$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa File: cbac3622-d922-3d32-93c8-7b1c3832c248.roa (raw, json) Hash identifier: KI1dAXOIhOWSRqtGkbGJVhj8iaxgQl/PA5PxTc77QMg= Subject key identifier: 33:40:AD:29:35:37:A3:A7:4E:33:F0:04:77:A5:8C:60:E8:29:85:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B91F8C99E00A857CA3280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:91:f8:c9:9e:00:a8:57:ca:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27b7b0d6-3c8a-459d-b20d-6a2bd3b17a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:2e:95:e8:09:61:07:df:73:66:54:6e:08: fc:4e:0a:78:a3:e2:57:51:69:a5:ba:e5:12:74:d3: 30:b1:1e:c0:50:40:8f:35:29:53:21:44:49:95:05: b8:d9:58:a1:15:92:58:f6:24:0b:a2:be:b6:4b:bc: 43:53:73:7c:28:f4:ae:0b:5d:1f:1e:76:6a:02:91: 5b:db:38:e9:d3:4e:90:84:0a:22:f0:4e:77:ea:2d: a0:3d:27:85:ab:c4:d5:16:06:81:e7:07:12:9a:02: c5:94:dc:0a:49:e7:d4:61:ab:48:f2:c5:b0:3b:68: 25:ad:7a:e5:34:72:b3:92:5c:a0:1f:74:a7:48:d1: 68:30:e3:2c:ce:21:09:70:e2:90:d6:dc:1a:4c:83: d1:b8:99:4b:71:65:98:b1:4c:8a:d5:c3:cf:e6:f9: 3b:05:4f:88:61:13:8e:ff:fd:2c:eb:0e:01:23:af: 97:8b:2c:65:75:bf:e6:00:3b:4a:fc:4a:50:25:a0: c7:97:87:ac:36:4a:ac:56:37:c1:a8:0f:a0:d2:e3: 0b:7b:2f:cb:0a:9e:6a:83:e2:7d:15:31:30:56:21: 39:5e:8c:d1:99:41:ff:c0:6f:e5:75:1d:ba:bb:e0: bd:4b:ac:1a:4f:96:50:6c:6d:dc:8e:ee:94:cf:6d: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:AD:29:35:37:A3:A7:4E:33:F0:04:77:A5:8C:60:E8:29:85:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:97:89:75:00:6b:36:ad:5e:8c:52:1b:96:fe:e1:8d:c9:6e: 71:10:fb:15:e0:85:45:50:94:a4:69:4f:26:eb:e4:65:9c:f3: a0:79:b9:c0:35:b4:18:a4:e9:21:31:9e:16:71:3e:86:8e:2b: 53:ae:1d:5c:74:d5:cc:e1:df:75:fd:31:75:28:2e:40:27:aa: 17:5c:15:39:85:6d:34:65:0f:4d:ff:16:88:95:07:37:37:e7: 88:be:cb:74:71:92:0b:14:84:0c:1b:6b:f6:50:86:79:3d:95: 32:53:58:d8:32:80:b1:50:a3:c6:aa:55:f1:9d:9d:fb:48:d7: 25:e3:d7:4c:16:91:83:e4:37:c0:1e:38:cf:ae:dd:2f:2f:ba: e2:14:8e:76:82:67:a3:8c:76:7d:3b:25:8f:61:07:ca:2a:04: fb:c3:5d:53:88:f2:75:3d:0e:5a:aa:b8:dc:13:1c:86:4a:92: 3e:80:ff:9d:b4:88:df:78:05:41:a9:04:67:7c:6a:ba:4e:cb: d1:6e:23:cf:f2:08:15:f7:13:c1:63:a5:22:f3:ad:5b:8f:64: eb:bb:98:4d:32:30:7d:33:ac:09:6d:40:bb:8b:b5:c4:9c:a6: 5f:3a:3f:6e:93:98:a7:60:c8:08:ef:28:30:07:45:4e:d4:4d: 4c:66:84:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5H4yZ4AqFfKMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdiN2IwZDYtM2M4YS00NTlkLWIyMGQtNmEyYmQzYjE3YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviYulegJYQffc2ZUbgj8Tgp4o+JXUWmluuUS dNMwsR7AUECPNSlTIURJlQW42VihFZJY9iQLor62S7xDU3N8KPSuC10fHnZqApFb 2zjp006QhAoi8E536i2gPSeFq8TVFgaB5wcSmgLFlNwKSefUYatI8sWwO2glrXrl NHKzklygH3SnSNFoMOMsziEJcOKQ1twaTIPRuJlLcWWYsUyK1cPP5vk7BU+IYROO //0s6w4BI6+Xiyxldb/mADtK/EpQJaDHl4esNkqsVjfBqA+g0uMLey/LCp5qg+J9 FTEwViE5XozRmUH/wG/ldR26u+C9S6waT5ZQbG3cju6Uz23ZZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNArSk1N6OnTjPwBHeljGDoKYUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JhYzM2MjItZDkyMi0z ZDMyLTkzYzgtN2IxYzM4MzJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6XiXUAazatXoxSG5b+4Y3JbnEQ+xXghUVQlKRpTybr5GWc86B5ucA1 tBik6SExnhZxPoaOK1OuHVx01czh33X9MXUoLkAnqhdcFTmFbTRlD03/FoiVBzc3 54i+y3RxkgsUhAwba/ZQhnk9lTJTWNgygLFQo8aqVfGdnftI1yXj10wWkYPkN8Ae OM+u3S8vuuIUjnaCZ6OMdn07JY9hB8oqBPvDXVOI8nU9DlqquNwTHIZKkj6A/520 iN94BUGpBGd8arpOy9FuI8/yCBX3E8FjpSLzrVuPZOu7mE0yMH0zrAltQLuLtcSc pl86P26TmKdgyAjvKDAHRU7UTUxmhAE= -----END CERTIFICATE-----Generated at Sun Sep 27 03:01:11 2026 by rpki-client