$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa File: 474dafb4-bdbf-3811-9590-621c54dad4b2.roa (raw, json) Hash identifier: t97XJHsQO65bWE3rKcvDQYg19jcCKTsWKjGS6hmwhIU= Subject key identifier: A2:E4:C2:97:C9:E8:F6:04:7E:5E:1E:E3:B1:ED:47:15:1E:57:32:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D672ECBB1A15B90F68D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.16.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:67:2e:cb:b1:a1:5b:90:f6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=854d9ed0-7df9-404d-987a-66010517f557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:96:10:7d:e0:75:65:8e:d0:a9:40:6f:85: d3:4d:4a:45:21:47:62:3f:39:60:07:ec:8a:e0:c9: f4:82:25:43:b8:3a:0c:5e:58:2b:33:e7:5b:e8:0a: f0:55:7f:85:25:07:44:e0:8a:f8:87:32:17:15:96: 14:98:40:9b:e9:4b:1b:af:80:07:ea:32:78:50:3e: 47:60:36:9e:ec:8f:ec:5a:81:12:d2:13:cf:ca:43: 7a:2b:b3:df:0b:5e:5d:5b:06:26:6a:70:0a:16:25: cb:d0:c3:04:33:b9:80:d3:aa:62:bd:31:33:f6:0d: 55:ac:38:b4:9e:9d:7a:ed:ff:9e:d2:d9:dd:0e:47: 7d:d9:84:c6:28:b6:46:b6:a7:71:d9:3b:4c:c7:37: e3:6f:dd:0d:10:13:96:43:78:72:a6:3b:67:45:5e: f9:8c:2b:af:88:69:d0:52:fb:a6:bb:04:8b:31:d5: 38:88:ba:51:41:36:9f:f1:62:b4:56:cc:83:2c:04: b4:74:4f:cb:33:cc:9e:1f:44:4e:cc:a3:a5:7d:8c: 51:ce:d9:37:f7:ce:60:25:c1:d1:a5:f5:28:9d:8a: 48:b2:95:df:d4:4a:b4:a4:bb:a6:3e:3c:76:df:76: b5:16:9c:d0:5c:c0:ca:f0:e1:53:ae:8c:3f:23:32: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:C2:97:C9:E8:F6:04:7E:5E:1E:E3:B1:ED:47:15:1E:57:32:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:65:09:35:56:38:47:df:5e:78:ba:9b:ab:34:ee:57:19:88: 97:c7:08:e3:5f:f6:3a:67:32:64:9e:8c:84:44:9e:c7:18:c9: 6a:64:6a:47:fd:a5:a3:a1:8c:ab:1d:54:ef:65:ef:cc:ec:f2: 1c:e6:cb:f3:10:7a:56:ac:f2:5a:e1:f4:58:fb:72:96:ce:6a: ca:f8:8b:ea:fb:53:b9:e0:8f:10:9c:83:95:1b:d0:de:58:a3: 08:9d:4a:ad:1b:52:42:8c:f2:76:24:3f:12:7b:f8:c9:24:e4: c8:2e:75:be:4a:ca:42:33:a3:1e:47:b7:26:c5:29:62:34:45: 38:dc:72:9a:ae:cb:54:67:84:a3:cc:9b:f1:7f:74:0e:eb:e1: 27:62:33:86:56:14:7d:e4:7c:ea:a4:3c:08:61:97:59:0d:8c: af:9a:14:41:ce:30:63:8b:1e:3e:7d:1c:b3:31:80:c3:ba:e3: e9:55:9f:26:f5:e5:41:bb:bf:2f:75:1f:5c:c9:8b:72:f6:f1: 70:48:72:57:0c:6a:bd:17:44:e2:b9:08:d8:51:f0:bb:68:d9: 83:0d:d7:1d:ca:b6:b2:eb:ee:6a:28:b4:1b:f5:3d:5e:d6:61: 7e:bc:67:a6:6f:cf:df:15:3e:74:d0:57:22:8d:6b:18:0c:bf: 6e:ea:ea:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWcuy7GhW5D2jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODU0ZDllZDAtN2RmOS00MDRkLTk4N2EtNjYwMTA1MTdmNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9WWEH3gdWWO0KlAb4XTTUpFIUdiPzlgB+yK 4Mn0giVDuDoMXlgrM+db6ArwVX+FJQdE4Ir4hzIXFZYUmECb6Usbr4AH6jJ4UD5H YDae7I/sWoES0hPPykN6K7PfC15dWwYmanAKFiXL0MMEM7mA06pivTEz9g1VrDi0 np167f+e0tndDkd92YTGKLZGtqdx2TtMxzfjb90NEBOWQ3hypjtnRV75jCuviGnQ UvumuwSLMdU4iLpRQTaf8WK0VsyDLAS0dE/LM8yeH0ROzKOlfYxRztk3985gJcHR pfUonYpIspXf1Eq0pLumPjx233a1FpzQXMDK8OFTrow/IzKSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLkwpfJ6PYEfl4e47HtRxUeVzIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDc0ZGFmYjQtYmRiZi0z ODExLTk1OTAtNjIxYzU0ZGFkNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9lCTVWOEffXni6m6s07lcZiJfHCONf9jpnMmSejIREnscYyWpkakf9 paOhjKsdVO9l78zs8hzmy/MQelas8lrh9Fj7cpbOasr4i+r7U7ngjxCcg5Ub0N5Y owidSq0bUkKM8nYkPxJ7+Mkk5Mgudb5KykIzox5HtybFKWI0RTjccpquy1RnhKPM m/F/dA7r4SdiM4ZWFH3kfOqkPAhhl1kNjK+aFEHOMGOLHj59HLMxgMO64+lVnyb1 5UG7vy91H1zJi3L28XBIclcMar0XROK5CNhR8Lto2YMN1x3KtrLr7mootBv1PV7W YX68Z6Zvz98VPnTQVyKNaxgMv27q6qc= -----END CERTIFICATE-----Generated at Sat Sep 26 17:36:50 2026 by rpki-client