$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf5ab5ca-3541-394f-b713-cbdce6f89687.roa File: bf5ab5ca-3541-394f-b713-cbdce6f89687.roa (raw, json) Hash identifier: lAPjhuHq9HbSCwYNYLIue5gKwzIZEKkSeIaL2+1IT7k= Subject key identifier: 32:D7:2E:DC:A8:4B:76:3B:8F:0B:42:9C:17:CD:E1:E1:A2:9A:81:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49872E8C370CB7839DD75920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf5ab5ca-3541-394f-b713-cbdce6f89687.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.18.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:2e:8c:37:0c:b7:83:9d:d7:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e356304-e41a-4156-9614-6c807a01a306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:26:b3:92:36:53:6d:b5:aa:34:de:e3:53: 12:b4:1d:ee:96:88:a2:50:54:44:cf:6d:e7:48:98: 2d:c2:59:29:dd:03:08:28:11:33:be:fe:5f:a8:e6: c8:15:68:ab:af:db:6f:8d:c2:30:a4:61:42:c3:1b: 07:30:f6:14:f1:5f:e1:b0:2c:c5:a3:aa:dd:01:28: dd:23:c6:e6:94:46:71:df:83:ba:71:57:85:a6:f6: 0e:d4:13:a2:66:c2:14:8d:3f:5f:35:3c:80:4b:9e: 0f:4a:b0:8c:a6:99:71:da:8a:c9:6b:ba:df:34:55: 2b:52:39:2c:eb:49:9a:ad:78:02:a4:75:df:95:fb: 04:a3:d4:37:e5:9d:fd:8d:86:8a:af:62:ad:fb:8c: a6:60:58:1e:d0:f5:f7:79:6b:ad:f2:bc:cf:25:d1: b9:6d:13:34:48:2f:a8:ef:da:0a:f8:38:2e:65:10: 35:95:f3:3c:9f:82:92:7f:40:ab:0e:77:7f:b9:c6: 0c:ed:a1:8c:fe:e2:de:87:15:a1:a2:07:d7:a5:17: 54:56:e3:28:e0:9f:3e:af:63:72:9e:4b:f3:cf:75: 17:3a:b6:14:cc:80:6f:06:ac:bd:72:9f:16:48:8e: 00:10:b0:0d:ae:cc:4d:2f:c2:ac:3c:2b:be:6b:7b: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:2E:DC:A8:4B:76:3B:8F:0B:42:9C:17:CD:E1:E1:A2:9A:81:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf5ab5ca-3541-394f-b713-cbdce6f89687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:96:02:8a:a0:12:f1:d2:fb:86:74:ac:cb:e5:97:89:20:3c: 09:64:f9:e6:11:21:7a:66:92:69:55:5f:fb:4e:8f:bb:f3:10: 2f:4b:51:c1:79:81:78:82:48:97:47:bc:d9:58:38:27:5e:e4: 39:29:49:5b:79:4a:95:76:87:c0:89:78:b0:2d:c3:a8:e2:52: 68:d4:07:a4:86:51:11:72:18:3e:6a:f4:b2:ea:26:4a:f5:b9: f1:3c:bb:34:29:8f:c7:79:cb:e7:98:4f:d0:7b:31:9d:a1:7c: f5:ca:3c:3d:c2:19:8f:e3:46:c2:f1:b1:1f:c3:74:4f:eb:64: c0:f4:6e:6c:78:a2:0f:47:c3:2b:b6:d9:cd:30:e9:c9:f7:ec: 0c:39:2a:d8:80:35:51:54:9e:6e:4c:bd:cc:5f:2d:93:af:00: 9a:13:6d:3d:88:a6:3e:cf:d9:e4:b8:6b:4b:41:2c:53:ea:e2: 84:b3:d5:f3:af:7d:5e:89:67:fa:4d:a8:e1:00:73:64:76:e8: 58:0b:21:d1:6e:c8:87:b6:c1:ea:83:df:9f:eb:0d:48:9d:36: bf:40:e2:6f:da:ae:93:a6:a2:01:8b:22:8a:cc:e2:4c:c8:ee: 54:93:bf:fe:18:79:be:ef:e3:a0:ed:2d:c3:af:7f:75:83:f6: ac:14:2a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhy6MNwy3g53XWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGUzNTYzMDQtZTQxYS00MTU2LTk2MTQtNmM4MDdhMDFhMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkIms5I2U221qjTe41MStB3uloiiUFREz23n SJgtwlkp3QMIKBEzvv5fqObIFWirr9tvjcIwpGFCwxsHMPYU8V/hsCzFo6rdASjd I8bmlEZx34O6cVeFpvYO1BOiZsIUjT9fNTyAS54PSrCMpplx2orJa7rfNFUrUjks 60marXgCpHXflfsEo9Q35Z39jYaKr2Kt+4ymYFge0PX3eWut8rzPJdG5bRM0SC+o 79oK+DguZRA1lfM8n4KSf0CrDnd/ucYM7aGM/uLehxWhogfXpRdUVuMo4J8+r2Ny nkvzz3UXOrYUzIBvBqy9cp8WSI4AELANrsxNL8KsPCu+a3tp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLXLtyoS3Y7jwtCnBfN4eGimoFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmY1YWI1Y2EtMzU0MS0z OTRmLWI3MTMtY2JkY2U2Zjg5Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRIJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyWAoqgEvHS+4Z0rMvll4kgPAlk+eYRIXpmkmlVX/tOj7vzEC9LUcF5 gXiCSJdHvNlYOCde5DkpSVt5SpV2h8CJeLAtw6jiUmjUB6SGURFyGD5q9LLqJkr1 ufE8uzQpj8d5y+eYT9B7MZ2hfPXKPD3CGY/jRsLxsR/DdE/rZMD0bmx4og9Hwyu2 2c0w6cn37Aw5KtiANVFUnm5MvcxfLZOvAJoTbT2Ipj7P2eS4a0tBLFPq4oSz1fOv fV6JZ/pNqOEAc2R26FgLIdFuyIe2weqD35/rDUidNr9A4m/arpOmogGLIorM4kzI 7lSTv/4Yeb7v46DtLcOvf3WD9qwUKsc= -----END CERTIFICATE-----Generated at Mon Sep 28 04:29:54 2026 by rpki-client