$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa File: d0adf6f5-43ee-385c-be0f-59c4649227e9.roa (raw, json) Hash identifier: 4wa1LWICVPdXVs1dCGCez8WcvNLXby9WA9tBdRbAJdQ= Subject key identifier: 3B:86:35:6F:7B:1E:5F:05:80:2F:9D:85:2E:5D:3E:6E:A8:8D:CC:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49734618C1486622D04F1E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:46:18:c1:48:66:22:d0:4f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fc8a507c-7c6b-4f53-b1a8-a99ce21fba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:ba:63:4e:a8:17:ec:62:6a:16:d1:ff:e1: 6d:5a:71:1b:a0:8b:69:c5:41:0a:11:01:e9:b1:c7: 99:60:b3:3c:bf:a2:f4:23:d4:14:c0:cc:ce:f0:26: e4:9d:0d:19:97:2b:bd:88:a7:50:ef:c7:01:67:3b: 40:2e:e2:1b:70:56:6b:7e:10:f2:d6:85:aa:c8:8d: f5:b7:1e:5b:97:2b:fe:77:4b:31:55:58:cf:1c:ca: 2f:c9:ed:dc:42:bc:be:fb:fc:c6:41:e4:2f:54:9b: 6a:15:5a:0d:80:e6:40:43:42:45:b5:d9:8f:81:60: 67:94:de:01:4b:0c:46:8a:71:48:24:e6:98:f8:cc: 25:16:ea:68:79:a9:82:1c:b7:65:06:84:fd:63:d6: c7:e0:af:98:8f:b0:07:25:d1:0f:24:66:d8:29:de: 95:33:53:a9:23:11:b6:7b:c7:49:c1:f7:8d:30:c1: 78:25:fa:fb:7b:fe:3d:e0:67:d4:af:c7:21:e1:e8: 32:5f:aa:8b:d1:52:23:1c:e6:e7:44:13:59:b8:a1: cd:8f:0d:de:a0:1a:43:3d:04:39:0d:56:ab:8c:23: d6:44:4f:d1:56:02:9b:6a:e6:1c:7c:b0:99:ff:61: db:9d:ee:24:72:43:8b:6c:be:e2:50:d1:f2:96:62: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:86:35:6F:7B:1E:5F:05:80:2F:9D:85:2E:5D:3E:6E:A8:8D:CC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c3:b9:3c:cd:29:33:83:9d:78:ff:ed:72:b1:8c:ee:10:59: d6:eb:ff:80:4d:01:14:d5:33:a2:96:cf:56:0f:03:ef:68:19: a7:f0:d3:0d:b7:5c:35:e4:7a:f7:ee:fc:fb:bc:74:52:ea:c1: 7f:7d:76:1d:01:0c:9c:50:3f:2d:26:af:61:fa:6d:00:46:d4: 8d:3d:cf:9a:55:bf:b8:46:ea:0d:e7:2f:c4:39:98:3b:26:10: 3f:e0:4d:90:7f:d2:02:35:3e:a7:7c:8b:b9:a0:79:56:a2:1a: 9d:0e:8a:f7:44:c2:13:5e:7d:a3:68:1b:36:eb:4d:5e:1e:42: dc:03:b5:bb:f3:79:cb:ad:98:8f:05:d6:f2:66:99:b1:69:67: 41:4e:4f:17:aa:12:80:e9:86:a3:33:4e:ea:2d:ae:8e:19:3e: 6f:ba:38:8d:10:6f:ed:d3:3d:55:80:b7:eb:70:d4:b7:77:74: 13:2a:42:39:d7:66:3c:ec:04:08:d5:e6:06:ff:6b:ad:eb:c1: 3e:e9:ba:18:83:12:2c:f8:a9:38:82:71:17:04:a0:d1:b5:23: 15:d8:91:c5:ed:af:08:ec:40:ab:28:08:fe:ed:46:50:a9:bb: d1:c2:0f:ac:3d:11:84:e2:ca:51:fe:3c:ab:04:d4:07:0d:ef: bb:1a:59:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0YYwUhmItBPHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM4YTUwN2MtN2M2Yi00ZjUzLWIxYTgtYTk5Y2UyMWZiYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwC6Y06oF+xiahbR/+FtWnEboItpxUEKEQHp sceZYLM8v6L0I9QUwMzO8CbknQ0Zlyu9iKdQ78cBZztALuIbcFZrfhDy1oWqyI31 tx5blyv+d0sxVVjPHMovye3cQry++/zGQeQvVJtqFVoNgOZAQ0JFtdmPgWBnlN4B SwxGinFIJOaY+MwlFupoeamCHLdlBoT9Y9bH4K+Yj7AHJdEPJGbYKd6VM1OpIxG2 e8dJwfeNMMF4Jfr7e/494GfUr8ch4egyX6qL0VIjHObnRBNZuKHNjw3eoBpDPQQ5 DVarjCPWRE/RVgKbauYcfLCZ/2Hbne4kckOLbL7iUNHylmJa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuGNW97Hl8FgC+dhS5dPm6ojcxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhZGY2ZjUtNDNlZS0z ODVjLWJlMGYtNTljNDY0OTIyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLDuTzNKTODnXj/7XKxjO4QWdbr/4BNARTVM6KWz1YPA+9oGafw0w23 XDXkevfu/Pu8dFLqwX99dh0BDJxQPy0mr2H6bQBG1I09z5pVv7hG6g3nL8Q5mDsm ED/gTZB/0gI1Pqd8i7mgeVaiGp0OivdEwhNefaNoGzbrTV4eQtwDtbvzecutmI8F 1vJmmbFpZ0FOTxeqEoDphqMzTuotro4ZPm+6OI0Qb+3TPVWAt+tw1Ld3dBMqQjnX ZjzsBAjV5gb/a63rwT7puhiDEiz4qTiCcRcEoNG1IxXYkcXtrwjsQKsoCP7tRlCp u9HCD6w9EYTiylH+PKsE1AcN77saWdc= -----END CERTIFICATE-----Generated at Mon Sep 28 01:13:34 2026 by rpki-client