$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65828f33-ccc1-32f4-be78-c52866d75783.roa File: 65828f33-ccc1-32f4-be78-c52866d75783.roa (raw, json) Hash identifier: V83uKxyKyf91etWS7GfI/Pn98xeN4T6soF91sDSYqoU= Subject key identifier: 8D:89:BB:4A:00:26:B7:AA:8F:FF:A2:E7:91:A5:66:56:2A:64:4D:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49736736A67D6A0D2F95D440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65828f33-ccc1-32f4-be78-c52866d75783.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:67:36:a6:7d:6a:0d:2f:95:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f56c0077-d464-4198-bd53-4f0ba3a63634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:61:e8:e5:15:b8:14:db:08:4f:34:c5:64: fc:90:cf:2e:ed:46:02:09:15:15:15:db:6b:56:c1: cf:6d:e0:ce:f9:5d:9f:c9:2b:e5:30:99:ca:6a:0c: d1:57:a0:51:47:da:e5:a0:ac:e2:7a:c6:6e:33:57: 09:6f:17:10:0e:f6:18:18:ac:2a:cb:67:f4:be:ff: 8f:c3:fd:3e:77:59:6a:42:b7:56:cf:b3:66:16:05: b6:0d:ec:c0:83:0f:e1:1a:6e:98:6a:d9:27:de:48: fe:74:f9:aa:12:cf:34:f3:69:3a:ad:67:52:e9:06: 77:c7:cb:c9:64:7f:94:94:19:8f:44:30:5b:a0:34: 37:7f:53:74:9b:66:81:0b:8f:9a:14:52:b4:d2:ca: 61:1a:8a:a4:6a:01:09:c0:48:4d:53:e2:c5:68:36: 89:ab:da:72:9c:2e:39:33:78:ab:51:73:48:be:d2: c0:e3:b9:8e:46:e0:34:36:7b:9a:dc:75:c0:1f:11: a9:1d:38:3c:06:c3:31:80:88:8e:d7:f9:99:b1:7b: 30:46:40:25:3b:7b:de:8f:0b:08:e2:72:9b:ad:f7: a6:7f:ce:91:bb:a1:ba:0b:ba:a4:d9:8a:c6:96:a0: 4d:7e:13:41:89:eb:ba:97:53:63:e4:1b:a9:e0:d9: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:BB:4A:00:26:B7:AA:8F:FF:A2:E7:91:A5:66:56:2A:64:4D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65828f33-ccc1-32f4-be78-c52866d75783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:71:4e:9e:43:1c:a6:75:c2:65:91:74:76:0a:01:45:72:83: e6:7d:a9:36:a0:4f:90:d2:ac:74:62:21:67:80:a2:49:68:1e: 88:43:37:5d:f4:e5:ab:ef:b3:65:2a:85:c0:51:18:3e:60:28: a0:16:cc:94:fe:26:a8:c5:19:58:72:01:81:5f:5f:23:06:e1: de:4b:8b:c4:8b:b6:91:1f:58:3a:cf:79:44:64:38:d4:2c:27: 4d:b9:98:e9:dd:29:ce:e8:f9:0d:39:b7:ff:88:e5:f3:b6:e6: 91:05:a3:84:ad:ad:73:a6:02:14:d3:9e:9c:d3:44:a8:b2:95: 73:4f:da:fc:61:a9:91:bb:7f:df:ba:67:1e:33:48:b9:74:0e: 5f:3c:45:2d:8c:57:e6:bd:f1:1f:e6:17:06:16:5a:f9:7f:56: a8:3e:50:1b:a1:61:2c:28:03:0a:da:c6:4e:51:8c:04:f5:fb: 40:b7:27:1c:c0:8a:cf:15:8d:94:ea:56:33:34:97:66:78:55: 29:65:3f:7d:86:be:88:50:e2:d1:b3:1c:4e:b8:c2:dc:49:a4: 1b:ea:e3:41:83:10:68:72:e4:0b:96:6b:97:3c:ee:3d:27:e0: 1d:66:83:ae:10:af:c8:38:c8:6b:c5:2e:b2:11:27:55:b7:5a: 2a:e5:c3:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2c2pn1qDS+V1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjU2YzAwNzctZDQ2NC00MTk4LWJkNTMtNGYwYmEzYTYzNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Bh6OUVuBTbCE80xWT8kM8u7UYCCRUVFdtr VsHPbeDO+V2fySvlMJnKagzRV6BRR9rloKziesZuM1cJbxcQDvYYGKwqy2f0vv+P w/0+d1lqQrdWz7NmFgW2DezAgw/hGm6Yatkn3kj+dPmqEs8082k6rWdS6QZ3x8vJ ZH+UlBmPRDBboDQ3f1N0m2aBC4+aFFK00sphGoqkagEJwEhNU+LFaDaJq9pynC45 M3irUXNIvtLA47mORuA0Nnua3HXAHxGpHTg8BsMxgIiO1/mZsXswRkAlO3vejwsI 4nKbrfemf86Ru6G6C7qk2YrGlqBNfhNBieu6l1Nj5Bup4NlKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2Ju0oAJreqj/+i55GlZlYqZE2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjU4MjhmMzMtY2NjMS0z MmY0LWJlNzgtYzUyODY2ZDc1NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJxTp5DHKZ1wmWRdHYKAUVyg+Z9qTagT5DSrHRiIWeAokloHohDN130 5avvs2UqhcBRGD5gKKAWzJT+JqjFGVhyAYFfXyMG4d5Li8SLtpEfWDrPeURkONQs J025mOndKc7o+Q05t/+I5fO25pEFo4StrXOmAhTTnpzTRKiylXNP2vxhqZG7f9+6 Zx4zSLl0Dl88RS2MV+a98R/mFwYWWvl/Vqg+UBuhYSwoAwraxk5RjAT1+0C3JxzA is8VjZTqVjM0l2Z4VSllP32GvohQ4tGzHE64wtxJpBvq40GDEGhy5AuWa5c87j0n 4B1mg64Qr8g4yGvFLrIRJ1W3Wirlw5A= -----END CERTIFICATE-----Generated at Sat Oct 10 10:35:41 2026 by rpki-client