$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3870708e-9024-30f0-9c1a-5286f20aba1c.roa File: 3870708e-9024-30f0-9c1a-5286f20aba1c.roa (raw, json) Hash identifier: 3L+nHuPC0G6sDkL1kcbK81Ul783MMmkXG2/h9fJIUgM= Subject key identifier: A2:E9:C8:5D:55:76:AE:B9:C7:63:3A:09:2B:84:8C:F4:F8:DA:54:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4988F5E5D5B3D165EBE12BA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3870708e-9024-30f0-9c1a-5286f20aba1c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.23.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:f5:e5:d5:b3:d1:65:eb:e1:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e42cca15-2870-4dc3-8b3c-a1f04c93f572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:49:2a:bd:aa:d7:6f:54:18:9f:e5:e4:d4: 63:fb:c6:f1:a8:59:ed:1f:17:75:4d:c5:fe:eb:1f: e1:55:8e:cd:37:2d:ca:bf:e9:c9:d7:8c:26:31:89: d5:96:cf:22:af:d1:e6:97:c8:52:95:74:62:e8:c0: 6f:64:80:55:fd:9b:5b:32:72:65:d2:97:06:b3:e8: 11:fd:3d:f7:11:8d:44:08:12:9e:45:5b:c5:bb:d4: 3c:2f:fc:c4:64:98:34:2c:d5:ed:18:13:31:86:e0: 20:39:dd:00:3e:d2:b8:bc:14:4a:de:43:10:3d:d2: 17:f5:2e:42:f0:e8:80:19:37:69:ea:7b:0f:99:ca: 8e:f4:73:56:7d:72:d8:c8:33:58:1a:f4:1b:46:79: b9:a1:06:e7:b5:46:47:78:c2:52:e5:62:f9:ad:f6: 38:29:ea:40:0d:41:87:f6:86:0e:36:c1:a0:32:20: 32:54:b0:dd:5c:06:03:06:fb:ce:45:b7:31:27:53: bc:0f:1c:95:6c:d4:2f:ec:a5:79:5c:1d:0f:cb:fd: 4d:47:ae:b1:00:eb:a5:04:e9:9c:d1:35:25:58:de: 4a:8f:cd:15:62:4f:8c:32:40:03:85:6e:f6:68:16: 85:b2:41:fc:c8:2b:61:49:b5:36:1f:39:cf:aa:64: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:C8:5D:55:76:AE:B9:C7:63:3A:09:2B:84:8C:F4:F8:DA:54:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3870708e-9024-30f0-9c1a-5286f20aba1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e2:08:c6:8e:ad:85:37:49:96:2e:a2:10:9c:da:82:3b:96: 01:a3:17:ef:ae:7e:b2:e5:3a:9c:4b:85:eb:69:83:96:1e:3e: 55:65:2d:e1:82:68:74:c4:1b:47:38:8e:8a:1b:46:d2:43:88: af:ac:a7:65:7b:12:be:4b:33:5f:58:2c:b5:c6:13:67:17:e3: d8:31:fe:b2:ea:2b:0a:81:70:80:90:69:71:14:de:c1:be:8a: 38:e8:45:7a:a8:7c:7a:d9:5d:e0:1c:8b:dc:c5:1e:85:36:d1: a5:1b:1d:35:c7:39:f1:78:dd:99:26:5e:32:58:84:ff:82:c8: 70:4b:e7:44:62:17:3a:22:30:73:f4:e3:e2:76:98:83:fd:99: e9:d9:7a:cf:0c:de:b1:d5:0a:29:9a:0d:88:98:22:a9:2b:3c: 41:90:e2:f2:b2:a0:e3:8e:f8:e3:6e:fd:38:e2:ac:b5:c7:53: 4c:a4:fb:fd:6a:c4:cc:ea:29:f4:aa:f1:25:f6:39:65:1f:6d: b8:f7:23:bb:d9:0f:4e:0c:0c:7d:2c:6c:54:41:4e:39:e6:74: bc:84:9e:c1:95:08:1d:7d:5f:6b:72:ed:68:a1:8c:a7:63:18: ec:2e:92:2e:cb:51:f9:72:fc:2b:7f:07:29:36:a4:02:b5:62: f0:cf:24:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPXl1bPRZevhK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTQyY2NhMTUtMjg3MC00ZGMzLThiM2MtYTFmMDRjOTNmNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiFJKr2q129UGJ/l5NRj+8bxqFntHxd1TcX+ 6x/hVY7NNy3Kv+nJ14wmMYnVls8ir9Hml8hSlXRi6MBvZIBV/ZtbMnJl0pcGs+gR /T33EY1ECBKeRVvFu9Q8L/zEZJg0LNXtGBMxhuAgOd0APtK4vBRK3kMQPdIX9S5C 8OiAGTdp6nsPmcqO9HNWfXLYyDNYGvQbRnm5oQbntUZHeMJS5WL5rfY4KepADUGH 9oYONsGgMiAyVLDdXAYDBvvORbcxJ1O8DxyVbNQv7KV5XB0Py/1NR66xAOulBOmc 0TUlWN5Kj80VYk+MMkADhW72aBaFskH8yCthSbU2HznPqmTavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLpyF1Vdq65x2M6CSuEjPT42lRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzg3MDcwOGUtOTAyNC0z MGYwLTljMWEtNTI4NmYyMGFiYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3iCMaOrYU3SZYuohCc2oI7lgGjF++ufrLlOpxLhetpg5YePlVlLeGC aHTEG0c4joobRtJDiK+sp2V7Er5LM19YLLXGE2cX49gx/rLqKwqBcICQaXEU3sG+ ijjoRXqofHrZXeAci9zFHoU20aUbHTXHOfF43ZkmXjJYhP+CyHBL50RiFzoiMHP0 4+J2mIP9menZes8M3rHVCimaDYiYIqkrPEGQ4vKyoOOO+ONu/TjirLXHU0yk+/1q xMzqKfSq8SX2OWUfbbj3I7vZD04MDH0sbFRBTjnmdLyEnsGVCB19X2ty7WihjKdj GOwuki7LUfly/Ct/Byk2pAK1YvDPJCk= -----END CERTIFICATE-----Generated at Sun Sep 27 12:06:12 2026 by rpki-client