$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa File: d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa (raw, json) Hash identifier: 7gCq0yo84bMsjIN8cgmboElgkzIZY9ZdoAzhKC+VGpg= Subject key identifier: 2E:BD:97:92:15:F0:75:F5:90:49:0A:CE:E1:DF:12:B6:58:6E:F2:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EE7BC99E1EBC0ABC2A3722CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:99:e1:eb:c0:ab:c2:a3:72:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=05e4a46c-1141-4ae2-a021-39c75838b2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:67:6e:eb:3d:50:0d:f4:73:65:91:1a:69: 3d:7d:c7:b9:f6:e8:0e:f9:ca:ee:b2:27:5b:ec:b4: 48:c1:1b:ac:a0:b8:17:0d:b5:de:aa:9b:1f:63:f4: 5b:06:0f:b4:0f:ea:c0:91:3d:cf:f1:e2:3e:09:f9: 39:93:25:85:36:c6:36:ac:dd:a8:88:8c:91:5d:24: 9c:b5:56:98:4b:70:01:67:6f:42:ea:7f:83:64:d5: 01:50:55:1a:31:ca:42:25:a9:f8:17:5b:1f:74:80: 5a:f4:82:28:2f:86:89:32:69:b6:67:14:05:b4:37: 1a:65:59:92:58:01:f6:f7:c5:f6:bb:66:f6:5a:fd: 24:64:06:85:ef:eb:2c:55:2b:09:be:ac:2d:49:3f: 82:a2:78:76:96:55:b1:22:c5:c9:af:8c:55:00:01: ab:0d:8f:b2:c6:01:6c:55:82:6c:9b:e6:b4:d5:95: 91:bf:99:3d:6e:54:3b:bd:d7:26:8b:08:3c:84:a8: 46:be:f3:f6:4f:33:9c:89:dd:55:3c:e9:7c:64:44: a8:97:88:a2:d0:45:71:e4:84:2a:15:69:8c:ec:3d: 85:72:42:a8:f0:71:48:bd:05:4b:fe:16:d0:90:80: b5:95:bc:6a:4d:23:6f:cf:b1:78:1b:b1:2b:0e:16: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:97:92:15:F0:75:F5:90:49:0A:CE:E1:DF:12:B6:58:6E:F2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:55:19:59:2b:fa:3b:18:d8:d5:a4:36:ea:97:6e:61:82:04: b0:85:dc:2e:15:07:1a:85:96:d0:7b:f7:f2:0e:6c:f0:5c:14: 7b:b9:90:59:28:25:7a:04:71:48:05:c8:2c:44:0b:b6:22:21: 6a:62:76:a4:24:63:76:b2:ca:34:9b:ba:c1:95:70:6a:97:d6: 73:ce:cd:09:cb:19:80:b2:67:a4:1c:5e:7c:eb:75:3b:b1:46: 8e:11:0c:86:f9:cf:40:ba:4c:57:b8:d5:41:5c:f7:2c:af:ad: 77:bd:c3:0e:02:e6:1d:56:56:28:1d:17:c9:6d:39:0e:d1:e5: b5:16:b1:8c:80:71:a6:67:9e:01:c7:8b:b6:b3:4e:a0:c8:af: d7:2d:65:3e:97:ad:21:5a:83:e5:22:81:bf:d7:a4:0e:e7:b6: f0:be:84:ae:2e:48:58:7b:c9:c2:63:b6:8b:35:3e:bb:7d:71: 8c:8b:ea:17:7d:ea:96:c5:97:00:f2:4c:90:57:27:40:79:0e: ab:3d:bd:cb:53:c4:b7:66:06:3c:ab:d2:eb:e2:ef:bf:31:b5: ad:f0:17:7e:22:d5:d7:4c:01:7f:07:41:3d:db:8f:e2:fd:c1: 36:0a:90:26:b3:39:f5:4f:13:0a:b2:30:fc:6c:5b:9c:23:89: 62:52:85:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJnh68CrwqNyLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MDVlNGE0NmMtMTE0MS00YWUyLWEwMjEtMzljNzU4MzhiMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk5nbus9UA30c2WRGmk9fce59ugO+crusidb 7LRIwRusoLgXDbXeqpsfY/RbBg+0D+rAkT3P8eI+Cfk5kyWFNsY2rN2oiIyRXSSc tVaYS3ABZ29C6n+DZNUBUFUaMcpCJan4F1sfdIBa9IIoL4aJMmm2ZxQFtDcaZVmS WAH298X2u2b2Wv0kZAaF7+ssVSsJvqwtST+Conh2llWxIsXJr4xVAAGrDY+yxgFs VYJsm+a01ZWRv5k9blQ7vdcmiwg8hKhGvvP2TzOcid1VPOl8ZESol4ii0EVx5IQq FWmM7D2FckKo8HFIvQVL/hbQkIC1lbxqTSNvz7F4G7ErDhZuVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC69l5IV8HX1kEkKzuHfErZYbvLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQxOGUzMTItODFiMC0z MGEyLWI3YWItNzVlOGQyMGJlM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5VGVkr+jsY2NWkNuqXbmGCBLCF3C4VBxqFltB79/IObPBcFHu5kFko JXoEcUgFyCxEC7YiIWpidqQkY3ayyjSbusGVcGqX1nPOzQnLGYCyZ6QcXnzrdTux Ro4RDIb5z0C6TFe41UFc9yyvrXe9ww4C5h1WVigdF8ltOQ7R5bUWsYyAcaZnngHH i7azTqDIr9ctZT6XrSFag+Uigb/XpA7ntvC+hK4uSFh7ycJjtos1Prt9cYyL6hd9 6pbFlwDyTJBXJ0B5Dqs9vctTxLdmBjyr0uvi778xta3wF34i1ddMAX8HQT3bj+L9 wTYKkCazOfVPEwqyMPxsW5wjiWJShUE= -----END CERTIFICATE-----Generated at Tue Sep 22 05:06:07 2026 by rpki-client