$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee8aba5-f2bb-368d-bba2-600f739f7451.roa File: bee8aba5-f2bb-368d-bba2-600f739f7451.roa (raw, json) Hash identifier: AFNk7c2OG2MTt4iD6mRPtPMREAm3G8uqdkF2lXFhUWc= Subject key identifier: A0:CB:B6:25:8D:FE:8A:F3:A2:2C:31:77:32:60:C4:54:80:C9:96:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DDF79649294D8843AF500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee8aba5-f2bb-368d-bba2-600f739f7451.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.18.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:df:79:64:92:94:d8:84:3a:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=832bccd6-c0a0-44fb-9eec-7cbd16fd5ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:c8:d7:39:9b:ec:c3:a5:de:e1:f9:77:84: c1:b0:db:43:75:94:07:f3:96:a9:f0:64:38:bb:b3: cd:11:ba:6a:e5:5a:5e:da:d5:e4:8e:6b:66:ce:04: f2:df:2d:7b:5c:d4:8b:46:a1:52:28:c8:3b:48:de: 3f:0a:fd:c7:28:d5:29:ec:f9:0b:1b:b1:61:13:47: 4f:27:06:a5:65:fe:e2:83:c7:8d:68:9c:13:54:2b: 8a:bb:05:b4:43:d5:cb:be:ae:46:42:2a:44:26:8d: ea:2d:30:50:e6:af:ca:51:16:21:27:d2:90:f6:aa: ea:a0:30:ba:2f:49:76:46:02:5a:76:26:e5:b3:25: b0:b6:81:22:81:64:41:67:b4:d4:c2:c7:94:a7:61: 43:0d:a2:34:d1:c9:08:36:8a:e7:8b:b0:27:26:e3: 48:ab:12:41:14:cf:96:84:c7:d6:74:38:5d:4d:23: da:bd:6e:68:8c:2e:9d:da:ab:29:0c:fd:be:82:67: 28:4a:8c:4d:df:5e:98:ba:09:bb:d3:d0:dd:b2:e5: cc:16:ee:37:a0:8a:b9:63:53:8d:32:41:c5:19:b6: 3d:fc:23:ea:29:e0:fd:9e:1d:50:cd:23:3b:f6:ec: e7:0d:ff:c0:a1:9d:57:db:70:c5:bc:9c:3b:88:18: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CB:B6:25:8D:FE:8A:F3:A2:2C:31:77:32:60:C4:54:80:C9:96:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee8aba5-f2bb-368d-bba2-600f739f7451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b6:17:c6:d9:8c:24:cd:d3:c0:2e:3c:c4:ec:48:21:b9:7d: 33:f1:9d:ee:f4:6a:67:45:b9:9d:74:dd:75:af:77:d7:2c:ce: 0a:09:88:77:6b:e2:dd:34:09:65:8b:3e:30:99:67:5b:e3:50: e9:ff:b0:95:22:30:2b:99:95:41:5d:f6:0f:9a:a2:76:9e:57: 28:ad:c9:69:4a:8c:f9:9c:f2:0a:5f:53:3d:cf:c4:66:84:15: fe:89:ce:4c:9f:e2:80:77:55:53:2c:a0:84:48:5b:5d:be:1a: 56:e5:45:d5:df:bc:d0:b5:d6:ea:e2:b9:a5:2a:8b:cf:04:cb: b4:a4:b1:a4:a0:41:cd:11:98:01:6e:32:8e:0a:5e:2d:9f:2c: f9:5d:80:22:9a:49:e8:2c:c4:ab:65:04:f7:11:35:a2:db:6b: ce:d7:b6:82:81:96:13:75:d2:fa:eb:6d:d5:73:86:c5:62:37: 1d:6a:e5:d4:c9:62:37:fa:c1:fc:62:82:e4:7a:4d:f2:f7:2c: 8a:ff:62:9e:92:9c:25:19:94:dd:c3:da:97:8f:5b:3a:61:b2: 2a:c2:51:72:50:1f:09:15:f6:37:94:c7:10:60:f7:03:93:61: e8:34:81:1c:1f:cf:55:03:56:a9:79:d8:55:ea:0f:64:37:dd: 1f:44:4a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd95ZJKU2IQ69QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODMyYmNjZDYtYzBhMC00NGZiLTllZWMtN2NiZDE2ZmQ1ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysLI1zmb7MOl3uH5d4TBsNtDdZQH85ap8GQ4 u7PNEbpq5Vpe2tXkjmtmzgTy3y17XNSLRqFSKMg7SN4/Cv3HKNUp7PkLG7FhE0dP JwalZf7ig8eNaJwTVCuKuwW0Q9XLvq5GQipEJo3qLTBQ5q/KURYhJ9KQ9qrqoDC6 L0l2RgJadiblsyWwtoEigWRBZ7TUwseUp2FDDaI00ckINorni7AnJuNIqxJBFM+W hMfWdDhdTSPavW5ojC6d2qspDP2+gmcoSoxN316Yugm709DdsuXMFu43oIq5Y1ON MkHFGbY9/CPqKeD9nh1QzSM79uznDf/AoZ1X23DFvJw7iBgVNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDLtiWN/orzoiwxdzJgxFSAyZb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmVlOGFiYTUtZjJiYi0z NjhkLWJiYTItNjAwZjczOWY3NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+2F8bZjCTN08AuPMTsSCG5fTPxne70amdFuZ103XWvd9cszgoJiHdr 4t00CWWLPjCZZ1vjUOn/sJUiMCuZlUFd9g+aonaeVyityWlKjPmc8gpfUz3PxGaE Ff6Jzkyf4oB3VVMsoIRIW12+GlblRdXfvNC11uriuaUqi88Ey7SksaSgQc0RmAFu Mo4KXi2fLPldgCKaSegsxKtlBPcRNaLba87XtoKBlhN10vrrbdVzhsViNx1q5dTJ Yjf6wfxiguR6TfL3LIr/Yp6SnCUZlN3D2pePWzphsirCUXJQHwkV9jeUxxBg9wOT Yeg0gRwfz1UDVql52FXqD2Q33R9ESpw= -----END CERTIFICATE-----Generated at Sun Sep 27 14:34:01 2026 by rpki-client