$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/654e636e-b13b-3d16-a98a-f2d4462a9e36.roa File: 654e636e-b13b-3d16-a98a-f2d4462a9e36.roa (raw, json) Hash identifier: GeGZ74VjXpPkkbQcUDMwgMZ1nQ9wmiTdjHX9XfjaOfc= Subject key identifier: 23:36:38:BB:C9:36:5E:06:6A:B4:34:F8:E5:FE:40:7A:B0:19:94:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D21610CCA1D33316A73E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/654e636e-b13b-3d16-a98a-f2d4462a9e36.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.16.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:21:61:0c:ca:1d:33:31:6a:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=f17e4e76-3564-4324-92b6-8e801bc82931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:2c:32:15:dc:89:33:8a:06:8d:ed:c2:de: 15:7e:93:64:85:fe:1b:1a:00:e3:60:60:e9:b9:8c: e2:b0:6e:dd:28:bc:9a:ca:c0:5c:03:89:ad:11:9d: 48:3c:db:5c:42:fa:0b:ee:5a:6e:cb:5b:d1:04:f1: 70:09:f9:90:fd:15:e7:7b:7d:5e:c2:d3:b5:b4:75: af:f0:3d:0d:79:2a:57:32:f6:48:67:50:f3:5a:4c: 5e:bf:96:f4:56:87:0f:1d:e8:62:25:80:14:8b:90: cd:71:db:ad:46:bd:e4:da:3f:1e:14:00:a8:c0:c9: ae:b9:17:af:12:71:a0:04:6f:07:98:27:b3:35:f9: 44:42:df:2f:f2:5c:ac:43:a8:da:a5:f1:38:8d:7c: 5a:eb:74:30:bc:38:be:c5:ad:5d:32:9b:63:f6:b8: 68:fc:21:4e:31:3b:cd:86:ea:6d:18:15:64:9c:3d: 83:b8:78:a3:ce:ef:97:df:14:b8:89:4a:03:c3:56: 46:52:b7:14:ce:52:24:91:a5:10:57:d1:02:93:96: 2d:88:93:20:cd:af:98:1a:cb:6e:31:bf:ec:6f:dc: 80:c0:16:37:44:62:ce:1b:4e:10:17:e0:09:5f:ba: 6e:b7:27:0d:8f:e7:6a:91:d9:b7:4c:5f:1a:3e:bb: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:38:BB:C9:36:5E:06:6A:B4:34:F8:E5:FE:40:7A:B0:19:94:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/654e636e-b13b-3d16-a98a-f2d4462a9e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8b:ac:e9:02:c3:ec:70:f2:74:81:c8:9d:b3:aa:dc:32:ae: f6:85:b9:da:66:a7:48:e5:56:8b:bb:01:6c:2a:b6:1e:01:84: a5:3f:6e:2a:20:4f:0d:ed:e1:b0:81:cf:7b:a8:da:8e:55:96: c2:29:5e:5b:e7:54:5c:ff:4e:08:b2:57:11:ec:22:d0:dc:6f: fe:64:cc:7a:c7:af:f3:91:dd:70:97:c0:af:bc:19:19:23:7a: 13:ca:5e:03:47:6f:1e:83:53:fa:27:d3:5d:a8:0c:ee:24:32: a3:0c:17:aa:c2:fd:ea:38:be:6e:f1:0a:3c:25:4f:d5:51:dc: d2:31:5e:e8:27:7e:82:1d:bb:d9:3b:b6:0e:eb:52:23:5a:45: e1:5a:a5:2c:3a:fb:e6:fe:b0:ca:81:a4:7f:d1:86:49:e7:a8: 34:0b:67:03:b4:50:c4:2b:6f:69:9f:5e:f4:0e:24:2a:d9:ca: 8b:53:5f:a5:de:68:28:e0:30:43:65:a8:1b:e2:6b:1e:07:52: 47:c3:49:57:71:f8:0f:95:e1:52:b8:7b:3b:ed:38:d2:5e:ca: 38:db:c0:e3:aa:2b:ab:85:4f:32:66:89:03:23:63:2c:27:06: 78:cd:f2:88:2f:51:89:92:09:a7:f7:96:54:f6:85:01:2f:5c: dd:fa:67:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSFhDModMzFqc+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjE3ZTRlNzYtMzU2NC00MzI0LTkyYjYtOGU4MDFiYzgyOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguAsMhXciTOKBo3twt4VfpNkhf4bGgDjYGDp uYzisG7dKLyaysBcA4mtEZ1IPNtcQvoL7lpuy1vRBPFwCfmQ/RXne31ewtO1tHWv 8D0NeSpXMvZIZ1DzWkxev5b0VocPHehiJYAUi5DNcdutRr3k2j8eFACowMmuuRev EnGgBG8HmCezNflEQt8v8lysQ6japfE4jXxa63QwvDi+xa1dMptj9rho/CFOMTvN huptGBVknD2DuHijzu+X3xS4iUoDw1ZGUrcUzlIkkaUQV9ECk5YtiJMgza+YGstu Mb/sb9yAwBY3RGLOG04QF+AJX7putycNj+dqkdm3TF8aPrtPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM2OLvJNl4GarQ0+OX+QHqwGZS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjU0ZTYzNmUtYjEzYi0z ZDE2LWE5OGEtZjJkNDQ2MmE5ZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSLrOkCw+xw8nSByJ2zqtwyrvaFudpmp0jlVou7AWwqth4BhKU/biog Tw3t4bCBz3uo2o5VlsIpXlvnVFz/TgiyVxHsItDcb/5kzHrHr/OR3XCXwK+8GRkj ehPKXgNHbx6DU/on012oDO4kMqMMF6rC/eo4vm7xCjwlT9VR3NIxXugnfoIdu9k7 tg7rUiNaReFapSw6++b+sMqBpH/RhknnqDQLZwO0UMQrb2mfXvQOJCrZyotTX6Xe aCjgMENlqBviax4HUkfDSVdx+A+V4VK4ezvtONJeyjjbwOOqK6uFTzJmiQMjYywn BnjN8ogvUYmSCaf3llT2hQEvXN36Z8E= -----END CERTIFICATE-----Generated at Sun Sep 20 18:53:34 2026 by rpki-client