$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa File: ca1af946-2717-3844-93e9-437539eb99b4.roa (raw, json) Hash identifier: LTALnRrK/OXoxo0x4peMEB50uF1nNt/h+RczOuanm8k= Subject key identifier: 3D:3A:76:2E:8D:FA:B9:86:E7:4C:66:D8:45:93:57:8D:B5:CD:1B:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B9EB1347F1060F5165C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:9e:b1:34:7f:10:60:f5:16:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce43bfe7-1065-42f3-82eb-113ac5210755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:e0:06:d8:16:2c:1f:61:86:69:50:ae:e9: 54:55:3d:0f:d1:98:9d:b6:4a:0f:7a:8f:2f:8a:73: c6:41:b7:35:d1:49:d4:03:b6:6c:03:1c:70:5f:d5: 84:4c:7a:60:ac:8a:13:db:e2:ad:d9:6b:a0:ce:1b: 55:b5:ef:43:9b:8b:45:81:fd:67:b4:01:56:c6:4b: af:04:e8:b6:21:9e:38:90:45:5f:9e:70:09:0d:16: ea:33:6f:c1:6a:09:b5:98:3d:b7:78:36:11:d3:ef: be:c5:c2:01:4b:69:18:aa:77:f6:58:8a:30:5f:7d: 52:f8:99:db:a0:23:e3:e1:24:e6:b8:36:1a:b1:c6: f5:e8:da:98:f1:99:46:29:d4:9e:f7:3e:ff:41:f4: aa:dc:be:60:2b:92:b5:da:dd:79:56:ed:cc:22:c7: 87:ce:6d:c5:dc:85:2a:16:2b:a5:21:f5:b7:07:5a: 6c:6a:fd:fc:88:ca:7a:07:a0:2b:7c:09:c3:47:9d: 08:d9:31:68:0f:a1:ee:c0:24:d3:26:e1:f1:bc:20: 5f:48:77:51:59:79:29:69:4d:c8:0d:53:6a:cb:02: 13:c4:3f:1e:62:ee:2b:5a:09:9e:df:63:03:4d:2e: f2:77:52:cf:bd:2b:5f:43:ff:4b:d2:2f:a6:17:8c: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:76:2E:8D:FA:B9:86:E7:4C:66:D8:45:93:57:8D:B5:CD:1B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:c9:03:32:54:b9:7b:f1:64:ed:14:0a:59:9f:12:8b:98: 4c:bf:61:56:08:4b:c1:db:9c:1e:98:a4:6b:ee:30:70:04:15: 7a:af:bb:47:1e:04:26:9b:33:99:42:fb:ac:eb:d3:42:c9:4b: af:30:6a:e9:86:d0:ab:14:a2:f8:8d:36:2b:62:bc:33:c2:82: ff:90:24:d8:fd:dc:6a:27:20:72:6c:16:8a:2a:78:5c:05:f8: 0f:6a:a4:bd:05:54:c9:c9:30:d2:9c:a9:f8:4c:94:c6:bb:ae: 0c:51:cb:f3:2d:17:da:cb:94:46:a7:88:bc:17:3d:83:54:f1: 94:85:94:c9:68:d0:01:b8:b1:36:29:37:5b:71:3a:99:4c:04: a3:71:59:66:8d:e6:93:5f:2f:50:64:c5:1b:1a:ab:70:f1:70: b9:6a:59:39:d5:b3:c9:ed:22:8e:64:17:a2:90:de:00:87:c8: 08:25:24:b6:b4:a3:c2:eb:64:59:e8:0c:3d:48:55:67:88:1d: 8b:3e:9a:92:f5:bc:95:71:8e:d7:bf:18:e7:52:f9:e9:cb:5c: 39:33:f3:8d:25:a4:80:83:01:64:2f:17:dc:5f:ad:a1:bc:cf: 9d:d4:4a:de:5e:d6:ea:61:e9:e9:11:09:e2:5a:b2:0d:c4:bc: b5:16:b3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji56xNH8QYPUWXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U0M2JmZTctMTA2NS00MmYzLTgyZWItMTEzYWM1MjEwNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpzgBtgWLB9hhmlQrulUVT0P0ZidtkoPeo8v inPGQbc10UnUA7ZsAxxwX9WETHpgrIoT2+Kt2WugzhtVte9Dm4tFgf1ntAFWxkuv BOi2IZ44kEVfnnAJDRbqM2/Bagm1mD23eDYR0+++xcIBS2kYqnf2WIowX31S+Jnb oCPj4STmuDYascb16NqY8ZlGKdSe9z7/QfSq3L5gK5K12t15Vu3MIseHzm3F3IUq FiulIfW3B1psav38iMp6B6ArfAnDR50I2TFoD6HuwCTTJuHxvCBfSHdRWXkpaU3I DVNqywITxD8eYu4rWgme32MDTS7yd1LPvStfQ/9L0i+mF4xDEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD06di6N+rmG50xm2EWTV421zRsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ExYWY5NDYtMjcxNy0z ODQ0LTkzZTktNDM3NTM5ZWI5OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwIyQMyVLl78WTtFApZnxKLmEy/YVYIS8HbnB6YpGvuMHAEFXqvu0ce BCabM5lC+6zr00LJS68waumG0KsUoviNNitivDPCgv+QJNj93GonIHJsFooqeFwF +A9qpL0FVMnJMNKcqfhMlMa7rgxRy/MtF9rLlEaniLwXPYNU8ZSFlMlo0AG4sTYp N1txOplMBKNxWWaN5pNfL1BkxRsaq3DxcLlqWTnVs8ntIo5kF6KQ3gCHyAglJLa0 o8LrZFnoDD1IVWeIHYs+mpL1vJVxjte/GOdS+enLXDkz840lpICDAWQvF9xfraG8 z53USt5e1uph6ekRCeJasg3EvLUWszQ= -----END CERTIFICATE-----Generated at Sat Oct 3 08:15:28 2026 by rpki-client