$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa File: b03cf3ee-c054-377b-88ce-d7293bde103a.roa (raw, json) Hash identifier: 9Yoo81RA2ek9OObo+fvEx6w4JVbqomRvpY/Oufb+wi4= Subject key identifier: 33:4D:93:B2:3C:92:EF:F3:71:D3:F2:4F:41:3A:BC:F7:7B:CA:49:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F20F7D7B941CBA5620934A0A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d7:b9:41:cb:a5:62:09:34:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8c8145b5-2e98-4373-ad88-8d01fabd00b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:b3:cc:c3:60:ae:1c:43:b8:2a:36:3a:4d: c6:12:c7:82:51:49:51:4d:ac:28:6f:74:dc:ab:63: 5e:5a:82:11:21:4c:ce:4b:1b:87:a0:9f:ca:09:f2: 1c:16:82:42:d4:94:30:f5:8c:69:67:c9:85:ae:27: ae:54:ba:80:68:9e:82:42:76:bb:f7:96:5c:bf:9b: df:df:19:32:12:0a:45:b8:1a:5a:3c:53:6c:21:6f: 4c:65:75:15:7a:d6:96:f5:9d:f2:e0:c1:36:42:74: 99:4a:40:58:4e:43:35:4e:e8:00:7e:20:e1:6f:8c: b2:23:ee:a8:a0:83:91:74:96:c1:59:ca:2e:0b:08: 4d:3a:fd:f5:d3:27:de:6e:07:9b:00:5e:ec:bd:87: cc:bc:a9:21:ab:b9:ca:fc:98:b4:f7:b3:8d:ee:e9: f8:10:7d:8e:81:cf:67:eb:42:d3:7e:9e:7f:23:83: 95:2f:53:5c:4b:3d:c5:f1:66:41:79:e9:e1:4b:4b: 98:db:fc:68:4c:c4:a6:15:45:3c:30:fd:b6:1a:55: 58:9c:99:e5:53:24:5e:cf:00:5f:d3:a5:e1:1f:54: eb:97:57:78:07:76:f1:86:76:8c:d3:a1:48:b9:8c: c0:75:07:9e:b9:e7:d0:e6:a4:04:f2:4b:65:17:68: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:93:B2:3C:92:EF:F3:71:D3:F2:4F:41:3A:BC:F7:7B:CA:49:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b1:6b:12:77:02:4d:99:a0:fc:21:bf:d6:a9:83:1a:49:21: fa:c0:88:42:44:1b:1c:cb:83:80:9d:f6:f4:49:b8:a5:c3:c0: 1a:f3:8f:1c:3e:d8:d0:0e:6e:11:18:a7:a2:06:dd:44:35:b5: 4e:f6:74:e5:fd:d0:65:5d:cb:10:38:67:45:73:bc:c9:f1:a3: 60:02:f4:e5:45:f2:2a:9d:75:df:7a:e4:26:c2:03:f8:0e:3d: eb:b2:03:0e:d3:84:a8:a3:88:cf:47:98:11:08:1b:80:9d:ce: 88:79:8c:6f:6e:2b:cd:2d:9b:6b:31:28:78:23:9d:e7:de:62: fc:0f:9a:49:78:c7:3c:23:45:15:25:ac:09:0a:a7:05:27:6a: d2:ef:b8:1c:15:48:bf:26:1d:cd:6b:ed:7f:4c:27:a9:7d:7c: 7e:72:3a:e9:b0:9f:72:33:95:6b:09:01:da:77:82:d7:87:09: 3f:0e:d9:e1:0f:51:ac:98:da:a3:82:7c:61:ed:3d:ba:e8:0d: 3e:39:ef:df:0d:71:7b:29:f5:6c:e9:b7:39:af:15:b3:84:91: 4a:03:0e:a8:c1:68:4d:6f:b6:54:e7:c0:67:1c:b0:a1:32:f2: 53:b3:7d:0b:2b:35:77:56:06:7e:de:1b:d2:0b:a9:0f:74:fb: d3:13:d5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99e5QculYgk0oKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGM4MTQ1YjUtMmU5OC00MzczLWFkODgtOGQwMWZhYmQwMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NOzzMNgrhxDuCo2Ok3GEseCUUlRTawob3Tc q2NeWoIRIUzOSxuHoJ/KCfIcFoJC1JQw9YxpZ8mFrieuVLqAaJ6CQna795Zcv5vf 3xkyEgpFuBpaPFNsIW9MZXUVetaW9Z3y4ME2QnSZSkBYTkM1TugAfiDhb4yyI+6o oIORdJbBWcouCwhNOv310yfebgebAF7svYfMvKkhq7nK/Ji097ON7un4EH2Ogc9n 60LTfp5/I4OVL1NcSz3F8WZBeenhS0uY2/xoTMSmFUU8MP22GlVYnJnlUyRezwBf 06XhH1Trl1d4B3bxhnaM06FIuYzAdQeeuefQ5qQE8ktlF2h+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNNk7I8ku/zcdPyT0E6vPd7yklAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjAzY2YzZWUtYzA1NC0z NzdiLTg4Y2UtZDcyOTNiZGUxMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKxaxJ3Ak2ZoPwhv9apgxpJIfrAiEJEGxzLg4Cd9vRJuKXDwBrzjxw+ 2NAObhEYp6IG3UQ1tU72dOX90GVdyxA4Z0VzvMnxo2AC9OVF8iqddd965CbCA/gO PeuyAw7ThKijiM9HmBEIG4Cdzoh5jG9uK80tm2sxKHgjnefeYvwPmkl4xzwjRRUl rAkKpwUnatLvuBwVSL8mHc1r7X9MJ6l9fH5yOumwn3IzlWsJAdp3gteHCT8O2eEP UayY2qOCfGHtPbroDT45798NcXsp9WzptzmvFbOEkUoDDqjBaE1vtlTnwGccsKEy 8lOzfQsrNXdWBn7eG9ILqQ90+9MT1WQ= -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:06 2026 by rpki-client