$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa File: b759afaa-be62-3795-96ee-44c19adb2351.roa (raw, json) Hash identifier: dZOtA5yV6yn6FJnBSafDToLZkhyp/vnuzO/BmSEWv0U= Subject key identifier: A9:29:13:33:50:FB:81:81:53:6C:90:7B:1B:17:35:D8:BC:8D:5C:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4988F375E2A57A8753A07AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:f3:75:e2:a5:7a:87:53:a0:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=79e40c70-0d32-4cd6-8aec-b8ae20a5dd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:04:a5:c2:97:d1:9d:d2:66:b2:ad:8d:ed: 68:87:a2:3d:c0:f0:5d:78:c4:33:75:7e:fd:82:46: fc:02:e3:49:cb:42:b5:d3:13:58:0e:80:5a:e5:b3: 16:7a:7f:34:14:3f:55:35:b4:34:b5:2e:a0:42:f3: 67:ce:db:a2:6e:8e:27:c1:68:c1:d4:4e:b6:70:1f: 38:4a:f4:86:10:1c:7b:b5:ef:5e:4d:1c:05:5e:6d: a8:4f:bf:6a:ae:22:e9:47:1c:40:5c:6c:d3:e7:ec: ce:23:08:29:32:51:6d:14:34:da:03:26:a0:f6:92: 8a:95:c8:b6:f3:a9:3a:29:d0:16:a1:b2:75:c8:71: fe:55:10:51:c7:08:73:a4:60:1b:30:87:a2:e9:85: 3f:20:e5:61:81:ce:ff:79:e1:c6:3d:1d:06:a2:e6: 66:97:12:ef:a0:7b:73:c2:b1:a1:71:e5:d2:28:89: 20:de:3a:36:eb:68:2b:03:ba:22:b0:8a:50:b9:2a: c2:cf:dc:f8:38:da:d7:74:9f:8c:8c:eb:3b:58:88: 4a:5a:98:52:5d:86:c7:7d:4a:e8:50:60:b5:eb:c6: ce:66:6d:49:80:6d:a6:66:fa:19:03:cb:3b:3b:59: 54:81:95:df:3f:e8:d5:84:1d:ac:a9:1e:a8:d7:f9: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:13:33:50:FB:81:81:53:6C:90:7B:1B:17:35:D8:BC:8D:5C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c0:7f:20:96:96:f6:f0:8c:fa:6e:99:93:e4:26:19:61:38: f2:08:21:e9:0c:48:53:59:b1:5b:5b:cf:78:28:79:d8:36:13: 5a:a1:8b:68:a1:1e:ab:10:51:0f:8e:d5:b4:64:67:52:76:ab: e7:6b:48:5a:d6:71:62:00:f6:ac:a5:11:a8:5a:f4:82:8f:d0: 43:3c:19:54:f2:24:9b:95:6c:fc:65:6c:64:ab:07:5e:d0:17: db:f9:c5:33:6e:54:7f:d5:5f:34:4f:63:dd:e4:04:1b:54:9f: db:6a:9a:43:67:b8:92:b6:ff:52:a3:c9:4f:ab:ae:90:c3:87: c4:ff:18:b4:a6:7d:eb:a1:86:3b:ce:a7:42:dc:9d:d0:e0:d9: 17:ba:82:ea:ce:1d:63:4e:87:63:e1:95:35:5c:60:78:c0:35: 24:4a:98:e0:2b:4e:63:a8:c6:4a:df:77:40:72:2f:50:c3:91: e7:33:19:fa:f4:13:cb:9d:62:51:44:fc:69:7a:1d:c0:83:3a: d9:c8:b8:00:17:d1:00:90:ea:b3:a7:09:7d:25:65:7e:ca:da: 68:cd:fa:b7:03:19:39:7e:ac:b0:3f:f6:a8:9d:29:6c:5b:10: 18:f9:b6:64:de:5e:8b:60:2d:4a:6d:9a:58:fa:d6:61:04:9f: cb:56:bb:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPN14qV6h1OgesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzllNDBjNzAtMGQzMi00Y2Q2LThhZWMtYjhhZTIwYTVkZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6AEpcKX0Z3SZrKtje1oh6I9wPBdeMQzdX79 gkb8AuNJy0K10xNYDoBa5bMWen80FD9VNbQ0tS6gQvNnztuibo4nwWjB1E62cB84 SvSGEBx7te9eTRwFXm2oT79qriLpRxxAXGzT5+zOIwgpMlFtFDTaAyag9pKKlci2 86k6KdAWobJ1yHH+VRBRxwhzpGAbMIei6YU/IOVhgc7/eeHGPR0GouZmlxLvoHtz wrGhceXSKIkg3jo262grA7oisIpQuSrCz9z4ONrXdJ+MjOs7WIhKWphSXYbHfUro UGC168bOZm1JgG2mZvoZA8s7O1lUgZXfP+jVhB2sqR6o1/k8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkpEzNQ+4GBU2yQexsXNdi8jVxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjc1OWFmYWEtYmU2Mi0z Nzk1LTk2ZWUtNDRjMTlhZGIyMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADAfyCWlvbwjPpumZPkJhlhOPIIIekMSFNZsVtbz3goedg2E1qhi2ih HqsQUQ+O1bRkZ1J2q+drSFrWcWIA9qylEaha9IKP0EM8GVTyJJuVbPxlbGSrB17Q F9v5xTNuVH/VXzRPY93kBBtUn9tqmkNnuJK2/1KjyU+rrpDDh8T/GLSmfeuhhjvO p0LcndDg2Re6gurOHWNOh2PhlTVcYHjANSRKmOArTmOoxkrfd0ByL1DDkeczGfr0 E8udYlFE/Gl6HcCDOtnIuAAX0QCQ6rOnCX0lZX7K2mjN+rcDGTl+rLA/9qidKWxb EBj5tmTeXotgLUptmlj61mEEn8tWu+c= -----END CERTIFICATE-----Generated at Sun Sep 27 10:41:20 2026 by rpki-client