$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa File: ffbfdd54-633b-3731-9964-cd59a225d043.roa (raw, json) Hash identifier: k03lmjz8FpibhPfjOdS1GRa0Z5d5RcXhAmUjuvoBFGk= Subject key identifier: 69:51:4C:9A:F6:A9:7C:2F:5E:4E:B8:76:2B:B4:47:FD:BD:BD:63:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0AA22C5C4C7D7F63F95F8049 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2c:5c:4c:7d:7f:63:f9:5f:80:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=0cd868f2-d7d7-47b9-bc2b-4c1ac8d9fb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:35:58:72:67:aa:fc:66:8d:60:6e:81:39: 14:13:35:1b:aa:6f:24:1f:7e:0e:8a:da:99:ea:19: 0d:53:e0:e0:77:ff:35:71:75:68:f9:b0:3f:39:df: 26:46:48:d1:5e:f9:88:6a:b1:89:ec:b9:fe:85:c0: b2:f9:40:e4:17:06:14:ee:41:a2:ee:cb:d0:00:c7: bc:af:86:9e:e0:9e:4f:ae:53:4d:7a:76:91:48:46: 46:1b:a9:c2:ad:a1:f0:20:0c:77:4e:a3:53:ec:c4: 61:8f:a4:b1:21:07:27:f7:a3:f4:b4:4b:1a:a0:00: 26:a2:9c:46:be:4b:9e:26:82:a6:a3:63:77:52:7f: cd:2b:95:95:f0:0c:f4:41:8d:08:dd:5a:63:37:74: 19:15:bf:b6:d2:d0:a3:68:81:0e:2a:2b:2e:9c:e2: c5:a7:54:c3:01:3d:34:16:b5:f7:98:09:03:2d:dc: 77:c3:ed:63:f6:69:cd:ac:6c:6c:19:a5:53:0a:58: 50:f3:b9:de:9e:9e:d5:2e:f7:9c:d3:0f:58:b6:0a: b3:d7:8d:76:7b:73:66:42:3c:47:41:44:31:e0:5e: aa:d1:e1:dc:1d:27:d8:b4:7a:13:55:fb:cb:6e:66: 6e:a5:f9:15:6a:15:07:16:a1:6f:3b:34:95:95:96: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:51:4C:9A:F6:A9:7C:2F:5E:4E:B8:76:2B:B4:47:FD:BD:BD:63:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f4:48:8e:22:19:b8:20:c3:03:61:23:67:55:95:15:36:dc: af:91:5f:9e:8b:e1:87:fe:9d:2b:51:22:19:2d:b4:ae:ea:58: d2:60:f9:fe:4a:3f:1f:57:34:db:35:42:19:45:c9:4a:45:ef: 16:72:c1:34:3d:b9:45:27:6c:8f:02:c4:b0:3d:52:95:53:4e: 17:fb:29:24:a3:21:ab:30:dd:26:1f:c1:f7:30:6b:d2:d7:65: c1:3b:81:3e:a7:90:69:6f:c8:e1:49:5d:3a:36:34:d7:1c:28: 5f:67:25:3f:50:b2:93:ed:c4:ce:0c:4c:06:fc:26:51:b3:1a: b8:bc:c6:39:8d:8d:65:fb:22:50:a5:27:9f:73:da:1f:10:b3: bc:e1:44:d8:7b:be:34:38:76:c5:5d:82:8c:79:64:83:1b:52: d6:04:e3:81:14:61:53:46:bc:9d:b1:48:5f:ac:fb:87:0a:4e: 5a:6a:2d:a5:38:28:80:b4:ca:fe:fd:2c:66:b0:31:db:4e:19: 0e:83:fc:ca:72:27:59:70:a0:d2:b6:1c:74:64:70:8d:00:15: 0c:22:8f:2e:d2:f2:45:fd:a7:7c:cd:3e:f0:c3:d0:d4:45:d5: d8:71:f0:a9:84:6a:ca:5c:4f:8e:40:2a:dc:45:9d:1e:f5:12: 05:c3:e3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoixcTH1/Y/lfgEkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MGNkODY4ZjItZDdkNy00N2I5LWJjMmItNGMxYWM4ZDlmYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Y1WHJnqvxmjWBugTkUEzUbqm8kH34OitqZ 6hkNU+Dgd/81cXVo+bA/Od8mRkjRXvmIarGJ7Ln+hcCy+UDkFwYU7kGi7svQAMe8 r4ae4J5PrlNNenaRSEZGG6nCraHwIAx3TqNT7MRhj6SxIQcn96P0tEsaoAAmopxG vkueJoKmo2N3Un/NK5WV8Az0QY0I3VpjN3QZFb+20tCjaIEOKisunOLFp1TDAT00 FrX3mAkDLdx3w+1j9mnNrGxsGaVTClhQ87nenp7VLvec0w9Ytgqz1412e3NmQjxH QUQx4F6q0eHcHSfYtHoTVfvLbmZupfkVahUHFqFvOzSVlZZdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlRTJr2qXwvXk64diu0R/29vWMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZiZmRkNTQtNjMzYi0z NzMxLTk5NjQtY2Q1OWEyMjVkMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv0SI4iGbggwwNhI2dVlRU23K+RX56L4Yf+nStRIhkttK7qWNJg+f5K Px9XNNs1QhlFyUpF7xZywTQ9uUUnbI8CxLA9UpVTThf7KSSjIasw3SYfwfcwa9LX ZcE7gT6nkGlvyOFJXTo2NNccKF9nJT9QspPtxM4MTAb8JlGzGri8xjmNjWX7IlCl J59z2h8Qs7zhRNh7vjQ4dsVdgox5ZIMbUtYE44EUYVNGvJ2xSF+s+4cKTlpqLaU4 KIC0yv79LGawMdtOGQ6D/MpyJ1lwoNK2HHRkcI0AFQwijy7S8kX9p3zNPvDD0NRF 1dhx8KmEaspcT45AKtxFnR71EgXD47g= -----END CERTIFICATE-----Generated at Mon Sep 28 18:28:27 2026 by rpki-client