$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa File: 61fb4c25-3250-39ca-9af1-37036ccc411d.roa (raw, json) Hash identifier: tHBQ6PSEjilsJDE6HPEUz08ade3ETDO1W02TJV/CTZw= Subject key identifier: FF:6F:39:A1:44:21:01:62:55:3D:12:EC:C8:AE:54:A3:51:F3:76:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE33EDC25797A5D5D6200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.23.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e3:3e:dc:25:79:7a:5d:5d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d148a1b3-b309-4aa1-b08e-39ba5b4af369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:b1:95:17:27:45:23:e2:92:48:da:d0:59: e2:18:7e:7e:66:15:6b:2f:bd:29:05:bb:81:04:a8: 6b:c3:81:d0:b6:c1:e7:71:8c:0f:90:fa:0f:34:8a: c9:05:53:aa:fb:78:8a:db:39:98:c4:85:6b:c7:38: a1:ae:98:4c:b3:96:c6:45:e1:a7:ec:be:ee:ed:f6: 89:b7:ba:25:e1:1f:4b:92:9b:70:8a:2e:d8:8e:e0: 17:97:e6:64:56:15:0d:f2:30:aa:4b:39:3f:e2:fd: e9:b3:55:74:fb:e1:69:3e:4c:51:d7:24:67:ba:86: 08:46:a1:bb:11:9f:8b:dc:d0:f5:f1:67:f6:71:84: 35:19:ce:c2:97:35:f2:3b:7b:31:4e:c2:27:88:2e: 53:32:8b:36:06:b8:b8:01:4f:d8:33:f3:32:af:f9: eb:dd:48:8d:99:10:df:52:36:b5:4c:33:d6:d3:5e: 8a:b3:3b:cd:45:8c:72:1b:a2:7b:95:c5:d6:11:21: dc:c6:fd:c3:2f:a0:17:d5:d9:74:d7:10:6a:4a:dd: 7f:5e:b6:2f:08:97:3b:62:5c:cc:e9:a5:e1:ac:c4: 65:9b:74:96:d8:b6:b6:67:12:48:7c:7e:4d:e6:c0: 66:93:82:58:0b:10:0e:40:64:f7:e7:50:19:ad:95: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6F:39:A1:44:21:01:62:55:3D:12:EC:C8:AE:54:A3:51:F3:76:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9c:ed:e0:e3:f4:89:46:12:58:59:2e:6c:0f:7c:9d:47:8f: e4:ea:f9:cf:30:b2:af:70:10:47:53:3f:75:80:10:8c:5a:ea: cf:17:9a:8d:92:ad:17:06:aa:43:84:13:db:25:d4:ba:eb:5c: 19:c8:16:c5:1f:8d:15:a2:b9:cf:19:ad:bf:3d:4d:89:c6:aa: ce:d4:65:80:dd:80:27:ec:95:c6:e9:2a:f3:03:f9:cf:67:7b: e7:d5:90:42:1a:06:0d:21:c1:95:ee:4f:3c:4a:44:81:56:c0: 3c:cd:fe:27:9e:76:be:f0:61:9c:02:75:2f:7e:c7:8d:63:be: da:47:d5:09:5a:1a:c5:95:5c:7e:d0:03:dd:68:0d:3e:d0:39: 00:4c:d6:18:d7:e0:d6:b1:68:24:5f:e9:04:e1:93:f3:fc:7b: 92:4b:af:ef:cb:fa:19:ef:2a:d9:b4:39:20:69:a3:ec:6a:a7: bf:95:d7:c3:1d:cd:ef:89:50:36:47:aa:f2:58:63:7c:18:63: 24:96:d5:97:15:34:72:19:c8:45:fc:58:5d:14:17:b0:1c:76: aa:27:5c:90:53:76:07:cc:c5:15:8c:6e:70:0d:fc:19:c7:b8: 77:49:f0:1e:3d:40:6c:29:de:50:01:81:5a:ae:33:1b:1b:55: 98:28:b9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeM+3CV5el1dYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDE0OGExYjMtYjMwOS00YWExLWIwOGUtMzliYTViNGFmMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvmxlRcnRSPikkja0FniGH5+ZhVrL70pBbuB BKhrw4HQtsHncYwPkPoPNIrJBVOq+3iK2zmYxIVrxzihrphMs5bGReGn7L7u7faJ t7ol4R9Lkptwii7YjuAXl+ZkVhUN8jCqSzk/4v3ps1V0++FpPkxR1yRnuoYIRqG7 EZ+L3ND18Wf2cYQ1Gc7ClzXyO3sxTsIniC5TMos2Bri4AU/YM/Myr/nr3UiNmRDf Uja1TDPW016KszvNRYxyG6J7lcXWESHcxv3DL6AX1dl01xBqSt1/XrYvCJc7YlzM 6aXhrMRlm3SW2La2ZxJIfH5N5sBmk4JYCxAOQGT351AZrZVDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9vOaFEIQFiVT0S7MiuVKNR83acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjFmYjRjMjUtMzI1MC0z OWNhLTlhZjEtMzcwMzZjY2M0MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKc7eDj9IlGElhZLmwPfJ1Hj+Tq+c8wsq9wEEdTP3WAEIxa6s8Xmo2S rRcGqkOEE9sl1LrrXBnIFsUfjRWiuc8Zrb89TYnGqs7UZYDdgCfslcbpKvMD+c9n e+fVkEIaBg0hwZXuTzxKRIFWwDzN/ieedr7wYZwCdS9+x41jvtpH1QlaGsWVXH7Q A91oDT7QOQBM1hjX4NaxaCRf6QThk/P8e5JLr+/L+hnvKtm0OSBpo+xqp7+V18Md ze+JUDZHqvJYY3wYYySW1ZcVNHIZyEX8WF0UF7AcdqonXJBTdgfMxRWMbnAN/BnH uHdJ8B49QGwp3lABgVquMxsbVZgoud8= -----END CERTIFICATE-----Generated at Sun Oct 4 11:12:22 2026 by rpki-client