$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa File: aad2dda3-ab53-37d0-a92a-01c921bd08be.roa (raw, json) Hash identifier: 4l8qpRrvCGB6ghQpVsp9932Xs4u8SyfnBVHuM2FwC6s= Subject key identifier: 59:13:02:DA:C6:0A:34:E2:27:83:DE:2D:88:18:D5:F2:2F:CD:E9:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49741442169DD48E8D1EC780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.18.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:14:42:16:9d:d4:8e:8d:1e:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0b8921fa-35a5-4746-a712-2abf81b7054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:1d:4e:88:31:48:db:c2:15:73:60:13:a5: 2c:77:b2:a5:05:3e:76:e1:00:84:27:e8:5d:d1:a9: b1:f6:dc:f1:49:3c:ea:d2:12:e1:32:d6:81:40:e9: 0a:4f:a9:b3:21:e3:97:56:56:fc:ea:31:41:b8:85: 2e:f2:4f:ae:ed:59:ae:7a:99:41:50:19:bf:14:fd: ab:ad:49:f8:f2:64:7e:8c:8d:bf:d1:75:d9:5e:d6: ca:86:50:a6:6f:eb:84:0c:70:66:c1:dc:62:10:c1: 27:f0:91:84:a2:a2:ff:b6:fa:47:8f:0f:39:8a:83: c7:a7:91:2f:16:64:e7:38:b7:38:db:bf:0d:dd:d3: cb:48:ca:6b:93:b5:93:f5:5e:92:2d:bd:51:75:78: b8:6d:0e:74:bf:0d:28:e9:01:f1:d2:45:c2:4d:28: 41:08:20:78:73:a6:46:ea:3b:6d:45:30:1a:f1:20: 49:8e:e2:dd:a5:93:73:dc:6a:67:d0:ff:6d:42:66: 00:ca:ca:8f:b3:d3:cd:85:62:ca:dd:ee:40:a8:39: bb:4a:a5:6f:83:08:9a:47:c2:9a:f1:c3:5b:ac:7c: a0:84:75:ca:0a:24:be:f6:9d:ea:a3:48:10:2b:b9: 65:9a:72:26:0a:9f:68:e6:07:e6:11:bf:51:ae:d8: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:02:DA:C6:0A:34:E2:27:83:DE:2D:88:18:D5:F2:2F:CD:E9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ab:18:38:a0:78:1e:cd:0f:4a:08:be:e9:11:3c:f6:8e:0f: b1:f6:66:39:a5:59:60:80:c4:8f:e5:00:56:44:ae:d3:e9:d7: 6f:65:9c:92:1d:70:b7:ef:8a:f2:78:45:20:ad:9d:8e:58:1f: 62:6b:50:0f:63:cb:da:6f:a7:23:bf:69:88:35:30:12:ad:25: 6d:3d:7f:fe:92:fe:ea:71:0c:2f:f2:09:59:77:ff:70:84:dd: b1:b7:0d:3f:d2:9b:d6:00:e1:51:46:bd:2b:18:4e:ef:2d:1e: 2c:6f:7f:a0:d5:e8:30:4d:1c:83:2f:ac:fd:8f:6c:53:a8:d0: 41:fc:b0:5e:10:16:77:81:b2:1d:2b:3f:8e:f0:1d:a0:9c:3e: 51:f7:c4:ac:f7:6e:38:f9:d6:1f:60:1c:51:70:96:5a:99:2a: e9:c3:72:d8:64:55:af:46:c5:29:54:9b:30:e1:6f:49:79:2f: 6f:e3:ff:38:2d:07:54:45:60:82:72:09:e2:0c:8e:b3:01:b9: 91:7a:6b:44:8b:3a:8d:e1:ed:a8:80:10:bc:07:5d:db:66:66: 46:36:f8:be:1d:94:c0:c7:41:46:d5:df:22:08:b0:5f:2d:24: 94:2f:98:cf:6e:eb:f4:16:88:04:07:1d:21:86:41:15:7a:6e: e0:79:b6:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBRCFp3Ujo0ex4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGI4OTIxZmEtMzVhNS00NzQ2LWE3MTItMmFiZjgxYjcwNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW4dTogxSNvCFXNgE6Usd7KlBT524QCEJ+hd 0amx9tzxSTzq0hLhMtaBQOkKT6mzIeOXVlb86jFBuIUu8k+u7VmueplBUBm/FP2r rUn48mR+jI2/0XXZXtbKhlCmb+uEDHBmwdxiEMEn8JGEoqL/tvpHjw85ioPHp5Ev FmTnOLc4278N3dPLSMprk7WT9V6SLb1RdXi4bQ50vw0o6QHx0kXCTShBCCB4c6ZG 6jttRTAa8SBJjuLdpZNz3Gpn0P9tQmYAysqPs9PNhWLK3e5AqDm7SqVvgwiaR8Ka 8cNbrHyghHXKCiS+9p3qo0gQK7llmnImCp9o5gfmEb9RrtgojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkTAtrGCjTiJ4PeLYgY1fIvzekMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFkMmRkYTMtYWI1My0z N2QwLWE5MmEtMDFjOTIxYmQwOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHarGDigeB7ND0oIvukRPPaOD7H2ZjmlWWCAxI/lAFZErtPp129lnJId cLfvivJ4RSCtnY5YH2JrUA9jy9pvpyO/aYg1MBKtJW09f/6S/upxDC/yCVl3/3CE 3bG3DT/Sm9YA4VFGvSsYTu8tHixvf6DV6DBNHIMvrP2PbFOo0EH8sF4QFneBsh0r P47wHaCcPlH3xKz3bjj51h9gHFFwllqZKunDcthkVa9GxSlUmzDhb0l5L2/j/zgt B1RFYIJyCeIMjrMBuZF6a0SLOo3h7aiAELwHXdtmZkY2+L4dlMDHQUbV3yIIsF8t JJQvmM9u6/QWiAQHHSGGQRV6buB5thI= -----END CERTIFICATE-----Generated at Tue Sep 29 12:53:52 2026 by rpki-client