$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d094c2f-ebfb-3058-9c64-eaed542a1d82.roa File: 4d094c2f-ebfb-3058-9c64-eaed542a1d82.roa (raw, json) Hash identifier: Cr5JssDGfjg04Rn2z1mNtm5n5HRSyV8kMmx+v4UnE2k= Subject key identifier: 29:BB:4A:65:7B:CA:2E:B4:44:6C:C0:51:EF:A9:93:A4:0E:4A:EF:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EFE1213CF8187CF7D6E771E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d094c2f-ebfb-3058-9c64-eaed542a1d82.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:13:cf:81:87:cf:7d:6e:77:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=acd0fce9-0d81-408f-830c-967263bcc6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:82:36:98:a6:9e:f6:1b:5c:7e:a4:b2:3c: 70:6c:8c:bd:6f:c5:cf:5d:6a:dd:58:6e:64:4f:e1: 76:b4:f8:c3:1a:4c:22:e4:5b:12:56:60:92:1e:23: c1:a7:03:3b:52:67:e2:60:cc:76:2c:34:6a:d7:38: 0c:92:bb:36:fe:5a:7c:5a:9e:51:85:9a:6a:f7:36: 1a:06:78:a6:64:4c:86:1b:7f:eb:66:99:e2:89:a4: da:0c:3b:1f:cd:ce:01:8b:81:29:13:5c:cb:99:98: 47:2c:43:58:7b:13:b7:93:62:41:53:46:23:fd:ba: 6c:66:36:03:bc:43:b8:64:9b:9a:ce:3a:75:17:77: e8:e3:2e:e8:95:c6:49:06:88:c3:a8:43:dc:f5:49: de:06:f7:50:e3:d2:cd:ab:3f:d6:e0:c5:67:23:fd: f1:e4:17:1e:a6:78:23:99:a7:7c:b7:d6:06:31:1f: ae:91:0e:80:68:76:98:46:8e:40:ca:b5:0e:b7:8c: d7:a8:e8:03:13:37:71:db:5c:1d:ac:16:a3:56:94: db:84:36:6c:23:6f:ef:27:ea:62:53:aa:b0:b1:38: 85:39:08:f1:d2:6e:0d:30:b8:c2:70:5f:9f:d1:bb: fa:2e:42:73:d5:7e:a4:13:30:3b:15:fa:f5:f2:c0: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:4A:65:7B:CA:2E:B4:44:6C:C0:51:EF:A9:93:A4:0E:4A:EF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d094c2f-ebfb-3058-9c64-eaed542a1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8f:94:26:a8:0e:4c:1a:69:3f:d4:30:9e:0c:5c:f4:9c:99: 04:f1:fd:ec:40:5f:8c:c1:ea:31:b7:a1:dc:c3:4c:c7:8a:21: 4e:25:bf:14:7f:bf:2d:06:94:1f:77:19:7e:7b:65:16:02:5e: 37:90:6d:cd:39:8e:4e:ef:94:39:e2:63:a9:e7:3e:c7:49:ef: 3d:16:56:37:69:ec:51:c4:78:6b:02:60:93:b1:bd:d2:87:43: 75:81:12:b5:e8:ed:4c:53:8e:ac:17:d1:9a:47:d4:b6:82:b6: fb:15:c7:c2:1d:8a:46:d9:3c:b1:32:3d:9e:14:f3:fe:2f:5e: 15:d3:2c:9c:71:2c:46:6f:ee:29:cb:d5:92:86:d2:27:70:3a: 45:b2:c8:34:80:37:26:02:d4:05:90:9f:e9:13:0c:2b:ec:28: 59:a1:93:ef:44:a0:d9:ee:ed:2f:6f:13:95:4c:72:a9:5f:e0: 90:d3:b5:57:4a:56:8f:4a:34:fa:7d:78:23:91:16:4e:57:fe: b8:3d:76:8a:53:db:e8:8f:0a:6a:d6:88:e5:e1:06:ac:00:28: 9d:03:84:d1:db:dd:71:ae:93:92:1a:53:0b:16:57:56:e9:eb: 10:98:6f:c2:d0:97:6a:71:5a:90:0d:4a:68:e2:ad:78:65:c4: a7:e9:95:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhPPgYfPfW53HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YWNkMGZjZTktMGQ4MS00MDhmLTgzMGMtOTY3MjYzYmNjNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yuCNpimnvYbXH6ksjxwbIy9b8XPXWrdWG5k T+F2tPjDGkwi5FsSVmCSHiPBpwM7UmfiYMx2LDRq1zgMkrs2/lp8Wp5RhZpq9zYa BnimZEyGG3/rZpniiaTaDDsfzc4Bi4EpE1zLmZhHLENYexO3k2JBU0Yj/bpsZjYD vEO4ZJuazjp1F3fo4y7olcZJBojDqEPc9UneBvdQ49LNqz/W4MVnI/3x5Bcepngj mad8t9YGMR+ukQ6AaHaYRo5AyrUOt4zXqOgDEzdx21wdrBajVpTbhDZsI2/vJ+pi U6qwsTiFOQjx0m4NMLjCcF+f0bv6LkJz1X6kEzA7Ffr18sDzDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm7SmV7yi60RGzAUe+pk6QOSu98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQwOTRjMmYtZWJmYi0z MDU4LTljNjQtZWFlZDU0MmExZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGPlCaoDkwaaT/UMJ4MXPScmQTx/exAX4zB6jG3odzDTMeKIU4lvxR/ vy0GlB93GX57ZRYCXjeQbc05jk7vlDniY6nnPsdJ7z0WVjdp7FHEeGsCYJOxvdKH Q3WBErXo7UxTjqwX0ZpH1LaCtvsVx8IdikbZPLEyPZ4U8/4vXhXTLJxxLEZv7inL 1ZKG0idwOkWyyDSANyYC1AWQn+kTDCvsKFmhk+9EoNnu7S9vE5VMcqlf4JDTtVdK Vo9KNPp9eCORFk5X/rg9dopT2+iPCmrWiOXhBqwAKJ0DhNHb3XGuk5IaUwsWV1bp 6xCYb8LQl2pxWpANSmjirXhlxKfplSA= -----END CERTIFICATE-----Generated at Tue Sep 22 06:01:12 2026 by rpki-client