$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa File: 4f25bcd4-6549-30a2-8694-11118c3e89d4.roa (raw, json) Hash identifier: h7e3wPmbEdd+4xikLfxBRzjYEQB+gD4KZhLB8sucJR8= Subject key identifier: 4D:C9:59:87:0F:84:52:C0:5E:53:F6:75:DC:D2:C5:C5:1C:8E:C8:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987EB902681FB8703C0C590 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 170.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:eb:90:26:81:fb:87:03:c0:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a5e360b7-58c9-403f-9c1f-ab5127fdd0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:f5:3f:a2:c3:b1:78:97:df:80:97:6d:7b: a0:22:75:6f:2e:2b:d6:21:95:e7:cb:79:1c:ea:eb: 70:5c:37:ba:43:73:ce:34:d8:60:96:4b:b8:e2:d0: c7:b6:40:fb:09:23:90:40:56:4f:9a:e9:3c:1f:ee: 91:6e:79:ab:44:d6:38:b2:56:c1:28:d0:21:23:d9: 3d:5e:dc:36:13:73:a3:cc:de:25:f2:5e:13:a5:a2: 71:13:c2:ab:d5:e9:cb:e4:61:ab:3a:44:4e:89:8f: 81:d1:9a:f2:c1:d7:7f:6c:2b:f4:4e:46:1c:48:06: 8f:71:9f:48:ea:6a:30:20:6a:45:94:ac:e9:79:48: a1:c0:3d:90:6a:17:79:a6:28:d7:e3:83:d3:06:b6: f2:89:82:2b:fb:c8:e3:4d:c9:1c:39:12:5b:21:e9: 8c:0d:a0:29:7b:0e:1a:9b:62:18:0c:5a:5a:08:dc: fe:0a:4e:5c:4c:ff:8b:41:34:51:eb:d9:b1:e9:d9: f3:06:43:b8:fc:b0:c6:cd:3b:d5:a9:66:c3:b5:b8: 5c:c2:e3:9b:c5:2e:dc:5a:b3:7e:42:44:b4:d3:05: 28:ea:d6:78:62:27:a6:af:ef:c5:f8:2b:19:9a:21: 80:38:39:e5:ac:db:85:47:8f:58:20:00:4d:ab:c2: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C9:59:87:0F:84:52:C0:5E:53:F6:75:DC:D2:C5:C5:1C:8E:C8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25bcd4-6549-30a2-8694-11118c3e89d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a3:f5:aa:99:3c:b3:4e:2e:12:96:61:3f:55:d3:06:b8:91: 65:cd:63:2e:ce:2a:9a:28:2b:67:98:53:80:6d:25:f0:78:ae: 6f:98:29:f6:2a:0b:3b:81:36:72:6c:a7:65:7c:67:a9:12:6e: 8e:a7:cf:c3:25:56:fc:49:48:b4:f9:31:32:ba:2e:81:82:53: 4f:ad:ce:6a:f8:6a:49:10:a8:52:54:08:71:3f:92:24:e2:d9: 9d:63:96:64:fa:d4:03:82:34:f7:8a:a9:0b:56:4d:3e:d2:c0: fa:5d:9e:a1:49:43:7d:6e:56:60:0e:5f:a1:ea:1c:38:b0:eb: bb:1e:1f:93:38:07:7f:1e:0a:26:e2:38:8f:cd:12:e6:04:c7: 2d:60:c5:6c:cf:b1:64:df:62:87:d8:8a:70:ba:f2:e1:48:60: 49:ee:77:36:28:88:dc:cf:06:f1:bd:f4:87:8e:8b:87:44:3f: a8:4a:57:cf:9d:97:b3:71:93:f4:a7:bd:3d:d5:63:8b:f7:5b: f7:9e:85:29:71:45:91:7a:bd:4e:75:84:c1:92:9d:d7:88:32: 80:5f:36:58:ad:3d:0d:e6:b8:92:59:56:55:30:36:6f:13:8a: 56:d5:a6:61:67:b1:a4:b0:a4:25:a4:f8:ac:50:04:33:a2:ee: f5:bb:3b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh+uQJoH7hwPAxZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTVlMzYwYjctNThjOS00MDNmLTljMWYtYWI1MTI3ZmRkMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMv1P6LDsXiX34CXbXugInVvLivWIZXny3kc 6utwXDe6Q3PONNhglku44tDHtkD7CSOQQFZPmuk8H+6RbnmrRNY4slbBKNAhI9k9 Xtw2E3OjzN4l8l4TpaJxE8Kr1enL5GGrOkROiY+B0Zrywdd/bCv0TkYcSAaPcZ9I 6mowIGpFlKzpeUihwD2Qahd5pijX44PTBrbyiYIr+8jjTckcORJbIemMDaApew4a m2IYDFpaCNz+Ck5cTP+LQTRR69mx6dnzBkO4/LDGzTvVqWbDtbhcwuObxS7cWrN+ QkS00wUo6tZ4Yiemr+/F+CsZmiGAODnlrNuFR49YIABNq8KWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3JWYcPhFLAXlP2ddzSxcUcjsgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGYyNWJjZDQtNjU0OS0z MGEyLTg2OTQtMTExMThjM2U4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFij9aqZPLNOLhKWYT9V0wa4kWXNYy7OKpooK2eYU4BtJfB4rm+YKfYq CzuBNnJsp2V8Z6kSbo6nz8MlVvxJSLT5MTK6LoGCU0+tzmr4akkQqFJUCHE/kiTi 2Z1jlmT61AOCNPeKqQtWTT7SwPpdnqFJQ31uVmAOX6HqHDiw67seH5M4B38eCibi OI/NEuYExy1gxWzPsWTfYofYinC68uFIYEnudzYoiNzPBvG99IeOi4dEP6hKV8+d l7Nxk/SnvT3VY4v3W/eehSlxRZF6vU51hMGSndeIMoBfNlitPQ3muJJZVlUwNm8T ilbVpmFnsaSwpCWk+KxQBDOi7vW7O1Y= -----END CERTIFICATE-----Generated at Mon Sep 28 21:48:44 2026 by rpki-client