$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa File: c96c5406-8b97-31a7-8a54-08bf06befd12.roa (raw, json) Hash identifier: GS3ukh55zWAQfdEPX60f9gFrtX1p3dSGZNQSd3eFKm0= Subject key identifier: C3:32:30:14:51:8A:48:9C:48:BC:AA:0C:3E:79:0E:33:CA:4B:29:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0AA22BB21D9AD456165F0200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2b:b2:1d:9a:d4:56:16:5f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=3e9f4f56-4cfb-4400-abbe-6d97ed94e327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:73:73:c5:6a:82:33:88:d7:e1:81:1b:4b: 53:b5:07:da:5e:ed:cd:e1:fa:e7:4c:16:b5:db:65: 45:15:7b:69:cf:d9:f7:6e:ef:b3:f4:f4:17:db:de: 19:51:9d:0c:0a:4b:51:81:a1:76:f6:fa:8f:e1:cd: 04:ee:18:0f:f6:c8:4e:fa:d8:1c:51:24:25:8a:9e: 80:ef:67:b5:1c:d7:c1:64:e9:f2:ec:36:34:73:f3: 1f:9b:8c:c7:c2:78:3b:1d:da:f3:48:2b:da:8b:21: bd:2f:bb:4b:b8:78:94:3f:e9:3c:bb:c7:27:11:e6: 03:e8:7d:c7:77:5b:5f:0d:0a:49:0c:8f:a5:2c:23: cf:6f:9b:00:1d:36:fe:10:cb:fb:fe:f8:9e:db:c8: 3a:54:2a:8d:6f:ec:24:cb:f8:2b:40:72:94:27:a2: 7c:bb:54:b6:b5:64:b4:b0:5c:62:de:64:d7:0c:16: 88:1c:d8:95:0a:d3:10:a0:30:58:ee:47:a2:a8:7b: fe:49:ae:a7:27:f6:2f:96:b0:06:2c:c2:e4:9f:df: 1b:4e:fb:a0:b4:eb:87:0a:fc:a6:97:1f:62:35:ee: 0e:de:1d:b8:08:00:75:1c:a3:74:8b:9f:49:55:ed: 9a:c9:92:d5:8a:b5:bc:3c:4d:d1:3a:12:a2:5f:18: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:32:30:14:51:8A:48:9C:48:BC:AA:0C:3E:79:0E:33:CA:4B:29:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:17:7c:8f:d0:26:a5:6b:5b:ec:d5:bb:35:bd:5a:68:ae:84: 85:8b:c1:47:49:b9:6b:bd:a2:e4:dd:85:f6:7d:db:6b:fb:8a: e1:a0:e9:d5:58:45:bb:fa:3b:b4:0b:7a:19:6a:e5:fa:9a:5e: da:1a:7b:f1:33:c5:48:72:50:84:80:fc:77:7b:81:bc:5b:18: 38:58:b6:f6:9b:80:ba:67:97:2c:dd:fc:86:f7:8a:df:fb:aa: 2a:26:a8:fd:78:5a:ad:d6:e7:70:46:85:39:69:54:3c:11:21: 9e:54:c7:6c:08:d0:1c:b1:77:e1:f2:43:6d:1a:39:e7:e5:fb: fc:65:80:94:8f:36:25:a9:c9:d3:a1:a9:b2:a5:ea:6c:9b:b4: be:6e:fe:0e:74:cb:b3:92:0d:da:f7:aa:05:b8:dc:0b:7b:99: db:85:07:32:b1:78:06:c4:94:84:ea:b1:28:93:14:6d:4a:48: d1:80:24:af:56:ce:8a:7c:db:fe:07:cb:8e:1b:d4:a0:d1:bc: 28:e9:62:74:af:ca:f2:02:fb:b7:b0:9f:d5:f3:68:aa:90:0b: 32:90:24:43:a1:54:c1:c3:29:48:3e:bb:27:fc:a6:d2:e9:f2: 1d:57:99:8b:d8:71:a1:e3:27:3c:88:c8:13:ef:9d:ee:26:79: 0a:00:26:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiuyHZrUVhZfAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk M2U5ZjRmNTYtNGNmYi00NDAwLWFiYmUtNmQ5N2VkOTRlMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpFzc8VqgjOI1+GBG0tTtQfaXu3N4frnTBa1 22VFFXtpz9n3bu+z9PQX294ZUZ0MCktRgaF29vqP4c0E7hgP9shO+tgcUSQlip6A 72e1HNfBZOny7DY0c/Mfm4zHwng7HdrzSCvaiyG9L7tLuHiUP+k8u8cnEeYD6H3H d1tfDQpJDI+lLCPPb5sAHTb+EMv7/vie28g6VCqNb+wky/grQHKUJ6J8u1S2tWS0 sFxi3mTXDBaIHNiVCtMQoDBY7keiqHv+Sa6nJ/YvlrAGLMLkn98bTvugtOuHCvym lx9iNe4O3h24CAB1HKN0i59JVe2ayZLVirW8PE3ROhKiXxjP8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMyMBRRikicSLyqDD55DjPKSylAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk2YzU0MDYtOGI5Ny0z MWE3LThhNTQtMDhiZjA2YmVmZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIXfI/QJqVrW+zVuzW9WmiuhIWLwUdJuWu9ouTdhfZ922v7iuGg6dVY Rbv6O7QLehlq5fqaXtoae/EzxUhyUISA/Hd7gbxbGDhYtvabgLpnlyzd/Ib3it/7 qiomqP14Wq3W53BGhTlpVDwRIZ5Ux2wI0Byxd+HyQ20aOefl+/xlgJSPNiWpydOh qbKl6mybtL5u/g50y7OSDdr3qgW43At7mduFBzKxeAbElITqsSiTFG1KSNGAJK9W zop82/4Hy44b1KDRvCjpYnSvyvIC+7ewn9XzaKqQCzKQJEOhVMHDKUg+uyf8ptLp 8h1XmYvYcaHjJzyIyBPvne4meQoAJsI= -----END CERTIFICATE-----Generated at Fri Sep 25 19:48:33 2026 by rpki-client