$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa File: a9bb93b5-67a8-32e8-b395-ea74723d3667.roa (raw, json) Hash identifier: PmJQj1NF/CjRUoY4yswII9VCY+cjrQf8TUFhKOH3yaU= Subject key identifier: 2B:3E:53:AC:0D:2D:43:E2:23:A5:70:52:64:A7:29:F6:66:22:5D:C2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA798802F67C2EF1935F8FA70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.22.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:80:2f:67:c2:ef:19:35:f8:fa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0ab9afcc-69c2-41cd-aac9-3a372ea0a157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:a9:15:5d:d6:91:7f:2b:99:4c:1c:20:d0: 6d:53:d2:c2:68:1f:2b:61:45:69:db:db:84:8d:1d: a4:84:b5:08:a6:f3:8f:85:f5:67:4d:9c:0e:06:78: 6b:43:0c:b7:43:23:f3:a3:06:b7:f6:55:35:f4:16: 4e:73:f5:ac:76:80:e8:f0:cd:63:7d:5f:1e:ba:a2: d8:0f:f2:51:77:0a:d6:45:c5:a5:5d:62:76:4d:13: 39:75:5c:25:fe:6d:c9:1e:9d:60:8a:b7:8c:4f:f4: 07:e7:8e:03:26:f5:99:57:b5:49:67:3d:ca:f4:af: b0:5b:b9:08:11:95:3c:61:be:b8:e6:b9:fc:06:3b: 90:a5:d8:9c:69:25:7e:df:72:5e:9f:6b:9b:c8:33: 22:8d:22:b7:f1:54:f9:ab:da:89:45:52:00:3d:1f: 0b:2f:ad:47:b1:f7:bc:17:82:77:7b:4f:02:02:74: a1:93:eb:9e:54:e5:3c:3d:d0:59:fa:dc:10:fc:b2: de:20:ea:ba:fa:9f:7f:7f:c3:66:c9:2a:af:ec:e3: eb:a7:31:cd:3f:42:6e:cd:e9:be:b2:ce:f2:8a:23: 37:76:8f:f0:c3:b0:f9:59:d4:8a:38:1f:7f:c6:fa: 81:0f:21:93:0d:63:a6:ac:f8:1f:e8:b7:72:8c:d8: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3E:53:AC:0D:2D:43:E2:23:A5:70:52:64:A7:29:F6:66:22:5D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cb:a4:6a:16:af:0c:81:8a:06:bc:47:aa:6e:26:ec:91:8b: 68:3d:61:51:a4:71:88:d4:37:c2:9c:f6:82:7a:ce:73:db:08: 50:f4:b4:9d:55:a7:d2:d9:d5:10:ad:13:0e:74:fa:66:83:12: 43:b5:da:ea:84:ac:4a:6f:b6:c7:cf:4f:57:13:7a:46:38:02: b1:a5:20:b9:fa:ae:dd:24:41:43:24:36:56:70:bd:c8:01:e6: 42:0f:d3:f9:fa:7d:43:52:af:ed:6b:99:80:00:ff:de:e3:dd: f3:c7:8e:bd:a1:20:a8:53:4c:fa:68:e1:ab:89:10:92:e2:99: 92:79:c0:de:ad:17:1b:a5:f4:53:e9:77:bd:ba:16:18:9e:44: b8:99:31:42:e5:4f:17:35:b8:03:b4:86:cc:f1:34:9c:d0:9f: f7:b8:12:dc:38:18:a6:43:74:4e:a8:62:94:bd:c5:48:aa:0d: 81:36:d1:3a:0e:c8:d6:b7:75:be:90:15:46:39:72:46:2b:c8: d8:0a:7f:fc:47:ab:9a:da:cd:82:23:4f:78:98:de:05:14:2d: 13:06:a3:c7:cd:91:24:45:73:f8:ef:b9:02:0d:ba:d1:56:19: d1:45:7b:8a:27:9d:b1:83:01:52:b6:50:93:e7:39:83:94:32: 24:ae:e5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmIAvZ8LvGTX4+nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGFiOWFmY2MtNjljMi00MWNkLWFhYzktM2EzNzJlYTBhMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHqpFV3WkX8rmUwcINBtU9LCaB8rYUVp29uE jR2khLUIpvOPhfVnTZwOBnhrQwy3QyPzowa39lU19BZOc/WsdoDo8M1jfV8euqLY D/JRdwrWRcWlXWJ2TRM5dVwl/m3JHp1gireMT/QH544DJvWZV7VJZz3K9K+wW7kI EZU8Yb645rn8BjuQpdicaSV+33Jen2ubyDMijSK38VT5q9qJRVIAPR8LL61Hsfe8 F4J3e08CAnShk+ueVOU8PdBZ+twQ/LLeIOq6+p9/f8NmySqv7OPrpzHNP0Juzem+ ss7yiiM3do/ww7D5WdSKOB9/xvqBDyGTDWOmrPgf6LdyjNj48QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs+U6wNLUPiI6VwUmSnKfZmIl3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTliYjkzYjUtNjdhOC0z MmU4LWIzOTUtZWE3NDcyM2QzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPLpGoWrwyBiga8R6puJuyRi2g9YVGkcYjUN8Kc9oJ6znPbCFD0tJ1V p9LZ1RCtEw50+maDEkO12uqErEpvtsfPT1cTekY4ArGlILn6rt0kQUMkNlZwvcgB 5kIP0/n6fUNSr+1rmYAA/97j3fPHjr2hIKhTTPpo4auJEJLimZJ5wN6tFxul9FPp d726FhieRLiZMULlTxc1uAO0hszxNJzQn/e4Etw4GKZDdE6oYpS9xUiqDYE20ToO yNa3db6QFUY5ckYryNgKf/xHq5razYIjT3iY3gUULRMGo8fNkSRFc/jvuQINutFW GdFFe4onnbGDAVK2UJPnOYOUMiSu5VE= -----END CERTIFICATE-----Generated at Mon Sep 21 14:59:58 2026 by rpki-client