$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa File: d0c7ee94-49ff-330d-9a7a-17b313c10913.roa (raw, json) Hash identifier: gk5JBupCg4fFmYEtTRk8bgR23Zuci8VXgOrzQ9SlVcQ= Subject key identifier: 59:A0:73:51:35:6E:4C:B8:0A:AD:53:F8:C6:49:08:88:28:80:B1:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497479EDFF2228D45825E480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:79:ed:ff:22:28:d4:58:25:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6914b01a-947c-4382-ad24-6ef85fbf1557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:2c:80:1e:92:d6:58:4c:d9:6f:73:af:ae: 35:6e:aa:ce:9c:17:0d:4d:2f:92:24:17:fb:fe:4c: 9c:51:db:06:51:0a:bd:21:5f:4d:08:f8:be:fe:1a: df:76:fc:d6:76:f4:34:2b:cb:1d:df:d0:82:20:22: 05:24:8f:0d:9b:93:9c:f4:f1:7b:23:c4:cb:f1:ac: 5c:18:ad:8e:ab:bd:17:1f:34:55:75:3f:ef:81:eb: c0:8e:4d:aa:9a:e3:ce:be:70:03:2f:4e:de:5e:3f: a7:e7:86:9c:75:da:d3:c4:07:fa:4e:91:73:36:5b: a8:8c:83:55:ea:dc:57:15:be:9e:b6:6c:9b:42:58: 97:d5:a4:f0:03:89:b4:a2:ed:96:67:ac:a3:ce:65: 7c:67:54:d5:94:03:b4:57:66:6d:f0:8d:8e:9d:3b: 0b:08:64:8c:55:64:9c:17:8d:82:84:6c:fd:a3:10: 41:42:53:d6:72:20:6b:4c:41:66:0a:f6:be:80:a0: a8:79:7a:0e:e1:a8:9e:64:ee:f3:23:fb:29:d3:df: f7:4f:40:ff:21:38:10:e2:97:91:4e:ad:c1:fc:a6: 56:0a:ca:6e:a7:16:06:97:9c:4d:a0:41:ec:0e:e5: ce:6e:d9:9a:78:87:67:78:90:4e:f2:70:09:a0:5b: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A0:73:51:35:6E:4C:B8:0A:AD:53:F8:C6:49:08:88:28:80:B1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:2f:c2:5c:95:d0:64:39:a6:93:9c:d1:cd:e1:af:6f:99: 51:e7:92:9d:8e:35:a1:f2:29:97:a7:20:3d:be:e6:6b:e6:35: 03:3c:98:10:8f:37:88:61:c2:30:a6:9e:3a:fc:84:04:e8:e6: 2f:1a:3d:2a:b0:51:65:c9:48:cb:fb:cb:79:4c:65:c8:0c:b2: aa:d3:f5:c3:4a:7d:14:83:10:6c:34:ea:9b:c6:a4:7f:63:b8: ad:af:73:7a:ea:52:2f:6f:10:14:c9:07:17:1b:c8:7d:8f:3f: 3c:74:62:ea:f2:31:f8:d4:4d:4a:93:ee:ae:95:3a:5a:ed:95: 92:37:ab:de:d5:33:de:12:f3:51:81:f0:c5:a9:5e:9b:ef:7b: e7:9b:49:27:3e:dc:ff:13:f4:9f:8d:05:33:f8:b7:35:7b:75: a6:22:aa:a5:e4:5d:0a:e2:9f:29:4e:f1:a7:14:10:66:d9:f3: da:0f:dd:8d:72:5d:b8:fa:89:60:7c:2b:81:b5:b2:63:a5:0a: c3:a8:49:39:14:24:38:b4:ac:a6:a7:4e:80:f3:97:01:fe:be: 0e:b8:39:1a:e5:4a:1c:81:3a:0c:2c:47:05:57:9c:ee:64:da: 76:ec:b6:a8:b6:ae:b2:51:6b:b6:cb:5a:b0:52:09:c9:89:d4: 30:da:62:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHnt/yIo1Fgl5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjkxNGIwMWEtOTQ3Yy00MzgyLWFkMjQtNmVmODVmYmYxNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0gsgB6S1lhM2W9zr641bqrOnBcNTS+SJBf7 /kycUdsGUQq9IV9NCPi+/hrfdvzWdvQ0K8sd39CCICIFJI8Nm5Oc9PF7I8TL8axc GK2Oq70XHzRVdT/vgevAjk2qmuPOvnADL07eXj+n54acddrTxAf6TpFzNluojINV 6txXFb6etmybQliX1aTwA4m0ou2WZ6yjzmV8Z1TVlAO0V2Zt8I2OnTsLCGSMVWSc F42ChGz9oxBBQlPWciBrTEFmCva+gKCoeXoO4aieZO7zI/sp09/3T0D/ITgQ4peR Tq3B/KZWCspupxYGl5xNoEHsDuXObtmaeIdneJBO8nAJoFvxZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmgc1E1bky4Cq1T+MZJCIgogLE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBjN2VlOTQtNDlmZi0z MzBkLTlhN2EtMTdiMzEzYzEwOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELHL8JcldBkOaaTnNHN4a9vmVHnkp2ONaHyKZenID2+5mvmNQM8mBCP N4hhwjCmnjr8hATo5i8aPSqwUWXJSMv7y3lMZcgMsqrT9cNKfRSDEGw06pvGpH9j uK2vc3rqUi9vEBTJBxcbyH2PPzx0YuryMfjUTUqT7q6VOlrtlZI3q97VM94S81GB 8MWpXpvve+ebSSc+3P8T9J+NBTP4tzV7daYiqqXkXQrinylO8acUEGbZ89oP3Y1y Xbj6iWB8K4G1smOlCsOoSTkUJDi0rKanToDzlwH+vg64ORrlShyBOgwsRwVXnO5k 2nbstqi2rrJRa7bLWrBSCcmJ1DDaYms= -----END CERTIFICATE-----Generated at Sat Sep 26 06:36:13 2026 by rpki-client