$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6518740d-b9d0-35c2-9ee1-9f319b864c55.roa File: 6518740d-b9d0-35c2-9ee1-9f319b864c55.roa (raw, json) Hash identifier: vFJweMwHjJlZfwKati5Znl4ZFhTTA7ipnpb1whejn+s= Subject key identifier: 13:2A:9F:AF:7D:B7:48:02:B4:F6:0D:E7:B9:D8:2C:03:89:F9:16:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49734D6CF967C2C1C4D00E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6518740d-b9d0-35c2-9ee1-9f319b864c55.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.16.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4d:6c:f9:67:c2:c1:c4:d0:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0bcc5c9d-a659-4334-9a74-3879d40d2864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:b2:8b:f5:bc:72:22:74:1e:74:c3:6c:fa: 71:88:62:41:06:d6:52:ba:96:8a:6e:f0:cb:3d:e2: 88:2a:95:04:24:2e:40:ae:8b:bd:ed:ab:9d:07:35: 8c:ba:d6:e0:43:c5:5a:85:7a:7c:d8:1e:d6:1e:e6: 02:b1:52:98:07:b9:53:50:91:cd:3d:be:99:d8:73: fe:4b:0f:38:9f:5c:b2:a1:e5:40:69:63:37:31:34: aa:ce:a6:f2:d4:c0:92:93:4f:63:32:db:93:65:4c: 60:c7:5c:67:1c:37:e6:be:16:d7:59:dc:3b:7c:d0: be:65:f0:58:3c:ff:4f:33:ed:99:4c:08:20:f9:b1: 80:69:53:21:e3:0a:bd:cf:ac:65:14:fe:4e:dd:2a: 5e:56:3e:9b:7c:c3:c5:99:a0:81:b6:cc:c6:2a:8e: ef:e5:68:5e:5a:0c:52:41:72:57:bc:45:94:e7:75: c7:cf:dd:8e:bb:19:63:e2:25:27:40:b6:60:8a:2e: 47:f6:2e:ec:72:14:c4:99:55:b0:62:76:f3:65:e1: 93:0f:90:51:10:bc:fb:cd:4e:65:2d:2d:df:76:20: 25:3c:ec:b1:77:e1:d4:ce:7e:f6:d7:df:ff:57:07: cb:9d:8c:49:8e:de:d6:27:ac:5a:24:22:8c:51:15: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:9F:AF:7D:B7:48:02:B4:F6:0D:E7:B9:D8:2C:03:89:F9:16:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6518740d-b9d0-35c2-9ee1-9f319b864c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:45:a5:db:e4:0a:0b:4e:8e:05:a1:8b:23:8e:8f:0a:0b:f9: 8b:1a:4e:fe:00:e0:2b:38:b5:0b:80:8f:84:37:7d:dd:67:fb: a9:81:81:4f:da:2a:77:b5:cb:66:3a:40:5b:b9:36:45:dd:5c: a6:de:42:57:5f:d8:d2:99:7c:a7:06:03:a3:62:d3:8c:68:e1: 2d:2a:20:b5:7b:64:74:86:ac:8d:eb:85:ae:ed:41:d0:52:65: ba:92:f0:1c:dc:aa:a5:dd:bb:3c:fa:ce:69:c0:39:73:e7:e7: be:d4:ed:7f:cc:65:14:d1:44:a0:ee:11:a3:96:96:32:9a:bb: 7f:aa:ed:e3:44:4e:e4:01:ab:25:93:4a:c5:d0:42:8f:58:aa: 50:90:60:9b:f6:c7:37:10:15:8d:51:b6:ec:19:68:20:ed:7c: b7:75:db:6e:e9:19:36:ab:65:25:42:81:56:e5:45:58:7b:f2: 64:e8:30:95:43:23:f3:be:8c:f0:cd:79:70:66:5e:13:d6:ce: 7b:04:e7:c8:26:90:de:a2:6c:1e:02:51:28:34:80:4f:44:23: f4:5a:1a:d5:54:6e:e4:fc:80:57:17:c5:5c:26:33:d8:4e:d7: 4f:a1:e4:ab:fe:18:7b:5c:42:2c:5c:95:67:ac:6f:7b:28:29: cd:4e:54:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc01s+WfCwcTQDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGJjYzVjOWQtYTY1OS00MzM0LTlhNzQtMzg3OWQ0MGQyODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wyyi/W8ciJ0HnTDbPpxiGJBBtZSupaKbvDL PeKIKpUEJC5Arou97audBzWMutbgQ8VahXp82B7WHuYCsVKYB7lTUJHNPb6Z2HP+ Sw84n1yyoeVAaWM3MTSqzqby1MCSk09jMtuTZUxgx1xnHDfmvhbXWdw7fNC+ZfBY PP9PM+2ZTAgg+bGAaVMh4wq9z6xlFP5O3SpeVj6bfMPFmaCBtszGKo7v5WheWgxS QXJXvEWU53XHz92Ouxlj4iUnQLZgii5H9i7schTEmVWwYnbzZeGTD5BRELz7zU5l LS3fdiAlPOyxd+HUzn7219//VwfLnYxJjt7WJ6xaJCKMURUriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMqn699t0gCtPYN57nYLAOJ+RYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjUxODc0MGQtYjlkMC0z NWMyLTllZTEtOWYzMTliODY0YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJFpdvkCgtOjgWhiyOOjwoL+YsaTv4A4Cs4tQuAj4Q3fd1n+6mBgU/a Kne1y2Y6QFu5NkXdXKbeQldf2NKZfKcGA6Ni04xo4S0qILV7ZHSGrI3rha7tQdBS ZbqS8BzcqqXduzz6zmnAOXPn577U7X/MZRTRRKDuEaOWljKau3+q7eNETuQBqyWT SsXQQo9YqlCQYJv2xzcQFY1RtuwZaCDtfLd1227pGTarZSVCgVblRVh78mToMJVD I/O+jPDNeXBmXhPWznsE58gmkN6ibB4CUSg0gE9EI/RaGtVUbuT8gFcXxVwmM9hO 10+h5Kv+GHtcQixclWesb3soKc1OVEc= -----END CERTIFICATE-----Generated at Sat Sep 26 13:41:49 2026 by rpki-client