$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a39feac-74f4-3c91-aa98-f084d85ad71b.roa File: 1a39feac-74f4-3c91-aa98-f084d85ad71b.roa (raw, json) Hash identifier: BVUhK9qcIKQ59I+ogoHXKw8KazOXXeSzU+gmamRsEHQ= Subject key identifier: DC:B3:A6:5D:76:06:48:53:C2:D9:19:7D:D9:0C:DC:8E:19:55:6A:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD5B2CF165839A2733EFE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a39feac-74f4-3c91-aa98-f084d85ad71b.roa Signing time: Wed 14 Oct 2026 12:33:41 +0000 ROA not before: Wed 14 Oct 2026 12:33:41 +0000 ROA not after: Tue 12 Jan 2027 13:33:41 +0000 asID: 19905 IP address blocks: 173.18.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:b2:cf:16:58:39:a2:73:3e:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:33:41 2026 GMT Not After : Jan 12 13:33:41 2027 GMT Subject: CN=79681eb4-32f5-4c2f-b694-d0bf2b928cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:9a:fa:a5:4f:6d:75:2d:d5:4f:53:0a:3e: c6:88:12:1e:87:10:48:c4:24:ef:6d:f3:74:b9:eb: c9:83:dc:34:29:16:1b:de:b4:68:79:17:f7:15:ae: 3e:91:45:bb:b3:6b:e1:f2:b3:39:f9:e0:2c:d0:2c: 5f:e0:6e:4e:a2:c9:69:74:a1:7a:1f:52:d8:82:e5: 1f:87:6a:2e:3b:27:10:5e:f3:9c:17:c8:23:bf:67: 74:81:f5:d8:c8:6c:17:99:b9:b8:51:60:c4:70:0f: 1d:31:0e:7b:41:95:03:91:12:90:f5:2e:00:70:2e: 5a:c9:46:e9:49:a9:b2:1f:45:aa:6e:14:b1:7d:66: 95:cf:0b:64:7c:10:41:27:b2:1c:7e:c6:16:4b:60: f0:f3:82:a0:c7:70:0b:e9:19:33:b4:90:48:20:0c: cd:a0:cc:43:41:e0:d1:1c:44:5c:b4:b1:84:cc:01: cc:66:10:ec:a0:e7:a8:69:5f:c7:48:a0:94:39:f4: 24:99:a6:bd:6e:92:c7:ef:24:00:45:0d:2f:bc:48: 20:9c:71:ca:e3:26:c2:5e:ff:00:7d:97:5b:97:ce: 42:c4:68:b0:83:a8:86:19:0d:1a:43:6c:ac:e8:84: 49:23:2a:e6:25:58:16:80:9d:23:83:d0:39:be:f2: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B3:A6:5D:76:06:48:53:C2:D9:19:7D:D9:0C:DC:8E:19:55:6A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a39feac-74f4-3c91-aa98-f084d85ad71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a7:0a:8b:2e:e9:dc:19:4a:70:97:5a:e8:81:b8:4b:46:38: f9:d0:d4:5e:29:b7:55:d0:8e:ad:be:a5:89:23:84:ef:a9:56: 46:9b:38:49:6b:cd:c3:29:04:54:a6:dc:04:9f:1c:0b:27:e1: 2f:cc:9a:1b:c8:4c:b1:15:5d:1b:c3:e2:ce:7b:fc:2e:94:78: ff:18:9c:e7:30:85:9e:be:d7:01:c9:77:4a:7f:46:cb:59:15: 87:e8:0b:ea:0f:a0:be:92:fb:b3:b8:bd:a5:80:f5:7d:54:d2: 23:39:ed:8e:cb:29:87:b7:c9:5c:5f:7a:63:47:6d:f9:7a:c7: 25:81:19:64:10:e6:8c:fb:30:9b:a0:7d:52:33:87:97:3a:fb: 3a:1a:5b:71:76:33:8c:2b:44:3e:5d:d9:ee:d0:c6:71:60:8b: 89:9e:01:59:08:e2:ab:c0:b8:6a:b2:6e:17:96:e8:6e:21:2c: bf:79:8b:a2:b2:83:ca:89:db:7b:31:7c:48:6b:50:d9:36:f7: 61:ac:24:d7:ce:92:fc:bb:1e:b1:1d:4d:31:bb:b6:4a:f0:95: 1d:d9:62:ff:b5:4e:36:1a:bf:bb:c4:49:dd:67:cc:cb:ce:21: 7f:bf:d5:e8:65:83:a9:6e:8a:1f:9c:29:10:91:5d:b1:2f:f9: c9:f9:87:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1bLPFlg5onM+/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzM0MVoXDTI3MDExMjEzMzM0MVowLzEtMCsGA1UEAxMk Nzk2ODFlYjQtMzJmNS00YzJmLWI2OTQtZDBiZjJiOTI4Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCa+qVPbXUt1U9TCj7GiBIehxBIxCTvbfN0 uevJg9w0KRYb3rRoeRf3Fa4+kUW7s2vh8rM5+eAs0Cxf4G5OoslpdKF6H1LYguUf h2ouOycQXvOcF8gjv2d0gfXYyGwXmbm4UWDEcA8dMQ57QZUDkRKQ9S4AcC5ayUbp SamyH0WqbhSxfWaVzwtkfBBBJ7IcfsYWS2Dw84Kgx3AL6RkztJBIIAzNoMxDQeDR HERctLGEzAHMZhDsoOeoaV/HSKCUOfQkmaa9bpLH7yQARQ0vvEggnHHK4ybCXv8A fZdbl85CxGiwg6iGGQ0aQ2ys6IRJIyrmJVgWgJ0jg9A5vvK0SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyzpl12BkhTwtkZfdkM3I4ZVWr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWEzOWZlYWMtNzRmNC0z YzkxLWFhOTgtZjA4NGQ4NWFkNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqnCosu6dwZSnCXWuiBuEtGOPnQ1F4pt1XQjq2+pYkjhO+pVkabOElr zcMpBFSm3ASfHAsn4S/MmhvITLEVXRvD4s57/C6UeP8YnOcwhZ6+1wHJd0p/RstZ FYfoC+oPoL6S+7O4vaWA9X1U0iM57Y7LKYe3yVxfemNHbfl6xyWBGWQQ5oz7MJug fVIzh5c6+zoaW3F2M4wrRD5d2e7QxnFgi4meAVkI4qvAuGqybheW6G4hLL95i6Ky g8qJ23sxfEhrUNk292GsJNfOkvy7HrEdTTG7tkrwlR3ZYv+1TjYav7vESd1nzMvO IX+/1ehlg6luih+cKRCRXbEv+cn5h3g= -----END CERTIFICATE-----Generated at Thu Oct 15 12:36:34 2026 by rpki-client