$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa File: 4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa (raw, json) Hash identifier: q3At/xJdF9AceLiJvBkCVovHIUpMFDfk4sabsrHJ2PQ= Subject key identifier: 07:6D:D9:69:24:CF:5E:D1:AE:E0:85:8B:B8:B7:6D:35:54:81:8D:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4F080D66BB5AE7E62A94F940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:0d:66:bb:5a:e7:e6:2a:94:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=0cdc228c-23c0-4f79-a76f-55ab64c218dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:f9:f3:76:71:13:1b:52:f7:97:5e:4f:d9: fa:ab:b9:2f:0a:04:e8:75:4d:dc:91:c8:c5:e3:b6: c5:9b:14:70:46:3f:ea:ea:17:db:72:5b:e4:67:60: 0f:97:c0:b0:de:c6:ce:42:e5:ce:6f:34:a4:22:05: b4:2a:77:8a:52:89:bf:e4:98:2c:45:a6:9c:2b:c7: 14:ff:51:60:c9:4e:33:d2:6c:b8:e7:bf:72:b3:b0: b5:b3:4d:1e:5f:68:18:fe:3a:47:95:14:d2:9c:6a: af:ab:9c:0a:06:89:3a:b2:01:f7:92:53:1a:d4:46: db:53:40:85:ce:4b:0d:b0:d2:03:29:1e:e2:bc:d9: 37:9c:07:1f:65:59:d9:84:54:78:98:51:2f:27:8a: 42:28:bc:a1:11:2f:4f:f7:65:f0:88:55:93:4d:8a: ff:fb:e1:58:b8:9f:c4:ef:fc:f8:9d:39:a5:e0:a9: aa:19:17:7b:fb:20:ca:b4:a2:57:9c:e3:8f:87:6a: ef:20:72:92:45:ed:53:48:98:79:19:6b:43:14:ae: d9:1d:ee:cc:01:97:99:68:cc:84:ab:0b:e3:19:db: d3:92:62:9e:08:1b:8f:c0:a2:f3:07:b9:36:aa:f4: 7a:a2:b0:75:ee:42:3e:cb:b2:54:0f:0a:cc:c5:25: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6D:D9:69:24:CF:5E:D1:AE:E0:85:8B:B8:B7:6D:35:54:81:8D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:63:56:59:50:f4:27:04:70:13:9e:e4:66:a1:b0:b7:2b:aa: 4d:bd:b6:c4:86:bd:76:e7:d7:4e:4e:f8:50:e7:68:14:33:6f: d3:55:60:e1:94:f5:3d:45:12:1f:d2:a1:56:bb:00:a1:f6:4a: ef:8d:c7:e8:cd:07:b2:af:b1:9a:eb:1d:95:27:f4:87:e6:12: 9a:1b:b7:61:18:cb:6a:11:ce:84:ac:81:5d:f8:45:3c:c7:be: af:1e:14:6e:19:2f:4b:9d:16:f7:a0:42:eb:51:86:e6:0b:c5: 16:75:bc:48:72:9c:b9:63:63:1a:0c:67:86:c7:d8:82:a6:0d: a5:8f:0a:43:4d:3b:89:66:f2:05:8b:20:24:83:31:e7:ab:66: 71:ba:f3:1b:e1:1f:86:2f:6c:a5:c2:a7:76:a6:14:7c:1d:22: 0f:4d:12:f9:2e:9f:ae:a3:86:bc:d1:9c:8b:f2:ad:c8:9d:31: a1:d3:73:e9:b2:d1:54:dc:0a:2b:ae:6f:6f:ef:f3:a1:93:a0: 05:ac:96:0d:fa:58:7d:f3:de:dc:8c:c8:2c:5e:eb:1b:6c:a6: d3:91:fe:b7:2a:65:f5:95:59:19:c1:d6:05:33:03:ff:e2:74: c5:43:44:23:07:0e:84:22:5d:98:d2:45:4e:1e:d1:91:93:d4: 5c:15:43:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCA1mu1rn5iqU+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MGNkYzIyOGMtMjNjMC00Zjc5LWE3NmYtNTVhYjY0YzIxOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloz583ZxExtS95deT9n6q7kvCgTodU3ckcjF 47bFmxRwRj/q6hfbclvkZ2APl8Cw3sbOQuXObzSkIgW0KneKUom/5JgsRaacK8cU /1FgyU4z0my4579ys7C1s00eX2gY/jpHlRTSnGqvq5wKBok6sgH3klMa1EbbU0CF zksNsNIDKR7ivNk3nAcfZVnZhFR4mFEvJ4pCKLyhES9P92XwiFWTTYr/++FYuJ/E 7/z4nTml4KmqGRd7+yDKtKJXnOOPh2rvIHKSRe1TSJh5GWtDFK7ZHe7MAZeZaMyE qwvjGdvTkmKeCBuPwKLzB7k2qvR6orB17kI+y7JUDwrMxSUg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdt2Wkkz17RruCFi7i3bTVUgY01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY4NGE2N2QtMDY5Yi0z ZWVhLWE5ZmEtZDJmNTNhNDE3YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrReQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1jVllQ9CcEcBOe5GahsLcrqk29tsSGvXbn105O+FDnaBQzb9NVYOGU 9T1FEh/SoVa7AKH2Su+Nx+jNB7KvsZrrHZUn9IfmEpobt2EYy2oRzoSsgV34RTzH vq8eFG4ZL0udFvegQutRhuYLxRZ1vEhynLljYxoMZ4bH2IKmDaWPCkNNO4lm8gWL ICSDMeerZnG68xvhH4YvbKXCp3amFHwdIg9NEvkun66jhrzRnIvyrcidMaHTc+my 0VTcCiuub2/v86GToAWslg36WH3z3tyMyCxe6xtsptOR/rcqZfWVWRnB1gUzA//i dMVDRCMHDoQiXZjSRU4e0ZGT1FwVQ1M= -----END CERTIFICATE-----Generated at Sun Oct 11 17:11:00 2026 by rpki-client