$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa File: a225a24e-a3c2-3e99-b9d9-9013830f3396.roa (raw, json) Hash identifier: 67uNd4uFCqpupQMPC9BSAFffgWxTbMJ9J7uf7tt0U98= Subject key identifier: B0:DF:2D:CB:65:43:35:FE:B4:FA:AF:CF:BF:6C:99:00:43:06:28:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498966399F7365D9177F5300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:66:39:9f:73:65:d9:17:7f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d36a580-068f-4abe-8d10-c33eec2bc621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:ee:8a:5d:4d:4f:6e:7f:44:a2:b8:be:64: 4d:8f:54:ea:16:be:73:2f:f4:28:fd:44:2c:9c:90: 46:94:41:56:bd:1f:1c:3d:22:fb:c6:72:70:1e:82: d0:d7:a1:6c:fd:06:c8:de:3d:9d:e2:60:f7:67:2f: 68:1f:4d:7f:3b:89:92:0c:a8:dc:27:bf:a5:e2:fa: 4d:52:e3:f9:8b:65:71:f9:bc:b0:1f:08:1d:d9:90: 88:8e:b4:67:38:a6:5f:57:43:17:6a:80:8d:69:4d: eb:b6:e0:94:b8:2c:14:63:18:89:d7:45:e7:9d:66: b1:97:e0:3e:d0:06:24:e9:fe:86:9e:23:53:9f:26: 91:ba:67:4c:38:44:5f:66:3c:ca:3f:49:e8:43:f7: 05:e5:3e:32:52:f2:2e:11:26:f8:1e:16:fd:8f:91: 4f:a7:23:41:6b:19:b1:e3:f3:3f:3a:dd:0e:85:a2: 58:f0:7f:8e:d5:76:67:01:52:f3:7e:7c:61:56:a6: e8:18:83:17:71:78:02:a9:7c:54:7c:5e:ee:87:ba: 0b:d5:93:ca:73:b3:d4:4d:d0:c9:05:53:89:1e:63: b3:fc:47:a4:fa:e9:7d:ac:c7:d8:30:5c:1e:1f:88: 3a:2d:82:ef:56:e0:d5:d1:56:fa:74:35:32:06:31: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:2D:CB:65:43:35:FE:B4:FA:AF:CF:BF:6C:99:00:43:06:28:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b4:d6:18:5a:ce:90:0f:47:db:b1:7b:67:b4:51:4e:ca:7b: 89:19:29:de:26:b9:f8:82:5e:55:8b:5a:a6:f1:8e:fc:29:c0: f4:7f:2a:ae:23:91:8a:df:f1:ff:a5:b3:2d:c4:03:3a:b5:9b: 1e:57:70:6a:f4:57:13:fb:36:85:22:db:80:da:d8:70:15:37: 95:29:6c:e6:69:3a:0b:c0:85:08:23:98:45:d7:7c:28:d0:38: d7:77:4c:df:ca:64:c2:d3:e7:1e:af:6f:15:d5:03:78:6a:6b: 0f:e8:87:9d:33:45:33:a4:ab:71:78:58:79:72:40:aa:25:72: 40:e6:6d:82:d7:75:e2:fd:72:c6:2e:97:cc:c6:cb:ec:17:d5: 82:5c:d8:35:b8:df:30:5b:30:72:b2:d4:78:e4:48:7b:08:8b: 31:a2:4a:1e:c9:c0:89:a6:7b:7a:5c:f4:38:32:c7:82:2f:81: 5c:c8:ad:f1:cc:fb:8e:4f:c5:96:90:e6:ca:de:3a:91:b6:6a: 99:69:c7:96:22:0a:f1:6e:86:c8:04:ef:77:53:2b:aa:79:20: b1:a9:68:40:60:ea:ac:49:70:41:63:78:1f:6e:8f:3c:86:5f: 3c:14:36:fd:c0:ba:4f:5e:6b:eb:45:12:b0:74:d8:51:5c:aa: af:b8:df:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiWY5n3Nl2Rd/UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQzNmE1ODAtMDY4Zi00YWJlLThkMTAtYzMzZWVjMmJjNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3uil1NT25/RKK4vmRNj1TqFr5zL/Qo/UQs nJBGlEFWvR8cPSL7xnJwHoLQ16Fs/QbI3j2d4mD3Zy9oH01/O4mSDKjcJ7+l4vpN UuP5i2Vx+bywHwgd2ZCIjrRnOKZfV0MXaoCNaU3rtuCUuCwUYxiJ10XnnWaxl+A+ 0AYk6f6GniNTnyaRumdMOERfZjzKP0noQ/cF5T4yUvIuESb4Hhb9j5FPpyNBaxmx 4/M/Ot0OhaJY8H+O1XZnAVLzfnxhVqboGIMXcXgCqXxUfF7uh7oL1ZPKc7PUTdDJ BVOJHmOz/Eek+ul9rMfYMFweH4g6LYLvVuDV0Vb6dDUyBjGxOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDfLctlQzX+tPqvz79smQBDBijKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyNWEyNGUtYTNjMi0z ZTk5LWI5ZDktOTAxMzgzMGYzMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe01hhazpAPR9uxe2e0UU7Ke4kZKd4mufiCXlWLWqbxjvwpwPR/Kq4j kYrf8f+lsy3EAzq1mx5XcGr0VxP7NoUi24Da2HAVN5UpbOZpOgvAhQgjmEXXfCjQ ONd3TN/KZMLT5x6vbxXVA3hqaw/oh50zRTOkq3F4WHlyQKolckDmbYLXdeL9csYu l8zGy+wX1YJc2DW43zBbMHKy1HjkSHsIizGiSh7JwImme3pc9Dgyx4IvgVzIrfHM +45PxZaQ5sreOpG2aplpx5YiCvFuhsgE73dTK6p5ILGpaEBg6qxJcEFjeB9ujzyG XzwUNv3Auk9ea+tFErB02FFcqq+43zI= -----END CERTIFICATE-----Generated at Thu Oct 1 23:15:32 2026 by rpki-client