$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01a3b135-1554-3c5f-9581-434626c35d4e.roa File: 01a3b135-1554-3c5f-9581-434626c35d4e.roa (raw, json) Hash identifier: EG/wzKui6CL9nvDxKqNBig2CClnSU+YsdPPi8oXAr7g= Subject key identifier: 15:48:3C:0C:5A:BF:C6:16:30:50:77:D0:E5:0D:A1:BE:52:A4:24:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F31B7CD47E7EF358FA4C282B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01a3b135-1554-3c5f-9581-434626c35d4e.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.18.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cd:47:e7:ef:35:8f:a4:c2:82:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=9e8ae017-baf4-40df-9ab5-cb3a92f9115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:88:36:da:34:30:90:f7:2e:04:9b:d1:8d: 51:25:fa:26:22:e8:ae:7d:54:b6:70:4c:64:ed:e6: 2e:0d:5a:71:ac:d4:81:ad:74:8b:fc:ab:5f:ec:d4: 78:d8:f8:4a:1e:8f:1a:d5:1c:c0:25:e6:7b:6c:df: 5d:a3:e4:e5:ed:e7:fb:30:cf:12:88:12:89:3b:3c: d8:8c:59:46:e4:2c:af:0a:07:17:6f:8b:e9:4e:e4: f0:f5:72:9c:04:a7:0f:55:59:ba:a1:1d:a5:fc:74: 94:e3:a4:f2:a1:2d:27:fb:ed:a5:7d:dc:63:67:5c: a1:00:72:2b:cd:79:76:13:c4:88:ed:df:07:d4:b6: a3:4f:e6:fb:c7:3b:01:31:5a:62:af:bd:94:88:9f: a4:7b:1b:ea:95:a1:48:ba:52:7d:ea:55:0d:00:10: 8d:85:7b:6b:70:ac:71:8f:e1:20:12:8a:d7:7f:b3: 75:be:3e:6d:56:50:55:46:6a:09:c8:40:67:95:a1: cd:e1:50:b3:5d:50:f2:6c:f2:80:54:e3:fa:70:79: ff:b6:27:e1:30:71:c5:f0:b5:9a:d7:7f:60:36:ab: a0:64:68:a9:c4:10:77:61:9b:28:d1:ea:ab:de:6d: d0:ac:36:57:c3:69:41:5a:0e:fe:9f:ae:53:7a:29: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:3C:0C:5A:BF:C6:16:30:50:77:D0:E5:0D:A1:BE:52:A4:24:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01a3b135-1554-3c5f-9581-434626c35d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8f:2d:b2:a3:0f:5c:a4:ab:17:8a:ce:01:f6:01:15:10:fe: 68:81:56:c3:19:88:05:7e:fb:1b:14:a8:b9:b7:89:39:17:df: 7d:36:92:3d:c0:49:4e:45:1c:8b:22:76:f6:13:30:e2:e8:7a: 1f:b3:0b:74:c2:11:60:f8:f1:a3:fe:3a:b3:81:15:68:df:15: cd:64:2e:33:cb:f5:9c:8b:c0:09:f3:09:46:a2:96:99:ba:2d: 9e:b0:fb:db:17:c5:6b:7f:a8:ff:69:e3:9d:44:58:e2:2f:91: 84:8c:39:3b:90:a8:b8:85:3c:33:ae:e6:39:a2:fe:47:bb:02: 0e:ca:d2:12:1d:35:72:cc:04:fc:e8:ce:ae:9b:9e:4b:85:54: c0:d0:8c:99:92:ce:23:89:b0:3b:94:4f:43:d0:18:1c:24:de: a9:af:cb:de:0d:1e:0a:35:34:a4:48:55:e3:c1:f5:23:ed:29: e9:bf:ad:33:3a:4e:87:ae:f1:87:08:c0:93:34:70:77:d4:62: 66:19:b6:2d:d5:ab:46:04:7b:c6:9e:97:0b:46:fc:02:a1:83: de:05:71:55:88:22:d1:20:d0:01:18:94:f1:6d:cc:52:b0:62: 6e:8e:54:0c:e1:f9:c9:6f:1b:71:53:e4:22:d4:41:a9:33:b0: 80:c1:d0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt81H5+81j6TCgrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OWU4YWUwMTctYmFmNC00MGRmLTlhYjUtY2IzYTkyZjkxMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oeINto0MJD3LgSb0Y1RJfomIuiufVS2cExk 7eYuDVpxrNSBrXSL/Ktf7NR42PhKHo8a1RzAJeZ7bN9do+Tl7ef7MM8SiBKJOzzY jFlG5CyvCgcXb4vpTuTw9XKcBKcPVVm6oR2l/HSU46TyoS0n++2lfdxjZ1yhAHIr zXl2E8SI7d8H1LajT+b7xzsBMVpir72UiJ+kexvqlaFIulJ96lUNABCNhXtrcKxx j+EgEorXf7N1vj5tVlBVRmoJyEBnlaHN4VCzXVDybPKAVOP6cHn/tifhMHHF8LWa 139gNqugZGipxBB3YZso0eqr3m3QrDZXw2lBWg7+n65Teikh5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVIPAxav8YWMFB30OUNob5SpCSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDFhM2IxMzUtMTU1NC0z YzVmLTk1ODEtNDM0NjI2YzM1ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWPLbKjD1ykqxeKzgH2ARUQ/miBVsMZiAV++xsUqLm3iTkX3302kj3A SU5FHIsidvYTMOLoeh+zC3TCEWD48aP+OrOBFWjfFc1kLjPL9ZyLwAnzCUailpm6 LZ6w+9sXxWt/qP9p451EWOIvkYSMOTuQqLiFPDOu5jmi/ke7Ag7K0hIdNXLMBPzo zq6bnkuFVMDQjJmSziOJsDuUT0PQGBwk3qmvy94NHgo1NKRIVePB9SPtKem/rTM6 Toeu8YcIwJM0cHfUYmYZti3Vq0YEe8aelwtG/AKhg94FcVWIItEg0AEYlPFtzFKw Ym6OVAzh+clvG3FT5CLUQakzsIDB0EE= -----END CERTIFICATE-----Generated at Sun Sep 27 11:23:16 2026 by rpki-client