$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fde7b952-76dc-3610-a32a-055e4e55b0ef.roa File: fde7b952-76dc-3610-a32a-055e4e55b0ef.roa (raw, json) Hash identifier: oAbFWu01MMsDQqA0p6ho9y5TN3J8nbpdd3d87TFHiNU= Subject key identifier: 48:6D:5A:BB:A8:F6:2F:CA:BA:3F:97:1F:E4:EF:65:CF:80:B6:0B:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D30966925D1447FADBAB0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fde7b952-76dc-3610-a32a-055e4e55b0ef.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.22.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:30:96:69:25:d1:44:7f:ad:ba:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=cf12dcd0-698c-4455-88db-e364359b0bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:ad:eb:ab:e8:4d:cc:df:9c:f6:7d:87:25: fc:f1:7b:c2:58:8f:f6:05:5a:58:37:1e:8f:ba:4e: fe:b1:3c:68:8b:6e:b3:a5:48:86:2d:29:3a:c7:15: 40:34:34:23:14:53:ac:2e:d8:6d:6d:46:be:6b:aa: 8b:ab:5b:ca:2a:93:05:be:11:4b:8e:99:0b:50:6f: c5:c4:be:bf:6a:77:7f:23:6c:fd:5e:6a:7c:56:63: 71:7e:72:9a:b6:70:f8:fd:6c:f1:23:8a:a5:f7:be: 61:67:bb:3b:8f:fd:84:ad:74:60:f6:78:bc:eb:da: c5:1e:0b:2a:01:0d:c9:6b:d9:cc:f1:02:da:7a:32: 2c:63:9c:fa:e3:fb:b6:b8:d4:0a:e8:e1:92:fb:0b: dc:e0:79:14:b7:92:eb:79:38:69:4c:ae:a6:29:ac: 2f:59:f5:ff:df:2f:7c:21:76:1d:1b:61:e5:76:38: b6:cc:b2:e0:51:56:16:f7:3b:1f:fe:bb:1b:77:5d: 25:50:85:ef:7e:c5:8c:02:8c:ab:de:bc:e3:5b:11: 9b:18:f1:cb:33:56:6b:1b:eb:17:3d:b4:36:de:14: 75:81:7b:d4:65:e7:d0:a8:1b:b9:36:07:29:99:16: bc:e7:2c:ea:24:bc:a3:e6:c0:ca:fa:8c:3f:20:1b: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:5A:BB:A8:F6:2F:CA:BA:3F:97:1F:E4:EF:65:CF:80:B6:0B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fde7b952-76dc-3610-a32a-055e4e55b0ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:02:94:f8:30:6f:6a:b9:5a:56:17:94:82:26:d5:14:a6:a2: 7a:c3:22:fe:85:be:50:2f:d2:87:a7:b1:19:eb:c3:b2:f3:2c: 0e:0b:de:f7:91:a2:e4:b4:f9:58:16:06:e6:21:b9:62:1c:53: 9e:3a:56:87:7f:e4:d5:db:69:52:f6:86:b4:05:dd:2d:e0:4d: 81:04:f6:b8:0c:56:f6:43:9e:c1:ee:0d:30:e3:0f:31:ef:b5: 93:ba:63:2f:4c:9c:8e:22:36:a5:5d:96:0f:ae:ba:d9:80:6b: ab:20:c8:cb:fb:13:93:75:ef:37:cf:9e:09:41:33:ad:0b:cb: 18:fa:42:cb:c8:1a:87:76:27:ff:44:b2:16:a5:90:8a:49:b2: a0:fc:d6:fe:73:b7:a7:92:4d:02:f7:03:ea:12:5f:ac:c1:77: 5c:eb:6b:fc:34:1f:f6:ae:99:1a:77:c3:f9:7c:71:fc:f4:4b: a4:5a:09:34:dc:b0:da:e9:41:91:64:9e:61:7e:d6:08:b1:44: 8e:81:f6:cd:88:d2:7c:d5:cf:58:2f:1b:49:5a:ce:f0:63:86: eb:52:cc:44:b5:b0:64:48:1c:e4:15:bf:8a:28:67:b7:98:a4: 8d:ed:9d:b4:7a:b8:66:22:3d:3c:6d:a8:e8:cc:5e:1d:cb:09: df:c5:8f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHTCWaSXRRH+turAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk Y2YxMmRjZDAtNjk4Yy00NDU1LTg4ZGItZTM2NDM1OWIwYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kKt66voTczfnPZ9hyX88XvCWI/2BVpYNx6P uk7+sTxoi26zpUiGLSk6xxVANDQjFFOsLthtbUa+a6qLq1vKKpMFvhFLjpkLUG/F xL6/and/I2z9Xmp8VmNxfnKatnD4/WzxI4ql975hZ7s7j/2ErXRg9ni869rFHgsq AQ3Ja9nM8QLaejIsY5z64/u2uNQK6OGS+wvc4HkUt5LreThpTK6mKawvWfX/3y98 IXYdG2Hldji2zLLgUVYW9zsf/rsbd10lUIXvfsWMAoyr3rzjWxGbGPHLM1ZrG+sX PbQ23hR1gXvUZefQqBu5NgcpmRa85yzqJLyj5sDK+ow/IBtJuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhtWruo9i/Kuj+XH+TvZc+AtgtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmRlN2I5NTItNzZkYy0z NjEwLWEzMmEtMDU1ZTRlNTViMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcClPgwb2q5WlYXlIIm1RSmonrDIv6FvlAv0oensRnrw7LzLA4L3veR ouS0+VgWBuYhuWIcU546Vod/5NXbaVL2hrQF3S3gTYEE9rgMVvZDnsHuDTDjDzHv tZO6Yy9MnI4iNqVdlg+uutmAa6sgyMv7E5N17zfPnglBM60Lyxj6QsvIGod2J/9E shalkIpJsqD81v5zt6eSTQL3A+oSX6zBd1zra/w0H/aumRp3w/l8cfz0S6RaCTTc sNrpQZFknmF+1gixRI6B9s2I0nzVz1gvG0lazvBjhutSzES1sGRIHOQVv4ooZ7eY pI3tnbR6uGYiPTxtqOjMXh3LCd/Fj70= -----END CERTIFICATE-----Generated at Mon Sep 21 19:01:46 2026 by rpki-client