$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa File: 4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa (raw, json) Hash identifier: gASqpw+yRmBYkRlj2g5as0MoVoqRPaw17SYfbhBawvE= Subject key identifier: 19:8B:04:30:D9:18:CC:70:12:13:72:86:56:1B:9A:E8:A9:67:A7:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498761DB5558C8CEA9087400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:61:db:55:58:c8:ce:a9:08:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd2ea3cc-0d3e-4a5b-ace2-b7ff7034446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:14:6d:81:9a:18:89:2f:64:94:38:4e:9d: 23:17:9a:9d:c2:87:c2:80:6d:dc:3b:e1:9c:9d:29: 74:6d:b3:96:17:5c:f1:bf:0d:bc:6d:7b:85:b0:e3: dd:43:32:eb:b0:cc:e3:bd:b6:f1:a9:a1:91:aa:a1: b9:b0:f2:52:35:fa:b6:0c:78:f3:59:84:69:21:ab: eb:8d:ec:b0:71:e8:da:2a:08:d4:81:ec:30:04:52: bc:88:26:85:b2:ab:41:32:58:fd:3a:61:d2:74:11: 79:8d:60:ea:ef:1e:16:fe:a6:b2:0b:a5:f2:ca:e9: 7a:a9:5d:54:1b:7c:be:a6:ff:92:3d:1d:8e:27:10: f4:33:10:b2:7f:fb:ca:aa:b8:b6:0f:9f:e2:b1:61: 05:92:d9:fb:d8:f3:2f:11:e8:b4:1e:83:e8:ea:71: 71:36:ab:fe:0f:dc:84:7f:ad:c8:cb:94:af:d8:99: 26:c8:28:4b:69:b4:74:da:c8:8f:f6:3f:a0:a6:94: 1d:8c:e3:2d:b1:23:12:9d:6c:df:11:94:a7:52:30: 7d:44:3b:a2:80:84:10:40:02:92:6b:a9:c2:19:bd: 58:45:19:57:05:a6:ee:9b:bd:bc:66:c8:4a:bd:c7: bc:f0:35:29:65:4d:34:c1:86:7e:d9:ad:a8:32:5d: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:04:30:D9:18:CC:70:12:13:72:86:56:1B:9A:E8:A9:67:A7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5b:e7:82:0d:68:94:72:36:e5:60:cc:f7:8f:51:5e:7e:03: 48:58:a8:d5:72:4f:49:8e:54:e5:36:a9:9e:cd:75:e7:57:55: 28:07:fc:c8:ca:e6:8d:6b:0b:07:61:1e:81:12:70:69:37:06: 05:c9:a3:19:61:c3:ea:aa:14:33:7b:98:f8:f8:c5:e5:05:f4: 96:44:7f:53:77:ca:2f:69:0f:42:e4:49:e3:33:23:4e:47:4f: d5:ac:0f:64:13:d8:ee:2c:76:26:e5:36:9c:6b:fa:43:78:0d: 77:71:c2:5e:38:58:21:bf:4e:b6:7f:f9:d2:5b:db:de:66:94: 60:47:c7:c5:6d:2f:96:ee:f4:43:f1:cd:81:48:8f:f5:55:50: 58:58:0c:e9:03:96:45:3c:b7:46:c7:7e:a3:43:21:39:55:bc: de:e9:5a:76:b0:df:1a:87:71:cd:a8:6e:bd:f7:20:d9:a6:95: 50:38:be:a0:0b:3a:14:8f:0b:68:f3:a8:22:73:f6:0b:5d:7c: fa:73:c4:7c:30:01:20:c4:1e:7c:b3:fe:9f:8c:66:1a:4b:24: 8d:fc:1f:56:93:5f:b7:8e:aa:82:5f:fe:f0:f9:b1:ad:4c:82: 19:ab:44:fa:67:2d:04:50:c6:69:cd:7e:e6:16:2f:e0:fa:e7: 62:9f:bc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh2HbVVjIzqkIdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQyZWEzY2MtMGQzZS00YTViLWFjZTItYjdmZjcwMzQ0NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdkUbYGaGIkvZJQ4Tp0jF5qdwofCgG3cO+Gc nSl0bbOWF1zxvw28bXuFsOPdQzLrsMzjvbbxqaGRqqG5sPJSNfq2DHjzWYRpIavr jeywcejaKgjUgewwBFK8iCaFsqtBMlj9OmHSdBF5jWDq7x4W/qayC6Xyyul6qV1U G3y+pv+SPR2OJxD0MxCyf/vKqri2D5/isWEFktn72PMvEei0HoPo6nFxNqv+D9yE f63Iy5Sv2JkmyChLabR02siP9j+gppQdjOMtsSMSnWzfEZSnUjB9RDuigIQQQAKS a6nCGb1YRRlXBabum728ZshKvce88DUpZU00wYZ+2a2oMl1qzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmLBDDZGMxwEhNyhlYbmuipZ6eoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQ3YmVjMGYtZWU0Yi0z OTY0LWFkNDgtMWFkMmQxMmFmMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5b54INaJRyNuVgzPePUV5+A0hYqNVyT0mOVOU2qZ7NdedXVSgH/MjK 5o1rCwdhHoEScGk3BgXJoxlhw+qqFDN7mPj4xeUF9JZEf1N3yi9pD0LkSeMzI05H T9WsD2QT2O4sdiblNpxr+kN4DXdxwl44WCG/TrZ/+dJb295mlGBHx8VtL5bu9EPx zYFIj/VVUFhYDOkDlkU8t0bHfqNDITlVvN7pWnaw3xqHcc2obr33INmmlVA4vqAL OhSPC2jzqCJz9gtdfPpzxHwwASDEHnyz/p+MZhpLJI38H1aTX7eOqoJf/vD5sa1M ghmrRPpnLQRQxmnNfuYWL+D652KfvOk= -----END CERTIFICATE-----Generated at Sat Sep 26 18:15:50 2026 by rpki-client