$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ac9e0e6-6972-33c5-a08c-4ff72f15e631.roa File: 5ac9e0e6-6972-33c5-a08c-4ff72f15e631.roa (raw, json) Hash identifier: BRlXEGzPysHWsnZ5agrYLi7RiJzm7rSHnR6n+vXBy10= Subject key identifier: C9:D7:CF:9D:CD:B3:1C:A2:D0:CD:84:46:7B:73:30:9B:50:5A:E4:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49894D0DA8F4DC7A8A8EA180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ac9e0e6-6972-33c5-a08c-4ff72f15e631.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.18.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:4d:0d:a8:f4:dc:7a:8a:8e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f72196e1-fc5f-454b-998e-c70fbb47a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:0c:eb:1a:c9:0a:9c:d3:41:b8:46:65:31: ed:38:bd:d0:44:d5:c3:8a:88:30:6e:da:57:e5:1e: 51:fa:e4:bf:fd:4e:05:f7:e3:d1:e4:2b:6f:53:f5: 4d:1e:c8:06:bb:22:8c:75:be:56:7d:96:0e:ae:7c: a3:c8:60:92:78:a8:1b:b5:a1:2f:06:4c:2e:5b:e3: 7e:f6:50:2e:69:0d:4c:5d:0a:f9:be:69:e8:6c:f9: 27:b9:16:55:51:72:e0:1f:9d:76:56:04:a7:ee:90: 62:32:e8:ac:1b:2e:78:8d:a8:1b:82:7f:37:98:41: 78:ac:c0:26:5e:c8:e7:92:36:50:4e:6a:c6:15:18: 56:fd:70:91:4b:61:69:eb:1d:5b:99:41:a6:e4:ce: 49:45:f0:f2:cf:72:34:1e:14:d8:16:f7:6f:db:f3: c8:0a:f7:f7:b8:39:0b:e0:b6:96:a2:46:40:27:24: 7f:d0:1e:c3:99:47:b9:8e:fb:1a:21:fb:72:a9:29: 05:6c:60:3d:22:ed:83:c5:8b:fb:f9:45:df:75:db: a1:99:34:e2:96:b3:c9:2c:b1:0e:fb:07:7e:bf:da: df:8e:e8:40:a9:1a:d5:b4:12:ba:06:9e:44:db:42: 66:31:ae:0d:35:1c:a6:3f:ba:df:88:38:40:34:52: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D7:CF:9D:CD:B3:1C:A2:D0:CD:84:46:7B:73:30:9B:50:5A:E4:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ac9e0e6-6972-33c5-a08c-4ff72f15e631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:77:27:9f:02:00:9e:f6:44:bb:aa:45:f0:8f:33:20:73:50: fb:e7:05:c9:5b:cf:b2:c2:b8:2e:61:e5:38:c5:52:98:3a:2a: 97:73:61:c2:65:cc:5d:b2:e3:99:95:31:df:0b:73:6d:ca:e3: 81:47:05:e1:58:d9:14:a6:68:87:ff:9c:22:1d:7b:5c:0c:d2: 08:84:d0:77:4a:24:e6:be:60:43:c3:23:1d:6a:e7:e7:27:32: b5:2e:b3:c9:8c:18:31:39:0c:31:61:07:7f:18:59:d0:2d:64: fa:d4:7b:dc:45:cb:1a:3c:55:51:ce:4f:64:f5:34:c2:bf:d3: 58:ab:6c:0b:42:db:5a:51:24:b0:75:06:db:24:e7:1e:af:b6: 01:3a:4d:86:92:c0:c1:7c:b0:6e:b9:2f:64:91:b2:47:19:3d: b0:73:76:93:92:46:93:3d:d6:03:fa:a3:5c:a0:d6:9c:26:8c: df:22:78:96:8a:75:9f:d5:7a:bc:3f:78:2f:e9:4c:36:ae:0b: e9:49:c1:80:28:15:82:98:14:17:72:bc:22:57:b5:92:60:fb: 85:53:dc:e4:86:6f:1a:31:7a:d9:d3:57:c4:7a:22:91:0d:44: fc:a8:e8:43:c5:17:2b:0f:36:5f:b2:0f:b0:67:3c:be:56:f5: 0d:ab:da:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiU0NqPTceoqOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjcyMTk2ZTEtZmM1Zi00NTRiLTk5OGUtYzcwZmJiNDdhNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4cM6xrJCpzTQbhGZTHtOL3QRNXDiogwbtpX 5R5R+uS//U4F9+PR5CtvU/VNHsgGuyKMdb5WfZYOrnyjyGCSeKgbtaEvBkwuW+N+ 9lAuaQ1MXQr5vmnobPknuRZVUXLgH512VgSn7pBiMuisGy54jagbgn83mEF4rMAm XsjnkjZQTmrGFRhW/XCRS2Fp6x1bmUGm5M5JRfDyz3I0HhTYFvdv2/PICvf3uDkL 4LaWokZAJyR/0B7DmUe5jvsaIftyqSkFbGA9Iu2DxYv7+UXfdduhmTTilrPJLLEO +wd+v9rfjuhAqRrVtBK6Bp5E20JmMa4NNRymP7rfiDhANFJTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnXz53Nsxyi0M2ERntzMJtQWuQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWFjOWUwZTYtNjk3Mi0z M2M1LWEwOGMtNGZmNzJmMTVlNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB3J58CAJ72RLuqRfCPMyBzUPvnBclbz7LCuC5h5TjFUpg6KpdzYcJl zF2y45mVMd8Lc23K44FHBeFY2RSmaIf/nCIde1wM0giE0HdKJOa+YEPDIx1q5+cn MrUus8mMGDE5DDFhB38YWdAtZPrUe9xFyxo8VVHOT2T1NMK/01irbAtC21pRJLB1 Btsk5x6vtgE6TYaSwMF8sG65L2SRskcZPbBzdpOSRpM91gP6o1yg1pwmjN8ieJaK dZ/Verw/eC/pTDauC+lJwYAoFYKYFBdyvCJXtZJg+4VT3OSGbxoxetnTV8R6IpEN RPyo6EPFFysPNl+yD7BnPL5W9Q2r2hc= -----END CERTIFICATE-----Generated at Sat Sep 26 16:06:57 2026 by rpki-client