$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa File: d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa (raw, json) Hash identifier: nw3tzf72hzRedmX1yoOPxz1cr9ocw324V9tBVRNZ6TA= Subject key identifier: FF:09:BF:58:05:2D:AE:58:C8:CE:10:9A:85:9D:86:28:93:62:A7:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972EB6A55DB4400F67E1BC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:eb:6a:55:db:44:00:f6:7e:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d1d183c-ac2b-4790-a9bc-73552adfefcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:5e:16:d0:08:de:49:17:e0:05:6b:dc:35: 09:34:08:6b:d9:a4:f8:b9:b3:e2:64:8e:d2:4c:0b: d3:f8:8a:93:8b:69:85:be:bf:e0:03:cc:df:7e:2a: 7b:11:b6:95:07:d7:9a:74:bd:27:81:f0:aa:c6:20: 3d:c3:ba:43:93:f0:96:9c:59:32:ab:4d:52:8b:b2: 30:88:27:4c:da:1f:c2:36:fa:24:7e:53:69:56:19: dd:b5:a8:a7:0c:cd:b6:2b:fe:91:60:e6:dd:e1:a6: 32:ec:fa:cf:e5:ea:69:39:a5:b6:83:f5:b2:91:39: b8:52:16:c4:f6:fe:dd:21:4b:a1:91:a3:37:f5:32: 84:a2:6c:79:22:55:63:cb:49:01:9d:af:05:bc:0e: f1:60:de:fd:35:a0:26:07:d5:6c:97:21:a5:95:54: d6:3a:c6:bf:33:99:e2:82:0f:d2:d8:0e:e0:88:1a: de:19:ec:41:21:aa:31:34:6f:99:ce:bb:cf:12:e3: 5c:f9:0d:0f:b7:ab:2a:ac:a2:9c:4a:82:cb:74:0b: 26:b1:4b:e7:0c:eb:ce:4c:71:24:45:35:66:e7:94: a9:81:ea:dc:07:24:33:95:15:4a:42:5d:b3:a2:4c: 35:1c:d1:64:8f:c7:dc:30:02:78:a4:d9:6e:15:38: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:09:BF:58:05:2D:AE:58:C8:CE:10:9A:85:9D:86:28:93:62:A7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:89:2b:71:d7:dc:eb:38:fb:45:cd:12:c4:30:62:a5:71:a5: c0:5b:e2:24:e7:95:bb:e2:83:c3:69:f7:b5:b8:b2:2a:b1:c3: 5c:41:95:95:dd:89:b6:b2:03:43:aa:0f:a0:3e:4c:19:ff:f1: a6:04:48:ec:d0:b4:46:59:d6:59:e1:c7:96:f9:42:d7:c0:30: 75:65:17:87:c9:be:f8:0c:a4:dd:1d:a6:2c:65:33:43:12:04: 67:9e:90:13:10:fa:2f:cf:d6:d0:12:22:61:e8:0a:bd:28:11: 07:fc:eb:59:d6:3c:a9:9d:43:60:0e:cf:7c:c6:11:ee:f7:d5: ab:44:19:39:89:67:76:28:f1:c2:77:01:8d:f2:fd:cb:14:04: df:65:d8:62:f1:91:6a:cc:c9:f2:ef:58:8e:2e:56:85:7f:b2: 4a:5f:31:12:aa:1b:af:d4:3b:1a:18:ac:b2:1d:bf:c3:b1:b7: 5f:76:6f:91:a8:99:df:3b:44:0b:48:cf:47:38:30:3d:5b:a7: 98:7d:c2:d6:09:22:25:15:d1:b1:f1:48:95:e7:38:0f:0c:85: 2a:4d:d3:bd:b7:88:9c:be:af:41:c9:3b:02:73:80:60:3c:58: bc:4d:85:84:e1:8f:70:f7:ca:bc:10:12:28:ff:68:99:83:26: 74:24:0d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcutqVdtEAPZ+G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQxZDE4M2MtYWMyYi00NzkwLWE5YmMtNzM1NTJhZGZlZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJleFtAI3kkX4AVr3DUJNAhr2aT4ubPiZI7S TAvT+IqTi2mFvr/gA8zffip7EbaVB9eadL0ngfCqxiA9w7pDk/CWnFkyq01Si7Iw iCdM2h/CNvokflNpVhndtainDM22K/6RYObd4aYy7PrP5eppOaW2g/WykTm4UhbE 9v7dIUuhkaM39TKEomx5IlVjy0kBna8FvA7xYN79NaAmB9VslyGllVTWOsa/M5ni gg/S2A7giBreGexBIaoxNG+ZzrvPEuNc+Q0Pt6sqrKKcSoLLdAsmsUvnDOvOTHEk RTVm55SpgercByQzlRVKQl2zokw1HNFkj8fcMAJ4pNluFTgW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8Jv1gFLa5YyM4QmoWdhiiTYqexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhMWY4YzktNWJiNy0z OTk4LWI1MmMtMDhkODg1ZGMwOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiJK3HX3Os4+0XNEsQwYqVxpcBb4iTnlbvig8Np97W4siqxw1xBlZXd ibayA0OqD6A+TBn/8aYESOzQtEZZ1lnhx5b5QtfAMHVlF4fJvvgMpN0dpixlM0MS BGeekBMQ+i/P1tASImHoCr0oEQf861nWPKmdQ2AOz3zGEe731atEGTmJZ3Yo8cJ3 AY3y/csUBN9l2GLxkWrMyfLvWI4uVoV/skpfMRKqG6/UOxoYrLIdv8Oxt192b5Go md87RAtIz0c4MD1bp5h9wtYJIiUV0bHxSJXnOA8MhSpN0723iJy+r0HJOwJzgGA8 WLxNhYThj3D3yrwQEij/aJmDJnQkDQY= -----END CERTIFICATE-----Generated at Sun Sep 27 11:04:04 2026 by rpki-client