$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa File: dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa (raw, json) Hash identifier: 4Tn5H0ZlSkGXBOA6tqwFCYtKHW2eaTOrgd+dxrsILbM= Subject key identifier: E4:3D:91:F2:31:22:D6:1E:91:A5:E9:D3:96:C3:27:B2:69:39:51:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6A2A9C8F2D27651A6C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.23.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6a:2a:9c:8f:2d:27:65:1a:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c7da99f2-760b-4ec9-b031-c90fe8318dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:25:aa:8a:68:1d:3e:3c:f8:1e:6f:b6:b9: 5a:b5:04:cd:f9:b2:c1:df:69:d7:24:37:5a:97:2e: b7:54:0a:f9:a8:5a:e6:3d:33:5d:e0:f7:37:67:04: 1c:d1:89:d9:36:40:27:5a:12:e9:7f:02:4b:5b:6e: 61:56:ea:4d:bb:5f:64:4d:4f:26:4f:69:b9:f2:27: 7d:c0:0e:47:24:6a:fb:d5:16:41:59:48:36:14:65: f4:50:08:e0:2f:1b:6a:18:f1:04:c7:ad:b2:28:0f: e9:c7:be:ac:84:8f:7e:6d:cf:3e:e3:ca:55:a5:f6: 8c:6a:5a:27:cd:c6:22:69:5f:a5:dc:d5:3f:e3:dd: 96:a5:ea:e5:f0:0a:de:5d:49:ac:2c:c1:48:f0:75: e8:2e:4a:c0:f8:de:08:24:01:72:a3:86:40:1a:3a: fe:b8:0e:13:87:00:0c:8b:07:ae:6b:9c:b6:de:52: 4d:c2:f4:ce:13:da:b0:b7:a9:9f:0b:3f:70:b1:70: 2d:d0:eb:1e:4d:7b:ca:5e:fa:e8:9c:7d:8d:6a:c8: f4:14:9d:50:4c:66:eb:27:fd:2a:80:6a:50:1a:26: 1a:d0:4e:3e:14:f5:b0:b2:67:82:e3:2f:12:64:74: 2d:50:a6:d5:32:e4:37:e2:d9:d8:7b:67:60:19:9a: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:91:F2:31:22:D6:1E:91:A5:E9:D3:96:C3:27:B2:69:39:51:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4a:56:bf:16:80:1b:ae:18:7c:99:cb:91:f8:32:ac:62:d1: e7:ea:9b:83:a7:b7:2d:d2:6d:e0:72:48:f2:9e:08:fd:a2:00: 24:42:dd:0a:30:de:f2:e3:60:7a:d4:73:54:0e:d9:1f:1c:49: 79:96:d1:23:4a:2f:4e:f7:84:27:9b:6f:2b:f5:88:cd:9f:78: 98:df:86:a0:99:ec:e1:b8:c5:5f:c4:3c:9b:cd:89:15:a1:5f: c3:a2:14:f2:2f:eb:8a:7e:07:7b:79:73:cd:cd:ca:87:38:fa: 7b:c4:84:6f:27:ab:d4:cf:12:c0:d5:4c:2a:22:5d:88:9e:cd: f2:03:80:30:09:88:0a:56:ad:37:ca:98:a2:b4:e1:c5:07:fc: 71:8d:09:42:7f:45:2f:0d:5a:72:ca:5e:fe:e8:5e:8e:b1:9f: 61:1e:46:f1:97:66:87:a0:ce:c2:21:dd:e4:66:29:e6:15:fb: b5:56:b8:a1:f5:53:41:86:e0:bc:bb:f8:34:62:6c:25:d9:3b: 99:d4:0a:68:d0:5f:38:d4:77:80:48:13:fd:48:ee:9d:22:66: 67:4d:89:77:ab:ae:d4:4c:a1:8c:c6:cd:1a:87:ea:56:88:0e: 42:77:5d:28:f9:35:58:51:8e:8c:fd:cf:0a:f0:22:5c:23:be: 41:4c:44:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWoqnI8tJ2UabIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzdkYTk5ZjItNzYwYi00ZWM5LWIwMzEtYzkwZmU4MzE4ZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/0lqopoHT48+B5vtrlatQTN+bLB32nXJDda ly63VAr5qFrmPTNd4Pc3ZwQc0YnZNkAnWhLpfwJLW25hVupNu19kTU8mT2m58id9 wA5HJGr71RZBWUg2FGX0UAjgLxtqGPEEx62yKA/px76shI9+bc8+48pVpfaMalon zcYiaV+l3NU/492Wperl8AreXUmsLMFI8HXoLkrA+N4IJAFyo4ZAGjr+uA4ThwAM iweua5y23lJNwvTOE9qwt6mfCz9wsXAt0OseTXvKXvronH2Nasj0FJ1QTGbrJ/0q gGpQGiYa0E4+FPWwsmeC4y8SZHQtUKbVMuQ34tnYe2dgGZrCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ9kfIxItYekaXp05bDJ7JpOVEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGQwNDUwMzgtNTBlNS0z YzNmLTgyZmItMjU4ZWViNWM2NmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRciMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVKVr8WgBuuGHyZy5H4Mqxi0efqm4Onty3SbeBySPKeCP2iACRC3Qow 3vLjYHrUc1QO2R8cSXmW0SNKL073hCebbyv1iM2feJjfhqCZ7OG4xV/EPJvNiRWh X8OiFPIv64p+B3t5c83Nyoc4+nvEhG8nq9TPEsDVTCoiXYiezfIDgDAJiApWrTfK mKK04cUH/HGNCUJ/RS8NWnLKXv7oXo6xn2EeRvGXZoegzsIh3eRmKeYV+7VWuKH1 U0GG4Ly7+DRibCXZO5nUCmjQXzjUd4BIE/1I7p0iZmdNiXerrtRMoYzGzRqH6laI DkJ3XSj5NVhRjoz9zwrwIlwjvkFMRLE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:13:40 2026 by rpki-client