$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: TX3SSUOFQt8cDqRO7poOae78KAn6mELjzPofXDDxPOw= Subject key identifier: 82:FD:9A:66:BC:3E:2D:15:5F:87:E0:2C:83:9B:D3:16:E5:DD:76:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE85DAE8181C8F4E63900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e8:5d:ae:81:81:c8:f4:e6:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d0a7525b-208b-4cf2-a487-d13b3e040faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:a6:56:2f:43:ac:cf:ca:13:af:aa:67:72: 3b:d0:f7:0a:ca:3f:37:08:20:22:65:9f:b4:40:ef: 96:30:b4:45:1b:4c:51:87:29:2d:43:b6:99:b9:70: e6:60:33:f3:40:e3:92:c2:8c:3d:4c:e2:e1:ea:f8: 8c:e4:d9:3b:5a:12:71:92:75:5d:2c:b1:01:d8:49: b4:de:32:eb:79:19:c3:55:82:a8:7a:a1:e8:40:85: 90:ca:c8:ee:17:e8:d0:ea:2a:d9:69:df:fa:2e:1a: fa:0b:1e:2a:a7:94:bd:75:93:c4:04:cc:a6:56:c5: 36:3d:c7:78:9c:90:53:39:42:0b:43:2f:59:fb:d8: 61:cf:08:2b:12:49:df:e5:36:f3:e0:c9:85:7f:15: f6:32:bb:84:08:68:54:48:9f:0b:f9:fe:61:d7:ab: 59:48:49:75:16:17:67:37:bf:ad:d3:49:25:c6:63: bf:08:6f:89:43:d6:79:a1:a5:f9:85:20:bd:f3:ee: df:82:d3:bd:f0:ec:40:6a:cf:39:24:f9:1b:68:94: df:e9:56:27:81:7d:c9:62:4c:fe:c2:d5:b0:98:b8: c8:93:29:24:cb:4f:29:6e:e7:3b:33:1d:3f:48:5a: 98:b1:c0:54:29:00:eb:8d:b2:2a:87:3e:c6:22:dc: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:9A:66:BC:3E:2D:15:5F:87:E0:2C:83:9B:D3:16:E5:DD:76:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:50:fd:06:eb:70:6c:4b:c6:26:87:28:d1:ab:9c:e4:fd:2a: bf:e9:88:d1:0c:b5:7e:86:43:01:95:11:53:29:0c:f3:0d:08: 24:18:53:f0:af:7f:b0:7c:11:5b:97:9d:da:0a:e6:71:81:0b: d3:9d:35:58:dc:0e:78:1a:14:92:5f:59:2e:1f:a5:0e:64:6b: 8c:60:8d:64:f6:d0:51:4f:ca:84:69:22:b7:52:88:93:40:77: 89:48:b7:07:b0:e0:9e:5e:15:a9:94:b9:38:b9:a7:ec:b2:37: 3e:fc:ed:dc:be:d2:37:11:4c:1d:34:f5:31:e9:ae:2a:a9:65: 76:03:a5:a6:f6:00:67:dd:94:3f:4a:a5:94:7c:18:7e:2d:ff: d4:cc:9a:76:ce:3e:84:c8:5f:2e:22:f2:3a:d6:57:1b:e0:f3: 99:e9:56:d2:0c:73:6c:2f:0a:9a:28:d1:3c:76:99:c4:60:ab: 90:0e:b1:5d:fd:63:84:fa:ff:c0:f8:14:f2:4b:32:bf:ca:0e: a7:12:b9:6c:ec:91:43:77:1d:91:be:16:d4:8a:99:a7:31:91: 23:5b:0c:2d:5a:fe:ed:87:cd:fa:49:05:6c:e3:1c:b0:e6:1b: 79:0c:02:c4:37:94:e9:d6:7f:c6:ca:4d:04:1d:00:cf:72:2f: 1a:3a:0a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPehdroGByPTmOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDBhNzUyNWItMjA4Yi00Y2YyLWE0ODctZDEzYjNlMDQwZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR+mVi9DrM/KE6+qZ3I70PcKyj83CCAiZZ+0 QO+WMLRFG0xRhyktQ7aZuXDmYDPzQOOSwow9TOLh6viM5Nk7WhJxknVdLLEB2Em0 3jLreRnDVYKoeqHoQIWQysjuF+jQ6irZad/6Lhr6Cx4qp5S9dZPEBMymVsU2Pcd4 nJBTOUILQy9Z+9hhzwgrEknf5Tbz4MmFfxX2MruECGhUSJ8L+f5h16tZSEl1Fhdn N7+t00klxmO/CG+JQ9Z5oaX5hSC98+7fgtO98OxAas85JPkbaJTf6VYngX3JYkz+ wtWwmLjIkykky08pbuc7Mx0/SFqYscBUKQDrjbIqhz7GItwUXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL9mma8Pi0VX4fgLIOb0xbl3Xa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZQ/QbrcGxLxiaHKNGrnOT9Kr/piNEMtX6GQwGVEVMpDPMNCCQYU/Cv f7B8EVuXndoK5nGBC9OdNVjcDngaFJJfWS4fpQ5ka4xgjWT20FFPyoRpIrdSiJNA d4lItwew4J5eFamUuTi5p+yyNz787dy+0jcRTB009THpriqpZXYDpab2AGfdlD9K pZR8GH4t/9TMmnbOPoTIXy4i8jrWVxvg85npVtIMc2wvCpoo0Tx2mcRgq5AOsV39 Y4T6/8D4FPJLMr/KDqcSuWzskUN3HZG+FtSKmacxkSNbDC1a/u2HzfpJBWzjHLDm G3kMAsQ3lOnWf8bKTQQdAM9yLxo6Cu0= -----END CERTIFICATE-----Generated at Mon Oct 12 12:29:11 2026 by rpki-client