e6:2d:c9:9a:9b:f1:28:dc:b7:7a:a3:67: 40:1b:7a:95:01:86:40:de:b4:3b:d6:3d:49:06:bd: f3:88:30:59:c3:d7:5b:67:f1:bd:2f:13:e1:78:84: 87:ae:88:45:60:19:36:8f:43:b0:27:0c:85:31:4e: 1f:e1:f9:61:3e:a6:04:8c:86:0a:18:61:d1:3b:43: 35:e8:56:54:ad:96:3e:83:93:f9:43:af:38:7d:5b: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:73:14:12:94:5D:6A:12:21:CA:A1:F6:5A:06:39:53:19:3D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6c:fa:97:a3:e7:11:4b:ab:7f:d7:c0:74:62:e4:42:6f:2c: 37:7e:b4:4b:e1:2f:d8:b4:36:55:03:13:c0:29:f4:40:91:0e: 4b:a7:ca:96:a6:0d:67:77:e8:ae:f1:9a:9b:28:51:5b:24:f7: 95:ae:c1:c4:ce:fb:a7:89:22:8e:96:c0:08:5d:25:3f:c5:c4: 8d:70:0c:b1:fa:a3:17:f3:ed:26:7b:2a:14:19:55:3a:ad:34: 7c:4a:0a:ae:cf:ff:a1:17:ba:c0:3d:c5:14:4e:41:3f:8e:91: cc:d8:14:04:e2:96:2f:28:c6:de:58:f1:5b:49:ea:be:3f:a4: 3b:e4:17:33:e5:1c:c3:14:fc:4b:22:e3:d7:22:78:80:3e:c9: 10:2d:a2:2e:38:d4:a0:5d:07:4b:97:b0:68:5a:15:8f:d0:df: 68:c3:33:2f:d6:be:97:d9:38:4c:7a:ac:95:2f:9f:c8:9f:19: 19:7f:18:e4:04:66:51:89:9a:af:35:07:10:26:d2:9b:13:b2: 06:c6:ce:73:c2:a3:b6:9c:fb:78:77:e5:e7:b0:92:a7:99:71: 9b:df:b0:ff:9c:93:7e:3d:a9:72:cd:62:a4:22:5f:77:55:ea: cd:82:b9:df:b8:95:c2:90:88:9a:f7:9c:cf:68:4f:cc:95:78: 1b:0b:50:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0TIpiV0b/yfFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTExZTJjNWEtN2U4NC00NDZkLWE0YTQtYzI3ZDU5YzI1ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFsA2RzxDSHPjEJ2mapKc7bZLQtm0s9btL6y i9rqIqHgcz/Ej90FUoMUrfHhWOvp+plB5FAYQibvRnwytbzW5WWsN886hj2h9CMK 3SJ3fSPbyKV2eC3v9+UpKnEpnkjXi2VnxZxmJ1z554YWayW4cR6XhGgME4MWhgXk 3Nw0jE+XYWJdZVBP9ESQIL8KrCeIrjJ8jb1D4ZCPHgAJtugPhgxioAxTH3TmLcma m/Eo3Ld6o2dAG3qVAYZA3rQ71j1JBr3ziDBZw9dbZ/G9LxPheISHrohFYBk2j0Ow JwyFMU4f4flhPqYEjIYKGGHRO0M16FZUrZY+g5P5Q684fVvu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGftcxQSlF1qEiHKofZaBjlTGT1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE1OWQ5ZDItY2Q4NS0z NWZhLWE0NWItN2UyYTFkOGJhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABts+pej5xFLq3/XwHRi5EJvLDd+tEvhL9i0NlUDE8Ap9ECRDkunypam DWd36K7xmpsoUVsk95WuwcTO+6eJIo6WwAhdJT/FxI1wDLH6oxfz7SZ7KhQZVTqt NHxKCq7P/6EXusA9xRROQT+OkczYFATili8oxt5Y8VtJ6r4/pDvkFzPlHMMU/Esi 49cieIA+yRAtoi441KBdB0uXsGhaFY/Q32jDMy/WvpfZOEx6rJUvn8ifGRl/GOQE ZlGJmq81BxAm0psTsgbGznPCo7ac+3h35eewkqeZcZvfsP+ck349qXLNYqQiX3dV 6s2Cud+4lcKQiJr3nM9oT8yVeBsLUJU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:25:20 2026 by rpki-client