$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cef8ed70-a94c-3e34-9e1b-2286dbc2609a.roa File: cef8ed70-a94c-3e34-9e1b-2286dbc2609a.roa (raw, json) Hash identifier: OwVZs9cdEl3NrO9loea09sDrJdDN25h5ZjQUiFD7uaw= Subject key identifier: 24:9A:34:7C:EF:19:01:4F:D4:20:CF:B6:10:39:64:CE:41:70:F9:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F1E6878CB0060B60738CDD400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cef8ed70-a94c-3e34-9e1b-2286dbc2609a.roa Signing time: Wed 09 Sep 2026 15:00:12 +0000 ROA not before: Wed 09 Sep 2026 15:00:12 +0000 ROA not after: Tue 08 Dec 2026 16:00:12 +0000 asID: 19905 IP address blocks: 173.18.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:68:78:cb:00:60:b6:07:38:cd:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 9 15:00:12 2026 GMT Not After : Dec 8 16:00:12 2026 GMT Subject: CN=894d9a18-93b8-4daf-b1e6-b80753a123c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:43:cf:66:17:47:74:04:fb:7c:c9:67:11: 2c:80:21:60:21:29:b9:b2:18:86:93:3c:a5:d3:4b: 36:74:55:2c:1c:87:4a:ff:3a:ef:1b:93:a9:5b:37: ad:0e:c3:f3:d7:b0:b3:94:15:dc:22:06:d7:1e:db: d9:78:78:ea:67:cd:b5:64:c4:f4:f9:20:48:60:a9: 8c:34:de:80:26:33:be:f2:99:d3:2e:e9:b2:5f:c8: 0c:7f:1f:3e:c9:ca:6b:55:df:df:d9:5c:6d:1d:60: f6:f4:fb:b8:db:69:0b:5e:0c:17:4c:9d:89:7f:a4: 68:14:c9:11:83:6a:22:59:d3:50:90:9c:bb:aa:1f: 6e:34:a1:5f:57:6c:6f:7f:c2:6c:da:18:7e:39:1d: ed:c1:73:13:ac:b8:1d:0f:0b:20:dd:51:34:33:94: 68:67:08:a3:98:ff:ae:9d:40:e1:a3:60:dc:e5:17: c2:3b:f2:87:9d:31:5f:0f:fd:db:40:c4:00:a1:62: d1:8b:1d:f3:c2:6c:56:ef:87:06:0f:36:a0:8a:5b: a6:53:2e:28:a6:77:89:8c:88:e5:80:94:42:d5:45: 28:bc:9e:69:c5:26:82:0d:43:1a:c0:5b:9b:2f:de: db:80:19:4e:49:1f:7d:d3:2d:40:c1:1c:19:19:47: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:34:7C:EF:19:01:4F:D4:20:CF:B6:10:39:64:CE:41:70:F9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cef8ed70-a94c-3e34-9e1b-2286dbc2609a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ff:d0:27:5e:d0:cd:84:13:e8:b0:f2:f9:1b:bb:4f:e6:c5: 27:92:37:43:66:94:47:fc:c9:ed:37:5b:52:15:0e:ac:13:c7: 8c:b3:fb:02:4e:4d:2e:1b:36:a5:bd:b6:7f:3c:c0:fe:73:bd: 73:ba:b1:7a:c1:70:a3:b9:74:8e:17:a2:08:3e:46:3c:88:20: 43:6c:d4:15:bb:6b:84:20:11:00:8a:94:b8:5c:e1:42:ca:98: f1:b1:8a:72:2a:5a:fc:39:f5:18:fd:c4:30:fa:82:b9:7a:1d: 7c:44:5c:51:7a:ae:61:59:64:d9:66:24:e3:3f:55:e5:90:dc: ed:12:5a:37:38:20:fc:eb:7f:7c:87:fd:49:a1:5d:c4:79:8e: fe:09:59:34:c3:69:d8:f5:86:1d:eb:da:c1:b1:5c:cb:f2:a0: 60:27:40:6c:99:8c:46:bf:5c:9f:09:5a:c5:9d:b3:df:76:cc: 35:da:d6:de:28:fb:24:35:e2:fa:5b:6f:32:36:d7:54:dd:fa: e7:48:72:e1:e0:63:c1:7a:18:cf:c1:e8:31:0c:11:4f:f1:e8: 61:51:b6:cd:86:10:90:d2:39:a0:a4:33:4f:b1:b0:07:32:ca: 1f:30:87:91:47:af:56:ec:d2:1f:7f:8f:19:5e:86:e2:9c:0e: 82:e6:43:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eaHjLAGC2BzjN1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwOTE1MDAxMloXDTI2MTIwODE2MDAxMlowLzEtMCsGA1UEAxMk ODk0ZDlhMTgtOTNiOC00ZGFmLWIxZTYtYjgwNzUzYTEyM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ5Dz2YXR3QE+3zJZxEsgCFgISm5shiGkzyl 00s2dFUsHIdK/zrvG5OpWzetDsPz17CzlBXcIgbXHtvZeHjqZ821ZMT0+SBIYKmM NN6AJjO+8pnTLumyX8gMfx8+ycprVd/f2VxtHWD29Pu422kLXgwXTJ2Jf6RoFMkR g2oiWdNQkJy7qh9uNKFfV2xvf8Js2hh+OR3twXMTrLgdDwsg3VE0M5RoZwijmP+u nUDho2Dc5RfCO/KHnTFfD/3bQMQAoWLRix3zwmxW74cGDzagilumUy4opneJjIjl gJRC1UUovJ5pxSaCDUMawFubL97bgBlOSR990y1AwRwZGUeF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSaNHzvGQFP1CDPthA5ZM5BcPnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VmOGVkNzAtYTk0Yy0z ZTM0LTllMWItMjI4NmRiYzI2MDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv/0Cde0M2EE+iw8vkbu0/mxSeSN0NmlEf8ye03W1IVDqwTx4yz+wJO TS4bNqW9tn88wP5zvXO6sXrBcKO5dI4Xogg+RjyIIENs1BW7a4QgEQCKlLhc4ULK mPGxinIqWvw59Rj9xDD6grl6HXxEXFF6rmFZZNlmJOM/VeWQ3O0SWjc4IPzrf3yH /UmhXcR5jv4JWTTDadj1hh3r2sGxXMvyoGAnQGyZjEa/XJ8JWsWds992zDXa1t4o +yQ14vpbbzI211Td+udIcuHgY8F6GM/B6DEMEU/x6GFRts2GEJDSOaCkM0+xsAcy yh8wh5FHr1bs0h9/jxlehuKcDoLmQ3A= -----END CERTIFICATE-----Generated at Tue Sep 22 18:55:22 2026 by rpki-client