$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa File: d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa (raw, json) Hash identifier: 2jLZJUV23gBYwxEyf3GMsq5yLeeD9XaS6R2u4yT1V7g= Subject key identifier: A1:10:B2:DB:36:7E:F4:68:92:6C:49:DF:50:D5:FB:32:7D:79:B7:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4988E64156062717ADE08360 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e6:41:56:06:27:17:ad:e0:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0bd49361-6223-4743-8584-8bacbd92f141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:f0:d4:06:59:47:64:fb:74:b8:f8:dc:15: bc:89:b4:11:ed:3b:fe:68:74:be:74:84:39:ea:ce: a2:10:70:01:8e:0f:e6:dc:76:2d:48:17:b6:f2:99: be:a9:26:dd:c9:a8:90:0b:fb:d6:23:2c:6b:2d:b0: 1c:e2:d8:d0:ee:d0:0f:3d:51:b2:ea:c8:19:ff:e4: a3:26:b9:65:22:67:da:53:53:9b:a2:4a:cd:1d:ee: 53:7a:b0:4e:c8:0f:f7:b0:76:a9:85:d9:c0:ee:46: dd:b8:19:b4:d2:e7:ba:d9:3d:4f:56:bf:7f:3d:d4: 2e:3a:97:b6:b8:0f:a8:56:c2:5b:65:0c:38:eb:2f: 44:d0:6d:6d:46:0f:46:22:bd:c5:ec:33:7b:61:8b: 3b:55:86:3c:e5:2e:4e:3f:6b:7a:e0:2b:82:1b:60: 65:45:6b:63:c0:0d:44:85:a9:15:5b:8a:08:a5:41: 07:ae:7d:3f:1c:ad:7b:42:72:40:12:d4:14:ef:fb: 14:bc:b4:b4:11:bb:1e:e2:95:d7:76:2e:04:b9:1c: 17:3f:f7:8e:17:c5:a1:7b:2d:31:2e:e9:a0:7e:05: 62:ff:ce:8d:13:76:09:46:fe:f4:d5:5b:f7:85:36: e5:e8:c9:f2:34:86:33:27:3e:c2:12:78:a2:1d:d3: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:B2:DB:36:7E:F4:68:92:6C:49:DF:50:D5:FB:32:7D:79:B7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a8:16:e0:a2:e3:7b:5b:4b:57:ab:83:14:b2:f4:c4:c6:76: 6e:fb:3e:78:b1:57:de:44:79:35:a2:e7:50:87:64:40:9a:5a: d5:d8:48:d6:3d:15:e5:e8:17:e0:00:ab:0c:24:b4:12:57:80: 29:61:f0:af:05:52:b1:91:79:07:89:60:e0:e7:28:fb:56:a8: a2:4b:40:6b:95:ad:7e:f0:6b:b9:33:5c:1d:62:f9:73:c4:36: ed:e4:27:29:f2:9b:10:af:42:61:28:90:6f:2f:b2:0f:78:c1: d4:3e:61:ee:e4:44:02:35:e4:01:70:77:2b:49:b8:b9:39:9e: b3:81:2b:5c:3c:1e:47:ac:80:21:e9:85:d2:0a:b2:d8:99:23: e6:98:ca:0c:f5:36:8f:58:25:d5:ae:2f:72:19:8e:8b:1e:cb: 15:ed:36:3b:11:7b:18:b1:62:e0:78:42:98:7f:89:c4:30:79: a6:6d:3d:e0:3b:ec:4d:39:87:de:cb:21:39:39:e1:61:68:13: b8:66:a1:da:72:cc:e0:da:7f:68:35:da:6d:f7:bd:77:86:39: 02:bb:58:8c:3e:0e:ff:b3:82:7e:4e:f8:34:07:6c:60:ff:92: bf:da:d2:ce:58:e3:ad:42:16:f4:cb:f0:ff:6a:5c:9b:f2:dd: b0:66:c3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiOZBVgYnF63gg2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGJkNDkzNjEtNjIyMy00NzQzLTg1ODQtOGJhY2JkOTJmMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ7w1AZZR2T7dLj43BW8ibQR7Tv+aHS+dIQ5 6s6iEHABjg/m3HYtSBe28pm+qSbdyaiQC/vWIyxrLbAc4tjQ7tAPPVGy6sgZ/+Sj JrllImfaU1ObokrNHe5TerBOyA/3sHaphdnA7kbduBm00ue62T1PVr9/PdQuOpe2 uA+oVsJbZQw46y9E0G1tRg9GIr3F7DN7YYs7VYY85S5OP2t64CuCG2BlRWtjwA1E hakVW4oIpUEHrn0/HK17QnJAEtQU7/sUvLS0Ebse4pXXdi4EuRwXP/eOF8Whey0x LumgfgVi/86NE3YJRv701Vv3hTbl6MnyNIYzJz7CEniiHdNbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEQsts2fvRokmxJ31DV+zJ9ebc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM4MDkwZmQtMWRkYS0z YzJlLWE0Y2MtNGE0ZDI4MmJjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWoFuCi43tbS1ergxSy9MTGdm77PnixV95EeTWi51CHZECaWtXYSNY9 FeXoF+AAqwwktBJXgClh8K8FUrGReQeJYODnKPtWqKJLQGuVrX7wa7kzXB1i+XPE Nu3kJynymxCvQmEokG8vsg94wdQ+Ye7kRAI15AFwdytJuLk5nrOBK1w8HkesgCHp hdIKstiZI+aYygz1No9YJdWuL3IZjoseyxXtNjsRexixYuB4Qph/icQweaZtPeA7 7E05h97LITk54WFoE7hmodpyzODaf2g12m33vXeGOQK7WIw+Dv+zgn5O+DQHbGD/ kr/a0s5Y461CFvTL8P9qXJvy3bBmw1I= -----END CERTIFICATE-----Generated at Fri Sep 25 13:34:00 2026 by rpki-client