$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa File: c642162f-4f2f-3445-93ef-30353603dc6b.roa (raw, json) Hash identifier: w6ZfgS3TTKnCSW/5/TMVSBScOVZSQZHsvRqJusTYAUM= Subject key identifier: 42:6E:F0:04:8E:E2:28:31:B6:8A:61:C1:17:2F:FE:45:58:1A:2F:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972FDE76DD9231DB5E4EC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fd:e7:6d:d9:23:1d:b5:e4:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc929c0a-7c19-4b18-8949-fde10e5b4441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:04:68:9c:1f:6a:80:60:11:c3:61:af:28: f2:b8:79:6b:5b:31:95:e6:bc:71:93:c7:2c:63:c1: 5f:ad:ce:7d:94:07:53:6c:e3:67:7b:b8:c5:77:ee: 7a:bf:27:67:5c:bd:73:13:3a:ee:d4:63:b5:08:99: ac:f4:ac:81:33:53:c4:b5:6a:14:8a:3a:42:b6:a7: 8f:e7:c7:73:56:dd:50:78:eb:1e:7d:f2:9c:c7:3b: 12:1a:3e:ee:fd:89:94:77:2e:fb:60:ec:66:24:6d: ca:91:5c:a2:59:7a:59:d0:5a:50:f2:01:c5:61:9a: f7:38:ec:30:37:06:af:aa:f6:6c:2b:5e:6f:1c:5b: 1e:74:46:6d:dc:a7:3b:56:d9:3c:ce:bc:2d:1b:ad: 95:c1:a2:06:89:c2:49:6d:78:e1:34:1a:45:93:88: 77:b3:6a:b8:5c:2b:76:f5:2a:ce:65:19:8c:12:bc: 76:e4:02:04:58:22:8d:99:36:53:5b:f4:b6:72:cf: 2d:1e:1b:01:74:96:9b:0a:ab:98:4c:2d:18:a2:52: 56:e3:7e:44:59:71:55:24:7e:4a:4b:cd:73:13:b3: 2b:21:b3:fd:f1:14:cc:73:6a:96:5f:4a:06:32:14: c9:fd:c1:f1:ab:34:b1:23:e8:6e:13:b6:6c:19:d7: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:F0:04:8E:E2:28:31:B6:8A:61:C1:17:2F:FE:45:58:1A:2F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8b:06:9d:48:3b:a5:6d:57:f7:1d:62:8b:ce:37:fa:b5:34: 14:6b:9f:64:e9:a1:1f:ec:fd:5f:8e:49:7b:cf:34:f4:43:e0: a7:84:31:c6:e7:91:f0:c1:c1:6e:47:4d:d1:be:57:5d:dc:40: 7e:0a:3c:bf:1a:06:d6:eb:d4:2f:0c:32:51:de:93:42:7f:4f: 19:2d:a9:7e:87:73:ba:34:ef:19:8c:40:2b:e0:94:fb:91:44: 54:63:27:78:fe:f6:ee:9a:8b:cb:c4:1e:95:9b:fe:90:01:1b: fd:4a:9e:e1:24:c6:ab:08:2d:51:5e:3c:16:ab:5c:9f:e7:f9: e3:60:f3:f6:c6:79:a9:2f:6d:92:52:f2:14:d9:8b:6f:f5:ac: 6d:22:1c:85:d3:11:94:a5:5d:06:7c:d1:9d:2b:97:cc:65:b3: 04:54:23:a1:e7:64:57:35:75:00:ac:a5:12:47:4d:7a:ce:d9: d9:57:fc:32:dd:de:47:41:32:07:0a:a8:bf:96:eb:bf:7b:30: 6c:96:3f:82:38:6d:6d:d0:27:ae:92:bd:24:d4:76:cc:2d:c3: b6:bc:1b:25:b1:03:7c:30:61:53:31:ac:28:de:49:c5:9e:d3: 38:47:a2:a8:55:a4:69:de:cc:b5:95:7e:37:9a:8c:fa:99:a8: f2:ad:28:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcv3nbdkjHbXk7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM5MjljMGEtN2MxOS00YjE4LTg5NDktZmRlMTBlNWI0NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj70EaJwfaoBgEcNhryjyuHlrWzGV5rxxk8cs Y8Ffrc59lAdTbONne7jFd+56vydnXL1zEzru1GO1CJms9KyBM1PEtWoUijpCtqeP 58dzVt1QeOseffKcxzsSGj7u/YmUdy77YOxmJG3KkVyiWXpZ0FpQ8gHFYZr3OOww NwavqvZsK15vHFsedEZt3Kc7Vtk8zrwtG62VwaIGicJJbXjhNBpFk4h3s2q4XCt2 9SrOZRmMErx25AIEWCKNmTZTW/S2cs8tHhsBdJabCquYTC0YolJW435EWXFVJH5K S81zE7MrIbP98RTMc2qWX0oGMhTJ/cHxqzSxI+huE7ZsGdcLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJu8ASO4igxtophwRcv/kVYGi+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzY0MjE2MmYtNGYyZi0z NDQ1LTkzZWYtMzAzNTM2MDNkYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSLBp1IO6VtV/cdYovON/q1NBRrn2TpoR/s/V+OSXvPNPRD4KeEMcbn kfDBwW5HTdG+V13cQH4KPL8aBtbr1C8MMlHek0J/TxktqX6Hc7o07xmMQCvglPuR RFRjJ3j+9u6ai8vEHpWb/pABG/1KnuEkxqsILVFePBarXJ/n+eNg8/bGeakvbZJS 8hTZi2/1rG0iHIXTEZSlXQZ80Z0rl8xlswRUI6HnZFc1dQCspRJHTXrO2dlX/DLd 3kdBMgcKqL+W6797MGyWP4I4bW3QJ66SvSTUdswtw7a8GyWxA3wwYVMxrCjeScWe 0zhHoqhVpGnezLWVfjeajPqZqPKtKDI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:45:54 2026 by rpki-client