$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5c63d4-9518-3a62-939b-befd647a32c3.roa File: eb5c63d4-9518-3a62-939b-befd647a32c3.roa (raw, json) Hash identifier: BbbdOQ0bc3UAcUufcKptd5VtKTr7NHSFu2V7x7GvRN0= Subject key identifier: AD:99:F9:BF:8B:7A:BC:48:F4:13:B8:37:F7:40:81:E2:D7:D6:B2:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F30528EF4A8E0DFD6B9007E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5c63d4-9518-3a62-939b-befd647a32c3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.16.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8e:f4:a8:e0:df:d6:b9:00:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=4834ae31-3b0b-4ea7-9314-6bf92991a236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:50:e9:d5:3c:63:a9:9b:98:4b:3c:6f:91: b2:2d:92:cb:03:c5:fd:e5:c1:55:87:bf:6f:59:82: 3c:a2:e3:7b:6e:7e:f0:6d:ed:f6:f3:77:75:03:0f: 15:64:a9:36:1a:e8:b3:00:2d:bf:52:b5:58:b1:e1: ee:e3:fa:c8:65:58:d6:40:92:d4:30:5e:5a:79:27: 49:ec:17:1e:24:16:1d:fe:d8:8c:f6:4e:e8:02:23: 45:c0:f8:38:53:64:d2:2a:71:b5:1b:a6:a1:96:e2: 79:fa:87:b8:d2:ef:0f:29:17:34:ce:e4:25:38:e2: 53:6c:9f:41:f3:d3:73:85:82:1d:cd:20:95:21:da: ef:e5:18:69:47:dd:72:c6:da:6f:4a:6c:50:3a:bd: d9:a0:69:10:fb:ec:8e:fb:a0:52:f9:af:30:77:a8: 12:16:4b:83:db:42:dd:06:bb:40:9d:e3:1c:15:89: ee:2d:dc:fc:41:43:38:ce:22:4b:ee:89:fd:1b:00: e6:9b:08:c6:df:8c:ce:b8:f3:19:18:1a:c0:c6:1d: 51:9e:e3:c4:ad:5b:5c:95:10:f8:15:11:3d:64:3c: 38:30:53:75:aa:f5:ae:8f:88:a4:41:ad:8d:1f:5d: 7b:56:22:d7:99:55:d1:20:4f:9f:a7:d0:02:68:df: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:F9:BF:8B:7A:BC:48:F4:13:B8:37:F7:40:81:E2:D7:D6:B2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5c63d4-9518-3a62-939b-befd647a32c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:78:1e:d7:03:f3:f2:b0:c3:4f:d6:5e:70:dc:42:8b:c1:ce: 5b:5d:aa:6c:84:d3:2a:e9:9b:25:bd:c9:94:35:72:8e:ba:eb: 56:fc:67:b9:e7:0b:c7:7b:d9:9b:03:e6:8c:6f:8e:c6:f9:2a: aa:dc:fb:a5:24:73:65:75:8c:43:85:c2:f8:b4:0e:aa:9b:aa: 1a:b7:0f:ac:72:84:4c:91:f9:d0:0b:99:8c:bc:76:cb:c5:5e: 03:86:a1:aa:f3:81:bf:a7:01:71:ca:14:37:81:45:df:3c:dc: 81:ee:8e:f6:8d:1a:ed:a0:93:ea:85:ab:6e:38:5e:fe:73:13: 95:69:aa:d3:37:83:45:03:1f:1e:0d:78:ee:a7:da:34:17:32: 3e:4a:5d:d8:4e:4d:cb:64:f0:6a:6e:88:5b:d2:17:d8:e4:76: 84:4b:a6:90:73:80:63:a6:5c:df:b0:e4:ab:5d:96:8b:fc:3b: 64:8f:be:1b:4b:a9:60:a7:79:33:49:fe:85:fe:84:92:47:57: 6c:34:9e:ec:a0:6d:99:a5:0a:22:e8:ba:8e:73:af:a5:f9:fb: 63:0a:bc:61:f5:31:df:04:1a:b6:18:08:8d:84:11:29:e2:90: 9e:d5:6d:85:b0:3b:05:b4:05:bb:48:ae:ce:45:a4:f1:93:51: 6a:fa:ce:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUo70qODf1rkAfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NDgzNGFlMzEtM2IwYi00ZWE3LTkzMTQtNmJmOTI5OTFhMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3hQ6dU8Y6mbmEs8b5GyLZLLA8X95cFVh79v WYI8ouN7bn7wbe3283d1Aw8VZKk2GuizAC2/UrVYseHu4/rIZVjWQJLUMF5aeSdJ 7BceJBYd/tiM9k7oAiNFwPg4U2TSKnG1G6ahluJ5+oe40u8PKRc0zuQlOOJTbJ9B 89NzhYIdzSCVIdrv5RhpR91yxtpvSmxQOr3ZoGkQ++yO+6BS+a8wd6gSFkuD20Ld BrtAneMcFYnuLdz8QUM4ziJL7on9GwDmmwjG34zOuPMZGBrAxh1RnuPErVtclRD4 FRE9ZDw4MFN1qvWuj4ikQa2NH117ViLXmVXRIE+fp9ACaN9WJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Z+b+LerxI9BO4N/dAgeLX1rL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI1YzYzZDQtOTUxOC0z YTYyLTkzOWItYmVmZDY0N2EzMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB4HtcD8/Kww0/WXnDcQovBzltdqmyE0yrpmyW9yZQ1co6661b8Z7nn C8d72ZsD5oxvjsb5Kqrc+6Ukc2V1jEOFwvi0Dqqbqhq3D6xyhEyR+dALmYy8dsvF XgOGoarzgb+nAXHKFDeBRd883IHujvaNGu2gk+qFq244Xv5zE5VpqtM3g0UDHx4N eO6n2jQXMj5KXdhOTctk8GpuiFvSF9jkdoRLppBzgGOmXN+w5Ktdlov8O2SPvhtL qWCneTNJ/oX+hJJHV2w0nuygbZmlCiLouo5zr6X5+2MKvGH1Md8EGrYYCI2EESni kJ7VbYWwOwW0BbtIrs5FpPGTUWr6zmw= -----END CERTIFICATE-----Generated at Tue Sep 22 19:43:47 2026 by rpki-client