$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c89fced8-9053-3608-a868-5e2a9ccf4306.roa File: c89fced8-9053-3608-a868-5e2a9ccf4306.roa (raw, json) Hash identifier: 44eEXUCCLg/Tg395HYz9JqP/Y/op03KGNk2cRK0w7eQ= Subject key identifier: 27:DE:BD:20:D9:7E:88:57:09:95:E8:47:A3:9E:D6:12:BA:F8:8F:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49736AF378F7ADD37C08EF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c89fced8-9053-3608-a868-5e2a9ccf4306.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6a:f3:78:f7:ad:d3:7c:08:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e17d5b4a-610d-4160-9257-9959d2896ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:9f:04:e7:ad:01:e0:ef:dc:a8:8e:6c:4c: 91:64:a4:e0:0b:c8:38:56:ad:5c:a1:9e:0f:65:ba: 87:3d:13:75:e6:00:84:7a:87:e5:21:c4:a7:a9:5a: b6:69:d2:dd:7d:04:af:4d:6f:0a:f5:fe:c7:ed:54: 93:df:95:f3:81:87:ff:10:40:ce:a8:65:c1:a1:30: 17:4c:15:5e:7d:07:7a:6e:d1:e1:c6:1c:df:c4:0f: 35:b8:f9:87:0e:ae:9e:32:64:6b:bb:0c:6d:47:5c: 2e:25:1c:9e:f0:49:4f:87:43:63:09:ca:e4:e7:a0: a8:a1:1e:04:24:09:60:d7:ab:a9:37:b1:57:1c:9c: 6d:92:96:e2:1a:0a:f0:b8:93:94:2c:6e:15:f9:9b: 64:e4:95:c5:4f:5c:30:86:4a:e3:05:c0:3a:55:8d: 6b:b9:f9:33:72:ee:d3:a2:31:a7:73:be:64:ba:45: c4:6f:86:df:84:54:60:d1:3e:ec:bc:14:88:f0:ae: a0:1c:86:e3:36:7f:25:9b:ba:9b:45:7a:f5:35:20: 7f:d6:db:9e:55:8c:8c:94:73:56:5f:87:f5:7e:53: 54:bf:ee:8e:2d:f3:90:1f:9d:d2:33:f1:89:76:95: 4d:02:b7:2f:97:a8:69:e3:29:ce:51:0f:e8:ed:18: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:BD:20:D9:7E:88:57:09:95:E8:47:A3:9E:D6:12:BA:F8:8F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c89fced8-9053-3608-a868-5e2a9ccf4306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e7:d9:f2:39:42:ed:a8:6d:93:ed:98:be:8f:26:07:e2:0b: 43:db:2a:d3:c2:01:6c:67:f1:47:ad:f6:df:58:1f:d0:45:28: 30:41:08:1f:13:ea:08:2b:0a:9d:d0:37:7a:75:a6:4e:94:47: e2:37:dc:bf:58:19:33:4b:a8:80:70:5a:fa:53:c9:70:70:56: ff:73:e5:9c:74:42:c2:59:54:bc:3a:47:12:32:42:89:ce:11: 58:08:6f:00:bf:4e:17:50:c5:6c:9b:64:43:d0:47:d6:28:fe: 39:52:2f:42:cd:3e:e2:d9:1a:a7:fa:31:7f:3b:5c:38:72:28: 6e:b0:45:35:d4:1a:d6:59:85:01:e0:73:93:c5:0d:ea:dc:c8: 0b:a4:f6:3e:a0:5a:2c:b9:16:fb:72:8f:bc:39:d8:18:cb:fb: de:3b:4a:1d:48:90:25:64:25:cb:4f:b7:ab:89:55:50:14:32: ee:21:b6:df:7a:82:86:8d:b9:41:c9:fc:3b:39:74:37:4f:3a: 6f:02:65:04:61:4c:d8:21:10:e4:f7:8a:ec:0e:f1:ae:30:6a: 25:08:a5:2d:e5:4f:7c:6c:70:1e:1a:2d:7b:80:cd:6e:72:55: fd:d8:4b:99:95:1c:e2:26:7b:e0:e4:ea:e7:76:a6:53:28:53: 9f:e9:d9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2rzePet03wI74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTE3ZDViNGEtNjEwZC00MTYwLTkyNTctOTk1OWQyODk2Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi02fBOetAeDv3KiObEyRZKTgC8g4Vq1coZ4P ZbqHPRN15gCEeoflIcSnqVq2adLdfQSvTW8K9f7H7VST35XzgYf/EEDOqGXBoTAX TBVefQd6btHhxhzfxA81uPmHDq6eMmRruwxtR1wuJRye8ElPh0NjCcrk56CooR4E JAlg16upN7FXHJxtkpbiGgrwuJOULG4V+Ztk5JXFT1wwhkrjBcA6VY1rufkzcu7T ojGnc75kukXEb4bfhFRg0T7svBSI8K6gHIbjNn8lm7qbRXr1NSB/1tueVYyMlHNW X4f1flNUv+6OLfOQH53SM/GJdpVNArcvl6hp4ynOUQ/o7RiJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfevSDZfohXCZXoR6Oe1hK6+I9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzg5ZmNlZDgtOTA1My0z NjA4LWE4NjgtNWUyYTljY2Y0MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7n2fI5Qu2obZPtmL6PJgfiC0PbKtPCAWxn8Uet9t9YH9BFKDBBCB8T 6ggrCp3QN3p1pk6UR+I33L9YGTNLqIBwWvpTyXBwVv9z5Zx0QsJZVLw6RxIyQonO EVgIbwC/ThdQxWybZEPQR9Yo/jlSL0LNPuLZGqf6MX87XDhyKG6wRTXUGtZZhQHg c5PFDercyAuk9j6gWiy5Fvtyj7w52BjL+947Sh1IkCVkJctPt6uJVVAUMu4htt96 goaNuUHJ/Ds5dDdPOm8CZQRhTNghEOT3iuwO8a4waiUIpS3lT3xscB4aLXuAzW5y Vf3YS5mVHOIme+Dk6ud2plMoU5/p2TM= -----END CERTIFICATE-----Generated at Fri Sep 25 19:58:46 2026 by rpki-client