$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c333e04f-cca0-3889-9e48-214b0eaa3958.roa File: c333e04f-cca0-3889-9e48-214b0eaa3958.roa (raw, json) Hash identifier: dSMesE2H+TBIeG2yIHFtvxuI7QKkld3qnHIWa9CAtdI= Subject key identifier: 51:34:66:E0:4A:86:C2:76:7E:41:46:42:B7:21:DF:55:4F:CD:90:8B Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F13024BBB26515C1299DF1700 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c333e04f-cca0-3889-9e48-214b0eaa3958.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 6325 IP address blocks: 72.3.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4b:bb:26:51:5c:12:99:df:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=e3a58340-d364-4b01-90e8-2ab152c78fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:ce:99:35:9e:dd:cd:dd:24:ba:5b:5d:23: e1:1d:54:8e:e7:a6:ba:f6:d3:57:f4:f1:aa:cc:e3: cf:41:a3:04:70:67:16:e1:ba:cc:2b:7f:7b:2c:e3: 34:75:c1:ef:5e:f1:ed:9a:8e:25:e8:e7:67:3d:8b: 4b:b1:7e:97:9b:6b:d2:2e:a3:1d:af:09:39:98:81: 22:2e:49:96:45:51:8a:6a:1a:e6:36:0a:0b:3b:78: 93:ec:32:6b:c0:70:91:0e:e6:69:0c:c5:5b:a5:b3: 93:03:3d:46:fa:48:a2:75:66:b5:03:0c:df:ed:bd: 19:d0:13:f2:11:73:0b:5f:a0:a0:af:1d:0a:8c:c8: a6:e0:fc:89:70:f4:95:fb:23:28:1e:2a:66:f6:11: ca:58:f4:f8:6e:03:45:4b:af:a7:6e:c9:21:84:3a: 98:a1:04:1c:d1:13:cb:ca:78:a5:0c:30:fa:b9:5a: 77:d3:fb:8c:35:df:95:70:f2:8a:18:11:2d:fe:ee: 9b:71:2b:27:ad:55:1e:3d:f3:95:d8:1b:c4:c6:cf: 46:b8:1b:bb:00:3a:0b:dd:92:cb:57:4d:57:2d:86: 66:ab:64:71:78:4e:b6:f8:76:8a:f4:71:42:dc:e9: 5a:f9:64:8b:97:4f:86:6b:c6:2d:c6:b4:de:7f:26: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:34:66:E0:4A:86:C2:76:7E:41:46:42:B7:21:DF:55:4F:CD:90:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c333e04f-cca0-3889-9e48-214b0eaa3958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 72.3.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:22:5d:49:f4:cc:b1:05:a2:34:2d:7e:ef:1a:ba:b6:a6:f6: 2e:88:21:81:8e:8a:1c:09:2e:02:14:1f:f4:5b:bb:0d:5c:2c: b6:da:82:75:63:59:ab:94:86:f3:f4:29:ac:86:45:19:39:8e: fa:3a:95:91:32:bf:a1:c3:27:d7:96:27:cc:6d:34:ea:41:99: aa:71:ff:4f:c1:03:20:0b:58:91:67:c3:e2:c0:95:1c:ce:bd: 74:3c:2f:f3:7b:2e:e7:b6:40:89:90:fa:a2:84:68:b5:a6:a8: 6d:fb:0d:85:09:ec:74:d1:b9:de:51:a1:d0:24:ea:36:4d:0a: 67:e1:e0:fc:f2:4e:e5:4a:6f:d8:52:d0:32:fc:1b:b1:9b:80: b0:09:47:d6:83:ee:4f:41:33:6c:d5:23:c0:94:d5:73:13:ee: 82:e5:53:b8:af:91:bc:0e:80:31:02:04:b5:a3:29:72:a7:96: 89:a6:52:a4:d8:76:b6:d3:5b:17:4c:72:85:ff:e0:b0:7a:21: 4c:eb:55:ff:01:99:04:19:80:72:ce:06:d6:d4:6b:53:a4:4c: d2:f1:ea:06:1d:2f:57:4c:cc:9c:bc:7a:33:e0:1b:b7:b5:9a: b5:c8:75:52:a4:0c:e5:6f:73:8c:c0:b6:f4:ad:12:fd:af:ef: f4:b7:b6:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAku7JlFcEpnfFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTNhNTgzNDAtZDM2NC00YjAxLTkwZTgtMmFiMTUyYzc4ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcLOmTWe3c3dJLpbXSPhHVSO56a69tNX9PGq zOPPQaMEcGcW4brMK397LOM0dcHvXvHtmo4l6OdnPYtLsX6Xm2vSLqMdrwk5mIEi LkmWRVGKahrmNgoLO3iT7DJrwHCRDuZpDMVbpbOTAz1G+kiidWa1Awzf7b0Z0BPy EXMLX6Cgrx0KjMim4PyJcPSV+yMoHipm9hHKWPT4bgNFS6+nbskhhDqYoQQc0RPL ynilDDD6uVp30/uMNd+VcPKKGBEt/u6bcSsnrVUePfOV2BvExs9GuBu7ADoL3ZLL V01XLYZmq2RxeE62+HaK9HFC3Ola+WSLl0+Ga8YtxrTefyZMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE0ZuBKhsJ2fkFGQrch31VPzZCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvYzMzM2UwNGYtY2NhMC0z ODg5LTllNDgtMjE0YjBlYWEzOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSAMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUiXUn0zLEFojQtfu8auram9i6IIYGOihwJLgIUH/Rbuw1cLLbagnVj WauUhvP0KayGRRk5jvo6lZEyv6HDJ9eWJ8xtNOpBmapx/0/BAyALWJFnw+LAlRzO vXQ8L/N7Lue2QImQ+qKEaLWmqG37DYUJ7HTRud5RodAk6jZNCmfh4PzyTuVKb9hS 0DL8G7GbgLAJR9aD7k9BM2zVI8CU1XMT7oLlU7ivkbwOgDECBLWjKXKnlommUqTY drbTWxdMcoX/4LB6IUzrVf8BmQQZgHLOBtbUa1OkTNLx6gYdL1dMzJy8ejPgG7e1 mrXIdVKkDOVvc4zAtvStEv2v7/S3ttI= -----END CERTIFICATE-----Generated at Tue Sep 22 22:46:38 2026 by rpki-client