$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa File: 4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa (raw, json) Hash identifier: WZlu3xNxrYrIC1VNNMocfUePea/+gTniOKFNnOVQkqE= Subject key identifier: 2F:CF:90:FC:4E:6A:E9:F5:B0:A5:C5:3A:08:58:35:ED:CE:44:63:90 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE169EB16418E9DB3885E Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.23.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e1:69:eb:16:41:8e:9d:b3:88:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a10f8ff5-bd44-4040-9c26-ea01f6298b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:2b:a6:80:6e:3e:24:41:7b:64:58:ca:19: e9:7c:67:06:41:13:fd:77:1f:47:d7:9a:15:ef:75: 58:85:e0:a4:5f:47:de:5b:ff:8c:57:a6:7b:13:60: 19:2f:dc:1e:17:b1:85:51:c8:28:af:81:39:24:44: e4:0b:f7:33:61:2a:42:60:38:00:71:ee:7a:7a:fc: 14:93:25:c7:18:90:7f:c2:de:69:d8:70:31:64:40: 2b:cb:93:10:72:0f:ff:31:63:f1:e8:3d:88:e8:c4: ff:71:0f:2d:f1:f3:f9:8a:63:1b:b8:12:00:fb:cd: b2:ef:ca:48:e5:09:46:e5:11:05:67:b3:01:9e:c9: 62:19:ae:c0:2d:be:37:b2:fc:5f:51:3c:11:29:dd: d4:99:f2:95:8d:cc:f1:6c:e0:31:77:20:77:7a:18: ea:ab:79:c6:94:ee:0b:a7:ec:1b:b6:87:c5:21:30: 1b:de:9b:fc:b0:1a:2c:1d:7d:e4:2d:58:01:0f:85: 97:b0:db:c4:29:ef:44:84:a1:d1:4d:3b:77:cf:1a: 00:b1:62:3b:5c:78:29:fc:e5:51:c3:0d:3c:74:34: ed:b9:e3:1a:b3:30:35:14:10:38:5c:1e:be:ec:b3: 66:7b:64:9a:ec:be:15:fd:6d:bf:14:a4:c9:93:ea: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:90:FC:4E:6A:E9:F5:B0:A5:C5:3A:08:58:35:ED:CE:44:63:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:be:e0:7f:7d:dd:19:e8:e6:7e:6a:64:e6:9a:37:ee:83:ec: 03:53:c8:c3:b3:63:d3:29:88:72:69:99:8f:4e:e6:36:f5:7a: 8f:e1:98:1d:f6:5d:44:63:79:39:f3:5a:28:91:41:43:83:41: db:e9:4c:19:42:75:82:ae:d1:a1:a1:6c:ec:a7:fe:fc:38:a3: 33:42:4f:59:3d:25:c3:53:53:64:2b:d9:2d:2d:b5:f5:01:46: 1a:17:f5:52:63:5c:0f:a5:58:42:c4:01:73:8f:b0:73:0b:c4: 4c:c5:17:23:b8:24:11:9e:6c:3b:df:7e:e8:b7:c2:21:02:23: cd:c6:7b:ff:5f:63:a1:69:8e:cc:e8:c1:6f:38:e1:7f:f6:98: 90:38:ca:fe:d5:1a:8e:44:34:b4:90:0c:d8:fa:3a:49:03:23: 84:2f:2d:4f:61:7f:d1:1d:d0:35:05:df:10:d7:50:4a:69:25: b3:bc:06:d4:22:c6:99:e2:ff:91:5b:ad:ce:7f:62:6e:43:cc: b5:aa:bc:2f:21:14:7d:28:96:2e:bc:f4:1d:5a:39:a4:51:77: a0:f3:84:7a:69:ea:20:48:e3:bd:b2:e5:a0:33:1b:e2:2a:ab: da:86:fb:94:69:f5:b7:41:88:1d:5b:6d:e3:d3:4a:6c:02:c6: 43:e4:b7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeFp6xZBjp2ziF4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTEwZjhmZjUtYmQ0NC00MDQwLTljMjYtZWEwMWY2Mjk4YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug0rpoBuPiRBe2RYyhnpfGcGQRP9dx9H15oV 73VYheCkX0feW/+MV6Z7E2AZL9weF7GFUcgor4E5JETkC/czYSpCYDgAce56evwU kyXHGJB/wt5p2HAxZEAry5MQcg//MWPx6D2I6MT/cQ8t8fP5imMbuBIA+82y78pI 5QlG5REFZ7MBnsliGa7ALb43svxfUTwRKd3UmfKVjczxbOAxdyB3ehjqq3nGlO4L p+wbtofFITAb3pv8sBosHX3kLVgBD4WXsNvEKe9EhKHRTTt3zxoAsWI7XHgp/OVR ww08dDTtueMaszA1FBA4XB6+7LNme2Sa7L4V/W2/FKTJk+q11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/PkPxOaun1sKXFOghYNe3ORGOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGMxMmNlYjAtMGRmYS0z ZGZjLTkzODAtMWM5MWY0NGU0N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK+4H993Rno5n5qZOaaN+6D7ANTyMOzY9MpiHJpmY9O5jb1eo/hmB32 XURjeTnzWiiRQUODQdvpTBlCdYKu0aGhbOyn/vw4ozNCT1k9JcNTU2Qr2S0ttfUB RhoX9VJjXA+lWELEAXOPsHMLxEzFFyO4JBGebDvffui3wiECI83Ge/9fY6Fpjszo wW844X/2mJA4yv7VGo5ENLSQDNj6OkkDI4QvLU9hf9Ed0DUF3xDXUEppJbO8BtQi xpni/5Fbrc5/Ym5DzLWqvC8hFH0oli689B1aOaRRd6DzhHpp6iBI472y5aAzG+Iq q9qG+5Rp9bdBiB1bbePTSmwCxkPkt3U= -----END CERTIFICATE-----Generated at Sat Sep 26 19:08:55 2026 by rpki-client