$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec63c255-a238-39ba-86e3-9cf585455410.roa File: ec63c255-a238-39ba-86e3-9cf585455410.roa (raw, json) Hash identifier: ssEEfCHFaZhZHwWRufqSChrTeaVLDAxHJvHt+zTAAlY= Subject key identifier: 2B:E2:49:BD:DB:96:B8:7D:0E:60:C0:07:7E:A2:94:99:B7:66:48:F1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4973881861C2914426C3F9F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec63c255-a238-39ba-86e3-9cf585455410.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.16.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:88:18:61:c2:91:44:26:c3:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9d835d22-680f-44c4-ba92-a2f702565fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:13:95:e4:2d:b3:0d:ae:e5:37:c2:01:11: 65:ca:a9:ec:ed:5a:c8:b0:3f:1b:d9:0b:6c:e9:13: bd:1d:1f:a2:bb:f9:b3:9a:70:08:f2:ad:22:12:51: cc:01:7f:7f:59:1b:4d:07:8b:df:8a:7a:2e:a1:41: 78:7f:74:35:31:53:c6:1f:29:70:ff:bb:c3:33:a7: 62:7f:32:b4:0a:61:22:26:36:33:c2:77:9e:3d:65: cb:df:9b:a6:d8:fc:1e:99:f7:4f:e5:c8:68:cc:d8: 90:1c:2a:bd:a3:27:44:74:1f:63:07:45:83:57:58: ce:d6:42:b0:85:22:85:6b:5e:0a:dc:06:e3:a6:45: 03:8d:e4:0c:57:19:1c:cb:38:54:7b:c7:88:3b:b5: 91:09:7e:41:35:f7:18:19:ac:b5:5b:31:9e:ac:b9: 6a:b7:15:df:fc:4c:11:9e:62:19:cc:f6:d5:e4:fd: d4:72:bb:86:d4:73:11:78:cc:ba:52:b4:1c:eb:13: ac:99:cf:3a:0c:30:1c:ae:85:da:4e:50:2c:52:45: ce:c8:c4:3a:4c:28:52:de:76:4e:63:f3:f0:65:19: 74:81:81:9e:7e:74:d3:2a:da:99:d1:3a:2f:7d:9f: 50:13:cd:bf:9e:46:90:00:fc:b3:dc:02:aa:3f:3a: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:49:BD:DB:96:B8:7D:0E:60:C0:07:7E:A2:94:99:B7:66:48:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec63c255-a238-39ba-86e3-9cf585455410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d2:5e:f5:9e:3f:4c:b3:aa:14:dc:e7:a8:c6:ba:7e:44:60: 26:a4:88:10:fd:d6:d6:72:aa:e0:09:65:66:5f:88:a9:ca:e2: 75:17:96:33:a2:ab:79:2c:bd:76:c4:45:29:4e:2e:43:fb:2d: cb:c3:5f:83:ad:19:36:be:c1:7f:57:b6:dc:27:af:00:ef:98: ef:53:e4:d5:98:1b:1d:a7:44:66:68:57:23:07:e5:65:ee:c1: cd:0e:9e:9c:a8:38:3a:d9:20:9d:13:b4:c4:a0:3b:f8:d2:2c: a0:19:13:b2:ff:5d:c7:f2:ff:90:b6:44:ad:20:af:8e:62:db: b3:8a:24:c2:5d:f7:9e:d3:24:bf:ff:d8:34:a8:a0:eb:51:16: de:b4:35:29:04:1b:bf:39:5c:31:66:f7:a8:c4:d2:fa:0e:d8: 24:af:7e:9f:e4:8c:47:79:04:ba:04:7d:ba:d5:55:a9:d0:9c: e5:30:3c:27:2e:f5:8b:ed:59:e8:d7:e0:cb:91:8f:8f:a7:84: 53:77:c7:56:03:c7:be:de:68:3c:c4:9b:37:f2:e0:ff:77:2a: ca:41:a7:46:d9:a8:f5:92:33:4f:24:13:39:c6:2a:ce:2c:8b: 01:9f:18:a8:77:fd:2a:b9:2c:9d:11:25:4b:3e:9c:16:8c:bc: cb:7b:f4:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4gYYcKRRCbD+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWQ4MzVkMjItNjgwZi00NGM0LWJhOTItYTJmNzAyNTY1ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4TleQtsw2u5TfCARFlyqns7VrIsD8b2Qts 6RO9HR+iu/mzmnAI8q0iElHMAX9/WRtNB4vfinouoUF4f3Q1MVPGHylw/7vDM6di fzK0CmEiJjYzwneePWXL35um2PwemfdP5chozNiQHCq9oydEdB9jB0WDV1jO1kKw hSKFa14K3AbjpkUDjeQMVxkcyzhUe8eIO7WRCX5BNfcYGay1WzGerLlqtxXf/EwR nmIZzPbV5P3UcruG1HMReMy6UrQc6xOsmc86DDAcroXaTlAsUkXOyMQ6TChS3nZO Y/PwZRl0gYGefnTTKtqZ0TovfZ9QE82/nkaQAPyz3AKqPzo7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCviSb3blrh9DmDAB36ilJm3ZkjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWM2M2MyNTUtYTIzOC0z OWJhLTg2ZTMtOWNmNTg1NDU1NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLSXvWeP0yzqhTc56jGun5EYCakiBD91tZyquAJZWZfiKnK4nUXljOi q3ksvXbERSlOLkP7LcvDX4OtGTa+wX9XttwnrwDvmO9T5NWYGx2nRGZoVyMH5WXu wc0OnpyoODrZIJ0TtMSgO/jSLKAZE7L/Xcfy/5C2RK0gr45i27OKJMJd957TJL// 2DSooOtRFt60NSkEG785XDFm96jE0voO2CSvfp/kjEd5BLoEfbrVVanQnOUwPCcu 9YvtWejX4MuRj4+nhFN3x1YDx77eaDzEmzfy4P93KspBp0bZqPWSM08kEznGKs4s iwGfGKh3/Sq5LJ0RJUs+nBaMvMt79D0= -----END CERTIFICATE-----Generated at Sat Oct 3 17:39:08 2026 by rpki-client