$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/395c28a4-6a56-366d-b46f-25be7dbac657.roa File: 395c28a4-6a56-366d-b46f-25be7dbac657.roa (raw, json) Hash identifier: R6B5PM9hClqi9SUf2dT/+L3ryYgqg8MBf7CM0xPqvZc= Subject key identifier: 46:CF:9E:99:FB:0B:72:11:E9:7A:36:A7:24:45:1B:DA:B6:CF:95:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F6292D47185B026DD65ADBD20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/395c28a4-6a56-366d-b46f-25be7dbac657.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 173.16.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d4:71:85:b0:26:dd:65:ad:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=89c11429-cd17-44f8-8879-9b32ee26dfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:88:f2:e0:76:ae:3d:60:6a:45:f8:2b:58:c4: cc:8b:ec:65:67:12:d4:56:de:b5:a1:f0:5c:87:a4: 7a:3a:ce:79:0a:62:37:92:a8:db:c9:f8:22:c7:a6: 2a:4e:8c:d3:a6:11:47:54:dc:75:3b:8a:3b:54:6e: 59:2f:81:fb:d1:42:3b:69:df:81:66:87:88:f0:22: 8f:41:52:8b:20:f0:eb:c4:4f:9d:e8:ec:16:6d:ed: 92:39:4e:70:81:5d:9f:9b:ee:4c:cb:50:c6:ff:9c: a8:a7:b2:2a:23:7b:66:71:78:eb:9f:39:ee:1a:55: 92:f5:80:d8:6c:ba:18:ac:33:98:45:f5:88:24:06: ad:3e:52:f9:68:b2:fb:66:2e:52:66:88:22:a2:5f: 32:76:4b:0b:13:de:a6:04:0b:59:97:8b:7e:dd:77: a7:2c:f7:f2:0b:69:c4:ae:b3:23:59:8f:b2:53:bd: 01:6c:55:1d:00:0f:94:c7:d7:8a:20:bd:de:65:72: 7e:b7:2a:bb:97:6e:ed:91:7d:27:0b:9d:65:77:02: 3d:76:3d:27:49:2e:39:09:96:98:93:25:29:4c:5d: 82:69:5c:ab:6d:6c:b7:00:37:d8:85:6d:69:72:88: 0e:a6:eb:96:36:b4:f3:e9:53:50:ba:4b:82:25:ff: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:9E:99:FB:0B:72:11:E9:7A:36:A7:24:45:1B:DA:B6:CF:95:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/395c28a4-6a56-366d-b46f-25be7dbac657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e5:f3:43:6a:50:a5:0b:59:9a:e3:62:94:3c:79:ef:e3:a8: 24:f3:f8:2f:67:17:d1:65:a6:4a:59:77:2c:89:1a:62:31:af: ca:07:5c:be:3f:53:a1:ab:43:2c:81:59:a7:b1:5a:6f:2f:93: 72:da:92:82:91:13:d2:8e:9b:03:e3:43:86:af:26:cf:8e:fc: ed:97:90:0b:82:47:55:03:25:55:64:8f:81:ea:05:8a:1b:43: 86:4b:55:e0:f7:dd:2e:ec:2a:48:8c:5e:66:d1:44:92:fa:4d: a7:4d:a4:7d:37:fa:cf:b2:5e:1d:bd:5d:54:43:8a:8f:ff:48: c3:f1:ad:bc:ef:4a:5a:9b:0d:d2:4b:a4:7b:15:49:48:03:30: a9:66:ba:79:5d:69:11:0f:e7:e6:52:ff:74:33:e3:31:5a:95: 00:5b:da:b0:33:01:d8:97:30:a4:20:32:d0:55:a0:de:fb:52: d3:a2:1f:e2:ea:55:44:f8:c0:1c:c8:f5:2b:e6:f2:6d:50:db: e2:f1:ff:49:6c:bb:db:7b:02:4a:ca:1c:6b:7c:3b:75:1a:73: 6d:e0:56:16:51:b7:0c:c8:4c:9e:50:ac:7a:55:a3:0f:d0:2f: eb:5a:c5:69:07:68:23:b1:04:35:1a:df:58:9b:60:84:14:d2: 42:22:b0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktRxhbAm3WWtvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODljMTE0MjktY2QxNy00NGY4LTg4NzktOWIzMmVlMjZkZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIjy4HauPWBqRfgrWMTMi+xlZxLUVt61ofBc h6R6Os55CmI3kqjbyfgix6YqTozTphFHVNx1O4o7VG5ZL4H70UI7ad+BZoeI8CKP QVKLIPDrxE+d6OwWbe2SOU5wgV2fm+5My1DG/5yop7IqI3tmcXjrnznuGlWS9YDY bLoYrDOYRfWIJAatPlL5aLL7Zi5SZogiol8ydksLE96mBAtZl4t+3XenLPfyC2nE rrMjWY+yU70BbFUdAA+Ux9eKIL3eZXJ+tyq7l27tkX0nC51ldwI9dj0nSS45CZaY kyUpTF2CaVyrbWy3ADfYhW1pcogOpuuWNrTz6VNQukuCJf8seQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbPnpn7C3IR6Xo2pyRFG9q2z5UMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzk1YzI4YTQtNmE1Ni0z NjZkLWI0NmYtMjViZTdkYmFjNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvl80NqUKULWZrjYpQ8ee/jqCTz+C9nF9FlpkpZdyyJGmIxr8oHXL4/ U6GrQyyBWaexWm8vk3LakoKRE9KOmwPjQ4avJs+O/O2XkAuCR1UDJVVkj4HqBYob Q4ZLVeD33S7sKkiMXmbRRJL6TadNpH03+s+yXh29XVRDio//SMPxrbzvSlqbDdJL pHsVSUgDMKlmunldaREP5+ZS/3Qz4zFalQBb2rAzAdiXMKQgMtBVoN77UtOiH+Lq VUT4wBzI9Svm8m1Q2+Lx/0lsu9t7AkrKHGt8O3Uac23gVhZRtwzITJ5QrHpVow/Q L+taxWkHaCOxBDUa31ibYIQU0kIisI4= -----END CERTIFICATE-----Generated at Sun Oct 11 13:45:48 2026 by rpki-client