$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa File: dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa (raw, json) Hash identifier: 9OUuwebizJGTkEWEciFmZYHG1nor9G/JQ5GMDrGh+I4= Subject key identifier: BE:AA:09:DF:4E:0E:C1:5E:A3:D0:CD:54:3C:5B:05:75:41:DB:47:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49890E5046EAC379EEFBEDC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:0e:50:46:ea:c3:79:ee:fb:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9576dea2-d70e-4dff-b6c4-0d1f96f10a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:39:32:c8:85:06:dc:ba:9b:01:a1:62:83: 0b:e2:a9:95:86:14:46:23:25:a9:41:ed:3a:40:7a: e1:48:c7:09:42:41:c0:68:3a:3d:9a:07:63:b4:49: ac:e8:d4:71:3b:60:16:d5:b7:87:a6:3c:be:db:c4: d9:20:08:56:42:c0:a3:b7:8b:6d:8c:75:11:1a:61: 4b:5a:4a:85:cd:e8:b3:dd:77:a6:f2:cc:c7:71:74: ae:e5:b5:34:3a:94:ad:ac:b7:a1:2d:2c:ec:6f:f6: 52:dc:b7:3d:85:81:e2:9a:d8:3a:99:49:af:c2:50: 71:a3:1e:9e:43:89:8e:da:f2:9c:39:9f:aa:9b:c2: 9f:58:21:ac:34:ea:3b:98:67:b6:61:c8:b0:f8:79: 40:2e:76:77:0a:20:2a:e1:dd:46:7e:36:e5:a9:ab: d4:cf:6e:48:cc:42:57:f8:9c:8e:15:27:1f:eb:5e: 25:f1:4e:e1:d1:83:41:58:b9:0c:c2:9a:11:d3:f1: 4e:93:4e:34:63:87:58:b7:0a:80:13:55:d3:77:6e: 2a:dc:3d:cf:9a:0a:c4:be:9f:03:7d:06:9a:db:3f: 5f:15:41:58:6f:1f:58:73:3f:76:1d:12:6b:5a:52: 0a:a5:27:e2:dd:90:39:10:c0:9f:a0:db:62:5d:83: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:09:DF:4E:0E:C1:5E:A3:D0:CD:54:3C:5B:05:75:41:DB:47:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c9:f6:fc:86:f0:f0:ee:aa:13:88:50:08:4a:68:83:c6:67: 46:a6:35:a5:3e:b4:0c:95:3a:f4:12:c6:fe:d4:e3:80:37:54: c1:a2:13:8e:fe:3d:81:ad:cb:a2:75:f1:c8:0c:74:5e:66:d4: 46:31:90:9b:7e:9d:64:4a:57:9f:6d:65:3f:16:9c:ed:86:a3: 40:cc:94:52:64:da:36:f6:43:83:37:26:4e:74:dc:71:a0:2f: 57:96:69:6e:47:33:d1:1b:12:4d:fe:81:dd:e5:18:a5:a9:82: 03:8c:86:26:9a:52:2f:26:18:8d:1c:7a:34:8d:5c:be:66:d7: ff:1a:4b:1c:b6:eb:a5:9c:6f:1c:df:8f:56:e4:27:a3:2d:b4: 7e:1f:1f:fd:a4:88:42:a7:95:d9:e1:4b:04:ec:15:52:f4:ab: c4:e4:5d:c7:d4:52:a1:75:8a:20:96:68:fe:c8:37:7e:e6:51: af:d4:e5:af:de:7c:3e:d8:0d:c5:21:9a:86:c3:16:bd:ed:c0: 20:8f:4c:3c:3f:44:90:10:96:5b:21:43:cb:5c:cd:a1:81:d7: e9:3c:3d:ae:c5:4b:d7:f9:47:94:67:a8:50:df:43:50:c6:05: 7a:ce:d3:ef:ae:3a:f4:63:a7:fb:9e:73:4f:cd:fd:8f:64:fd: a2:17:c8:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQ5QRurDee777cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU3NmRlYTItZDcwZS00ZGZmLWI2YzQtMGQxZjk2ZjEwYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3g5MsiFBty6mwGhYoML4qmVhhRGIyWpQe06 QHrhSMcJQkHAaDo9mgdjtEms6NRxO2AW1beHpjy+28TZIAhWQsCjt4ttjHURGmFL WkqFzeiz3Xem8szHcXSu5bU0OpStrLehLSzsb/ZS3Lc9hYHimtg6mUmvwlBxox6e Q4mO2vKcOZ+qm8KfWCGsNOo7mGe2Yciw+HlALnZ3CiAq4d1GfjblqavUz25IzEJX +JyOFScf614l8U7h0YNBWLkMwpoR0/FOk040Y4dYtwqAE1XTd24q3D3PmgrEvp8D fQaa2z9fFUFYbx9Ycz92HRJrWlIKpSfi3ZA5EMCfoNtiXYMAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6qCd9ODsFeo9DNVDxbBXVB20cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGQxYWU3MWYtMWQ0MS0z YjcwLWJiYTYtYzVjMjI2YjA5MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXJ9vyG8PDuqhOIUAhKaIPGZ0amNaU+tAyVOvQSxv7U44A3VMGiE47+ PYGty6J18cgMdF5m1EYxkJt+nWRKV59tZT8WnO2Go0DMlFJk2jb2Q4M3Jk503HGg L1eWaW5HM9EbEk3+gd3lGKWpggOMhiaaUi8mGI0cejSNXL5m1/8aSxy266Wcbxzf j1bkJ6MttH4fH/2kiEKnldnhSwTsFVL0q8TkXcfUUqF1iiCWaP7IN37mUa/U5a/e fD7YDcUhmobDFr3twCCPTDw/RJAQllshQ8tczaGB1+k8Pa7FS9f5R5RnqFDfQ1DG BXrO0++uOvRjp/uec0/N/Y9k/aIXyNM= -----END CERTIFICATE-----Generated at Fri Sep 25 15:10:20 2026 by rpki-client