$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa File: 5250e20c-b1c3-3435-b26a-323af8aed982.roa (raw, json) Hash identifier: FP9GpCM2/4gUrxdBIdJn8IDXI5uRac1gpka/V3LDgGo= Subject key identifier: 0D:3F:4A:67:41:3D:E6:84:F9:29:70:44:09:16:4B:FA:99:54:4A:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D2CBE8382B8FEC0806180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.23.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2c:be:83:82:b8:fe:c0:80:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=adfdb1b2-ea0d-42a3-a8ca-50bc1c8415a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:34:45:d2:a3:32:a4:ec:1a:40:50:d1:71: 4d:df:78:7a:41:fb:31:7e:76:5c:b9:5a:77:67:84: 6e:0a:87:dc:fb:2c:9b:ba:d4:ad:da:40:46:b0:ed: 71:c5:30:ee:e6:62:f1:f3:fe:17:cf:24:db:58:7f: 91:ec:66:59:0e:73:b7:41:dd:69:fa:75:52:95:4d: 13:89:40:14:2e:78:a8:ca:9a:d2:41:0f:6f:2c:56: 17:db:4a:9a:f8:94:64:79:93:79:9d:9f:0f:f3:d5: a6:d2:7c:6a:f0:50:9d:23:eb:f2:13:a9:53:05:12: 62:ad:ca:ae:38:99:37:1f:04:5a:8b:a3:71:3a:03: 15:91:b7:33:14:75:98:41:0e:96:38:21:a3:54:d9: 66:53:77:2d:ce:72:e3:fa:0b:43:eb:9b:13:d6:cd: ac:70:57:22:66:69:17:49:70:45:66:bb:18:d9:43: ea:0d:05:38:4c:a9:60:67:57:6e:f8:23:93:9e:e5: ad:fb:e2:94:37:ca:20:c4:a6:09:d4:d5:2b:8a:7e: ce:4b:cb:1e:9b:59:c2:0e:1d:4d:26:eb:e1:b3:9b: ee:01:93:da:36:50:c1:89:05:12:39:ad:34:c4:37: e8:ed:df:d6:e0:4f:bc:ff:06:17:e2:6a:b6:68:5c: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3F:4A:67:41:3D:E6:84:F9:29:70:44:09:16:4B:FA:99:54:4A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:73:f1:99:4a:a2:ef:5f:81:b7:4f:20:07:79:25:e4:37:0a: 12:45:bf:e6:0d:f0:ea:46:23:7a:16:7e:f1:fe:53:da:48:4b: 35:d0:b7:0f:69:af:46:d3:fc:90:be:86:23:da:32:cd:c6:6f: 94:62:9e:de:22:ec:fc:b1:04:cd:98:19:a5:be:5f:df:c0:9d: c9:46:a2:c3:72:92:fc:d6:4f:36:89:e2:67:e3:9c:12:be:1e: dc:21:3a:2d:71:d1:80:83:f4:b5:9f:82:56:41:ad:85:4a:80: 92:78:cd:17:cf:7c:e9:05:3e:76:7f:2c:e2:15:2a:0e:04:45: 7a:e7:5d:16:53:5e:ce:e1:fc:f0:20:4f:9a:47:a6:1d:29:78: ba:aa:d8:c9:bd:08:99:76:cd:e2:87:d0:f4:5d:b7:82:9e:57: 6f:1d:7a:55:08:6b:63:08:51:8a:cc:8d:99:16:7a:63:9f:58: b1:2d:aa:3c:12:0c:d3:dd:ec:cb:62:65:cc:fc:de:fa:6b:8d: f3:f2:e6:73:d3:61:b0:a5:fa:0c:87:c7:e1:d7:82:74:5f:9b: 4c:cf:3b:fb:49:ad:b8:23:a0:eb:f6:0d:45:45:99:34:31:c9: 56:73:09:2b:35:06:22:e8:10:c4:82:1f:4c:19:46:bf:46:48: a1:bc:e1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSy+g4K4/sCAYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YWRmZGIxYjItZWEwZC00MmEzLWE4Y2EtNTBiYzFjODQxNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YY0RdKjMqTsGkBQ0XFN33h6QfsxfnZcuVp3 Z4RuCofc+yybutSt2kBGsO1xxTDu5mLx8/4XzyTbWH+R7GZZDnO3Qd1p+nVSlU0T iUAULnioyprSQQ9vLFYX20qa+JRkeZN5nZ8P89Wm0nxq8FCdI+vyE6lTBRJircqu OJk3HwRai6NxOgMVkbczFHWYQQ6WOCGjVNlmU3ctznLj+gtD65sT1s2scFciZmkX SXBFZrsY2UPqDQU4TKlgZ1du+COTnuWt++KUN8ogxKYJ1NUrin7OS8sem1nCDh1N Juvhs5vuAZPaNlDBiQUSOa00xDfo7d/W4E+8/wYX4mq2aFxJPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0/SmdBPeaE+SlwRAkWS/qZVEqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI1MGUyMGMtYjFjMy0z NDM1LWIyNmEtMzIzYWY4YWVkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpz8ZlKou9fgbdPIAd5JeQ3ChJFv+YN8OpGI3oWfvH+U9pISzXQtw9p r0bT/JC+hiPaMs3Gb5Rint4i7PyxBM2YGaW+X9/AnclGosNykvzWTzaJ4mfjnBK+ HtwhOi1x0YCD9LWfglZBrYVKgJJ4zRfPfOkFPnZ/LOIVKg4ERXrnXRZTXs7h/PAg T5pHph0peLqq2Mm9CJl2zeKH0PRdt4KeV28delUIa2MIUYrMjZkWemOfWLEtqjwS DNPd7MtiZcz83vprjfPy5nPTYbCl+gyHx+HXgnRfm0zPO/tJrbgjoOv2DUVFmTQx yVZzCSs1BiLoEMSCH0wZRr9GSKG84cI= -----END CERTIFICATE-----Generated at Tue Sep 22 12:44:13 2026 by rpki-client