$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa File: 58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa (raw, json) Hash identifier: rf01DqiOyBCw3n+X2bZa9v/qfUSVovEwesohAEPPrfc= Subject key identifier: 68:2A:1C:50:63:3A:3F:A7:26:2A:C6:FE:89:81:A0:C5:D8:1D:4A:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5E62E776114AB91614722D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.23.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e7:76:11:4a:b9:16:14:72:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=8a8f2374-01da-483e-a584-aed84e16db74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:ba:dd:40:aa:e2:48:9a:30:9b:19:de:d4: 54:2e:95:a7:8a:8c:3f:70:55:64:72:2c:70:02:26: 15:d3:b8:9c:ae:9c:46:cd:98:21:cd:25:4e:c6:59: e8:f8:38:6e:9f:ed:fa:e9:8e:a2:d5:bb:f7:c4:da: 90:32:33:a3:9a:1f:2e:3a:6b:ec:47:ef:d6:f8:09: 51:8c:e9:46:d5:cf:9b:d2:f6:64:87:21:ef:f6:93: f4:21:fe:98:50:e3:34:67:69:16:89:c8:96:74:3d: 91:43:58:90:1b:31:6e:04:db:bb:8a:99:bd:1f:c8: 4f:b1:66:37:f9:f3:49:83:7d:ee:b4:88:d3:06:8c: 0e:61:b0:a6:3d:69:51:42:93:41:2d:81:71:f0:39: 89:08:c1:60:4c:67:38:a9:4e:aa:8e:b4:b2:94:03: a5:4d:5b:70:72:b1:12:41:1e:0f:da:5e:61:1d:77: 44:d7:70:8f:87:45:67:0f:4d:6e:28:32:95:59:72: 6a:58:c5:5f:05:af:62:72:77:de:05:18:b7:4c:32: d9:db:7d:7f:08:6f:50:e7:3a:2e:61:72:08:1a:03: 0d:f4:87:e6:90:f1:96:54:02:52:85:19:04:6e:28: 13:73:00:7f:60:ee:63:ae:ee:7e:37:e2:99:51:98: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2A:1C:50:63:3A:3F:A7:26:2A:C6:FE:89:81:A0:C5:D8:1D:4A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b1:a9:bb:36:30:29:34:7c:94:0f:1e:28:4f:ea:8b:bf:83: aa:11:14:eb:b3:ec:41:10:57:88:fa:c7:eb:a4:cb:c5:91:89: 2c:6f:cb:75:a4:79:eb:2d:f6:66:e9:a1:ff:77:71:49:32:77: 61:32:2c:52:86:12:39:88:46:64:24:9a:d4:10:c3:f4:f5:8e: 6a:75:68:b2:08:a9:41:70:0a:bf:f3:94:37:d6:00:5a:9f:8a: 16:15:13:32:92:5e:d1:bc:62:dd:6e:73:01:95:c1:7c:07:c5: af:98:0c:48:67:30:88:52:cb:64:4a:67:35:21:f9:d6:da:cb: 8f:52:49:e2:39:38:78:5a:2a:fb:8a:b1:45:a2:fd:f3:87:4b: ef:5b:58:b8:29:96:15:3b:2a:01:80:45:78:a3:4a:ab:72:61: d6:3a:29:7f:40:5e:c8:66:d8:5f:ef:cf:4e:de:75:14:8c:ac: 57:7b:bb:be:8b:85:3f:93:3f:4e:64:08:f5:8e:e0:18:f0:e1: 37:1d:bb:b2:13:8a:7e:83:64:90:d0:67:e9:bd:29:10:22:67: 22:fc:e4:67:68:66:fe:c6:2f:4a:a5:99:55:98:53:3b:84:eb: d5:92:c6:d6:f7:a9:df:ca:9d:2f:b5:07:7c:3c:45:d7:c9:cd: 4c:75:a4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYud2EUq5FhRyLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OGE4ZjIzNzQtMDFkYS00ODNlLWE1ODQtYWVkODRlMTZkYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5663UCq4kiaMJsZ3tRULpWniow/cFVkcixw AiYV07icrpxGzZghzSVOxlno+Dhun+366Y6i1bv3xNqQMjOjmh8uOmvsR+/W+AlR jOlG1c+b0vZkhyHv9pP0If6YUOM0Z2kWiciWdD2RQ1iQGzFuBNu7ipm9H8hPsWY3 +fNJg33utIjTBowOYbCmPWlRQpNBLYFx8DmJCMFgTGc4qU6qjrSylAOlTVtwcrES QR4P2l5hHXdE13CPh0VnD01uKDKVWXJqWMVfBa9icnfeBRi3TDLZ231/CG9Q5zou YXIIGgMN9IfmkPGWVAJShRkEbigTcwB/YO5jru5+N+KZUZhfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgqHFBjOj+nJirG/omBoMXYHUqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThmNDA2YmItNDkzYy0z YzllLTg2ZTAtMThhNzQ2ZThjOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmxqbs2MCk0fJQPHihP6ou/g6oRFOuz7EEQV4j6x+uky8WRiSxvy3Wk eest9mbpof93cUkyd2EyLFKGEjmIRmQkmtQQw/T1jmp1aLIIqUFwCr/zlDfWAFqf ihYVEzKSXtG8Yt1ucwGVwXwHxa+YDEhnMIhSy2RKZzUh+dbay49SSeI5OHhaKvuK sUWi/fOHS+9bWLgplhU7KgGARXijSqtyYdY6KX9AXshm2F/vz07edRSMrFd7u76L hT+TP05kCPWO4Bjw4Tcdu7ITin6DZJDQZ+m9KRAiZyL85GdoZv7GL0qlmVWYUzuE 69WSxtb3qd/KnS+1B3w8RdfJzUx1pDk= -----END CERTIFICATE-----Generated at Tue Oct 13 00:50:47 2026 by rpki-client