$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec30087f-6810-31e6-852e-d9908c1d451f.roa File: ec30087f-6810-31e6-852e-d9908c1d451f.roa (raw, json) Hash identifier: Xm6rlChF56VCO5YJPYZFuXqiKvYuJwsoFDRmIZjivcI= Subject key identifier: 20:EC:62:10:FF:3E:FE:26:11:EA:B6:9D:90:07:C9:96:7F:65:F3:AE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2EED28B16DF42D101F804400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec30087f-6810-31e6-852e-d9908c1d451f.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.23.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:28:b1:6d:f4:2d:10:1f:80:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=c461a329-2429-42c0-a653-111f46960e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:64:5d:d9:a1:cb:db:b5:65:a7:85:65:28: 18:5f:81:10:d5:69:41:93:76:f5:5f:80:93:6c:1b: d8:f9:65:9e:cd:36:bd:05:0e:96:1d:72:20:4b:f2: 10:52:b1:99:81:33:31:7f:8c:61:a1:59:89:d0:32: e2:14:25:da:3a:81:e3:23:ac:87:4b:c7:f7:e4:0e: 1d:20:6b:4d:e2:90:83:83:3b:d0:4b:ef:da:04:8f: 40:80:7e:41:59:bc:b2:00:7d:a4:2f:ba:71:f1:ae: 64:66:a9:c1:43:21:2e:19:4c:1b:d0:ba:e1:27:09: 8f:10:a7:f1:99:f0:b4:54:50:89:ba:8d:10:1a:41: 73:93:c1:44:02:b4:02:42:4b:92:59:83:4f:6e:c0: 09:9b:97:88:42:af:f2:31:ad:3b:91:4b:c5:89:e9: e3:f2:c4:39:65:41:9b:cf:5d:c2:35:bd:d6:d0:da: 20:4e:99:8a:2a:79:e6:04:ea:b0:02:3d:f6:81:4e: 6d:c3:9d:ce:70:41:79:8b:9e:31:03:4a:94:c0:4c: 9b:1f:f8:d6:0d:84:f5:d7:2c:dc:de:d5:8f:35:37: fb:8c:e4:ad:b4:27:f6:fb:fb:96:b1:f0:75:3b:41: 0e:a5:43:d0:09:62:69:b8:48:65:ec:00:39:ff:27: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:62:10:FF:3E:FE:26:11:EA:B6:9D:90:07:C9:96:7F:65:F3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec30087f-6810-31e6-852e-d9908c1d451f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:63:e0:d1:7e:5b:a5:55:b1:24:e3:cf:19:bd:55:3f:c2: 26:07:5c:4c:4d:ba:d1:7a:52:35:f6:bd:5e:c8:7d:24:95:b4: 49:c4:3f:a4:d8:9a:c5:84:03:a5:55:27:a2:b2:f4:a4:c2:da: 2a:94:2f:66:e2:f2:15:04:36:53:27:11:c0:d4:7e:7d:36:af: a6:52:16:fe:8f:b1:9c:c7:f5:84:8a:b5:9f:83:aa:36:d7:b0: 23:b8:b0:59:a6:29:14:0f:14:58:90:10:fa:47:8f:d5:f9:cc: 16:ca:d7:c5:e4:60:54:a6:1c:6e:ed:0f:82:51:2a:07:f1:e9: a0:39:0c:7b:61:07:25:62:e9:38:09:23:46:96:d1:a5:d5:50: 1e:58:3d:84:23:05:21:b4:17:76:7a:58:34:0b:8a:0d:b5:f7: 3d:ce:31:5f:aa:90:76:ae:e6:94:32:ae:6a:5c:bd:c1:ed:6b: 6f:7a:8e:db:1b:39:c8:03:70:10:24:9c:7b:14:6e:b4:0e:8e: c0:20:03:51:ed:99:a2:b3:94:40:96:60:54:5f:57:2c:da:ff: bd:7d:d2:74:3f:f5:c5:fc:3f:f7:45:f2:92:ee:dc:74:90:0e: f8:5e:f8:d4:3f:47:c1:cb:99:41:48:07:db:bf:1b:97:d9:ea: 4a:ce:34:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SixbfQtEB+ARAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YzQ2MWEzMjktMjQyOS00MmMwLWE2NTMtMTExZjQ2OTYwZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51kXdmhy9u1ZaeFZSgYX4EQ1WlBk3b1X4CT bBvY+WWezTa9BQ6WHXIgS/IQUrGZgTMxf4xhoVmJ0DLiFCXaOoHjI6yHS8f35A4d IGtN4pCDgzvQS+/aBI9AgH5BWbyyAH2kL7px8a5kZqnBQyEuGUwb0LrhJwmPEKfx mfC0VFCJuo0QGkFzk8FEArQCQkuSWYNPbsAJm5eIQq/yMa07kUvFienj8sQ5ZUGb z13CNb3W0NogTpmKKnnmBOqwAj32gU5tw53OcEF5i54xA0qUwEybH/jWDYT11yzc 3tWPNTf7jOSttCf2+/uWsfB1O0EOpUPQCWJpuEhl7AA5/yc0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDsYhD/Pv4mEeq2nZAHyZZ/ZfOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWMzMDA4N2YtNjgxMC0z MWU2LTg1MmUtZDk5MDhjMWQ0NTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0tY+DRflulVbEk488ZvVU/wiYHXExNutF6UjX2vV7IfSSVtEnEP6TY msWEA6VVJ6Ky9KTC2iqUL2bi8hUENlMnEcDUfn02r6ZSFv6PsZzH9YSKtZ+DqjbX sCO4sFmmKRQPFFiQEPpHj9X5zBbK18XkYFSmHG7tD4JRKgfx6aA5DHthByVi6TgJ I0aW0aXVUB5YPYQjBSG0F3Z6WDQLig219z3OMV+qkHau5pQyrmpcvcHta296jtsb OcgDcBAknHsUbrQOjsAgA1HtmaKzlECWYFRfVyza/7190nQ/9cX8P/dF8pLu3HSQ Dvhe+NQ/R8HLmUFIB9u/G5fZ6krONP4= -----END CERTIFICATE-----Generated at Tue Sep 22 17:44:54 2026 by rpki-client