$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa File: aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa (raw, json) Hash identifier: YaPrDEfy1qJ0ML8CRS23J0JX2kpVNjSRRqsR3YhSNtA= Subject key identifier: B9:A6:BA:8F:6D:A2:52:9D:F7:E8:07:9D:30:E6:7F:2C:65:57:7C:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0D6CD8737F131F9B0C12B5A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d8:73:7f:13:1f:9b:0c:12:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=8a064597-75c0-4c70-b122-7dd05482b750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:e7:e9:7b:e4:ee:a1:3d:c3:d3:cd:9c:d7: 69:60:f1:2b:51:a7:c5:31:b8:7e:10:09:39:87:92: 7e:63:f7:f5:b5:6d:87:a9:c6:29:37:12:5e:98:96: 9a:55:28:20:65:23:f9:6e:97:40:fe:87:95:de:48: 97:90:7e:79:43:38:8d:e1:8a:15:c4:c5:16:08:10: 0c:1f:a0:4e:bc:7c:77:26:80:0b:ca:de:ca:75:72: 12:94:db:d2:7c:6d:62:31:51:9f:7c:5a:e0:9c:1e: 62:0d:41:4f:bf:73:ff:b2:45:b5:9d:e3:b4:a0:58: fc:01:a9:7f:6a:b3:3d:99:90:06:6f:64:df:ef:11: 92:7c:b0:dc:de:f7:a4:2f:af:32:41:0d:6f:eb:da: 00:12:23:ba:44:8a:1d:64:78:2f:89:33:35:44:aa: fd:ad:c9:00:40:48:d9:99:a6:12:3c:5d:03:58:f7: 82:b6:57:d4:aa:36:ea:5e:26:15:24:35:77:c3:1b: 5c:2d:32:75:d7:32:bb:fd:51:3c:7e:b7:5c:b8:1d: 57:79:c7:92:27:53:cf:85:49:73:0b:cf:15:58:68: 48:f0:fe:f4:64:29:6a:84:8c:79:d8:c3:a6:63:aa: 2b:19:b8:f6:e1:46:9d:45:a2:d4:ee:0b:c8:81:aa: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A6:BA:8F:6D:A2:52:9D:F7:E8:07:9D:30:E6:7F:2C:65:57:7C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5d:66:de:43:8f:4d:24:49:7f:09:43:0e:6d:2f:70:b2:f2: 60:4f:84:d8:53:51:ec:44:65:97:5d:3f:88:28:93:04:5b:90: 50:b5:59:b8:60:3b:a3:60:3a:10:72:f7:85:b0:40:12:87:03: 02:fe:a5:6f:1e:ed:c8:c5:c9:d1:43:95:e0:c7:79:f3:20:07: 26:8e:e4:27:91:2d:66:b9:4f:02:56:cc:d1:d7:2f:e7:ed:b1: 45:e5:ef:fd:5b:1b:48:44:b7:7c:e7:2f:a6:c3:9e:a4:ff:38: d2:9d:5d:11:30:a6:b6:0d:38:cc:97:b0:7c:d9:5e:a6:a8:3e: c0:e7:75:b6:f0:8b:ed:51:75:d1:96:d2:52:2b:83:cf:0a:86: a0:73:4e:02:bc:1c:38:5d:1c:55:dc:2c:fc:8f:8a:44:9b:5f: 7e:00:99:3a:98:59:a1:32:41:fc:02:56:aa:77:76:42:15:b4: 38:e8:70:94:12:5e:26:92:01:29:b2:dd:1e:11:fc:7c:e0:83: b7:ea:81:1a:9c:98:db:d3:a6:14:73:a5:5d:d6:5c:bf:60:97: 19:a8:63:75:46:cd:0d:ae:5a:1f:14:4e:92:88:b7:52:18:ec: af:97:a1:2e:e7:94:42:7d:1f:56:c5:35:db:55:9a:b9:2f:d2: 58:f6:3f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNhzfxMfmwwStaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OGEwNjQ1OTctNzVjMC00YzcwLWIxMjItN2RkMDU0ODJiNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlvn6Xvk7qE9w9PNnNdpYPErUafFMbh+EAk5 h5J+Y/f1tW2HqcYpNxJemJaaVSggZSP5bpdA/oeV3kiXkH55QziN4YoVxMUWCBAM H6BOvHx3JoALyt7KdXISlNvSfG1iMVGffFrgnB5iDUFPv3P/skW1neO0oFj8Aal/ arM9mZAGb2Tf7xGSfLDc3vekL68yQQ1v69oAEiO6RIodZHgviTM1RKr9rckAQEjZ maYSPF0DWPeCtlfUqjbqXiYVJDV3wxtcLTJ11zK7/VE8frdcuB1XeceSJ1PPhUlz C88VWGhI8P70ZClqhIx52MOmY6orGbj24UadRaLU7gvIgaoDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmmuo9tolKd9+gHnTDmfyxlV3xmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE4Y2U1OWItNWVhZi0z YzdlLWE3ZWItZjVlZDE1MWNmMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFdZt5Dj00kSX8JQw5tL3Cy8mBPhNhTUexEZZddP4gokwRbkFC1Wbhg O6NgOhBy94WwQBKHAwL+pW8e7cjFydFDleDHefMgByaO5CeRLWa5TwJWzNHXL+ft sUXl7/1bG0hEt3znL6bDnqT/ONKdXREwprYNOMyXsHzZXqaoPsDndbbwi+1RddGW 0lIrg88KhqBzTgK8HDhdHFXcLPyPikSbX34AmTqYWaEyQfwCVqp3dkIVtDjocJQS XiaSASmy3R4R/Hzgg7fqgRqcmNvTphRzpV3WXL9glxmoY3VGzQ2uWh8UTpKIt1IY 7K+XoS7nlEJ9H1bFNdtVmrkv0lj2P+c= -----END CERTIFICATE-----Generated at Tue Sep 22 02:54:53 2026 by rpki-client