$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8957d5a2-ee6d-3c78-9d79-35f602b1d720.roa File: 8957d5a2-ee6d-3c78-9d79-35f602b1d720.roa (raw, json) Hash identifier: +CwfS191K8qhak7YGQ/z6ryTokx+x4lA9ytvcx3+iSY= Subject key identifier: 8D:E2:34:8B:EF:04:00:21:F8:EB:32:1B:4A:54:FE:67:CB:F9:7D:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A96BD613C202703A8CE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8957d5a2-ee6d-3c78-9d79-35f602b1d720.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:96:bd:61:3c:20:27:03:a8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8866dc74-ed31-44c2-a432-af018517f0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:eb:48:f3:7f:4d:c6:2d:36:28:74:eb:ec: 8c:57:7c:14:c9:20:6e:01:62:ea:62:a0:92:af:4d: 4b:c1:fe:0c:65:43:98:ee:74:4c:62:a5:af:ce:33: 31:6b:43:dd:6f:32:67:5a:e0:93:3b:b6:d1:05:aa: 7d:34:30:e6:49:4d:90:5b:2d:e8:59:28:5f:77:8e: f9:4a:0d:97:d9:ea:e8:56:d0:0b:8a:38:13:4d:48: 01:fc:85:7a:3a:f2:cb:10:55:47:55:fa:62:57:2a: 19:4d:d4:11:22:1f:35:bb:aa:c0:cc:52:0c:29:93: e4:a9:22:a8:40:ef:16:1b:87:76:25:b9:92:73:9f: c7:41:63:8f:36:c5:b4:b0:22:80:08:49:70:02:58: 36:49:6f:db:fb:b3:91:53:b0:df:9b:3a:ba:61:3c: 1e:11:ef:11:4e:8a:26:b5:e3:85:77:b4:b6:eb:1f: c7:a3:32:86:1a:77:15:0a:3a:da:09:63:34:b5:95: 5d:6b:51:5c:e6:75:74:71:81:82:fe:8f:f3:d6:63: 34:bd:0a:b0:31:ac:bd:56:d3:6a:da:47:26:46:79: 8d:50:db:12:61:33:7b:fb:fd:6a:96:fe:6a:01:de: fc:31:61:f5:25:c1:2b:90:6a:b8:70:5a:b5:c5:d0: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E2:34:8B:EF:04:00:21:F8:EB:32:1B:4A:54:FE:67:CB:F9:7D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8957d5a2-ee6d-3c78-9d79-35f602b1d720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a1:17:11:aa:50:cc:f5:79:d3:69:15:e7:84:dd:d6:66:a1: 50:16:a0:7a:44:2e:d9:69:65:f0:f4:70:66:4d:e5:0b:12:67: 7f:ea:d8:90:a9:50:40:b3:2f:d2:3c:f7:66:ce:5c:4b:74:e4: ef:33:49:38:53:ec:1e:9d:16:e1:ad:e3:bf:1f:0c:ce:14:f0: e6:bb:8e:88:1d:62:8e:7d:d2:79:af:08:f6:2a:c9:a0:f4:54: 62:8f:56:a1:ff:ca:1f:14:a6:b1:e6:ea:2d:ad:c5:13:51:b4: 34:4d:9d:49:2b:5e:7a:46:f1:67:e0:dc:75:44:63:88:e4:fd: 93:d4:d2:76:c0:e9:2b:0d:43:ca:f4:c8:3f:dd:2a:9d:e3:65: 34:64:85:08:b1:27:10:9f:93:a0:9a:87:6e:a5:6f:a4:e4:f0: db:ab:cf:13:4f:3e:b4:a1:a3:5e:0e:10:7b:f7:d7:2f:74:79: 57:da:61:7d:10:35:17:dc:fe:f9:a8:5d:65:34:db:87:44:0f: 45:cd:dc:d8:2b:9f:ae:6c:3c:9f:c6:8f:21:7e:29:04:f4:87: 0b:f9:27:2f:0f:4d:f4:6a:4e:14:b9:1b:2b:90:be:eb:d9:ae: 87:4b:51:09:64:ab:85:d5:fb:07:ce:03:38:1c:d8:73:5c:0f: 65:77:c0:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jipa9YTwgJwOozoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODg2NmRjNzQtZWQzMS00NGMyLWE0MzItYWYwMTg1MTdmMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApofrSPN/TcYtNih06+yMV3wUySBuAWLqYqCS r01Lwf4MZUOY7nRMYqWvzjMxa0PdbzJnWuCTO7bRBap9NDDmSU2QWy3oWShfd475 Sg2X2eroVtALijgTTUgB/IV6OvLLEFVHVfpiVyoZTdQRIh81u6rAzFIMKZPkqSKo QO8WG4d2JbmSc5/HQWOPNsW0sCKACElwAlg2SW/b+7ORU7Dfmzq6YTweEe8RToom teOFd7S26x/HozKGGncVCjraCWM0tZVda1Fc5nV0cYGC/o/z1mM0vQqwMay9VtNq 2kcmRnmNUNsSYTN7+/1qlv5qAd78MWH1JcErkGq4cFq1xdBKQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3iNIvvBAAh+OsyG0pU/mfL+X2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODk1N2Q1YTItZWU2ZC0z Yzc4LTlkNzktMzVmNjAyYjFkNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKhFxGqUMz1edNpFeeE3dZmoVAWoHpELtlpZfD0cGZN5QsSZ3/q2JCp UECzL9I892bOXEt05O8zSThT7B6dFuGt478fDM4U8Oa7jogdYo590nmvCPYqyaD0 VGKPVqH/yh8UprHm6i2txRNRtDRNnUkrXnpG8Wfg3HVEY4jk/ZPU0nbA6SsNQ8r0 yD/dKp3jZTRkhQixJxCfk6Cah26lb6Tk8NurzxNPPrSho14OEHv31y90eVfaYX0Q NRfc/vmoXWU024dED0XN3Ngrn65sPJ/GjyF+KQT0hwv5Jy8PTfRqThS5GyuQvuvZ rodLUQlkq4XV+wfOAzgc2HNcD2V3wN4= -----END CERTIFICATE-----Generated at Sat Sep 26 17:01:24 2026 by rpki-client