$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be609c7f-3710-3c49-89e6-6ad2b931e8a3.roa File: be609c7f-3710-3c49-89e6-6ad2b931e8a3.roa (raw, json) Hash identifier: NFnWKm3ooJ6Vv0/0lN3uruZmUU0Synjh4yHRhb7gZmo= Subject key identifier: 33:46:0A:FB:6D:A1:C9:A3:2B:E7:98:83:3A:C0:B0:D2:3D:BD:78:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F708826D33D9FD7361A8A1D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be609c7f-3710-3c49-89e6-6ad2b931e8a3.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 19905 IP address blocks: 173.18.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:26:d3:3d:9f:d7:36:1a:8a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=cb038ba8-52a1-42de-b5a8-eeba3d99b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:68:8e:1a:fa:17:2d:03:9d:e2:27:53:1e: e4:6e:69:6b:de:07:22:2a:f4:47:ed:4b:01:cb:21: c8:2c:27:43:8f:e7:20:0a:7a:a3:f4:03:fd:69:03: 32:2e:a3:ff:56:1d:b0:cf:f3:dd:63:c4:f8:9f:8a: 7b:d9:a0:59:1e:d1:e7:8e:3c:42:f4:db:70:94:74: 6d:f9:5a:70:43:eb:42:14:23:1f:ce:6a:47:5d:94: e1:e8:c6:45:9d:91:e3:fd:09:d1:78:94:61:69:56: a1:a8:b4:82:ca:5b:58:3a:20:07:cd:08:25:d6:6b: 32:99:f8:17:bc:1b:65:07:de:31:2b:4a:78:cf:51: d2:7e:36:c5:17:17:6c:27:2e:a5:fe:3a:1b:e2:b6: b3:94:a5:f0:1a:10:7c:35:1d:0e:27:f4:4c:43:c6: 4c:ba:45:0e:3b:2e:bd:3e:42:c4:1b:ef:6f:f2:3f: 18:fc:21:0c:a6:38:79:70:a1:25:9f:b7:74:84:bb: 53:17:58:4a:a1:b9:27:b7:67:cb:2c:b0:b0:ca:bc: b1:70:79:64:a7:48:aa:42:6b:40:a0:98:92:94:00: e1:d6:57:05:fe:68:5a:de:2d:1e:f1:43:c7:23:6f: ef:ef:80:59:a8:60:38:88:c7:b8:12:fe:ca:f5:7d: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:46:0A:FB:6D:A1:C9:A3:2B:E7:98:83:3A:C0:B0:D2:3D:BD:78:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be609c7f-3710-3c49-89e6-6ad2b931e8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:73:74:c1:84:e1:ed:6e:08:b1:6d:53:2b:ca:ad:c3:1c:4e: fe:af:16:db:8a:86:d6:2f:7d:6d:b7:2d:f9:ab:b6:5a:b7:e9: 06:58:57:b9:d1:9a:cc:26:94:6a:37:23:1f:18:92:56:ed:4f: 8a:77:d1:ec:9c:c1:3d:7c:a8:1f:92:4c:76:e7:9a:7d:b9:71: 9c:f7:8d:44:09:c1:fb:f6:3a:5c:b6:98:7c:bf:7e:6b:64:72: a5:e2:66:e6:e7:64:ec:21:ad:9b:04:00:02:a6:bf:57:30:e7: 3d:fe:c2:f1:f8:47:e2:01:e1:f9:86:02:2a:56:65:ed:d8:d1: 6f:83:2f:aa:cc:cc:d0:1a:7c:a5:bb:d8:ac:4c:a7:69:29:3f: 3d:c9:c4:65:81:b1:c8:88:b1:0f:a4:8c:71:68:71:e6:95:59: cb:02:4f:2a:e0:a4:ab:dd:69:5a:5b:a5:27:0c:d8:33:3f:ef: 00:a0:aa:15:63:33:b7:69:2b:fb:43:0c:13:d9:c0:50:f8:ff: 81:8d:27:82:1f:9e:e9:0c:52:72:7f:32:22:b4:fc:f3:62:a2: 3a:ba:16:e7:42:09:66:4b:33:cf:61:49:27:f4:eb:10:91:96: 69:5a:12:0f:5e:2a:3d:c3:32:62:4c:37:4d:d5:7c:10:06:6e: ff:13:70:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCbTPZ/XNhqKHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2IwMzhiYTgtNTJhMS00MmRlLWI1YTgtZWViYTNkOTliNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX9ojhr6Fy0DneInUx7kbmlr3gciKvRH7UsB yyHILCdDj+cgCnqj9AP9aQMyLqP/Vh2wz/PdY8T4n4p72aBZHtHnjjxC9NtwlHRt +VpwQ+tCFCMfzmpHXZTh6MZFnZHj/QnReJRhaVahqLSCyltYOiAHzQgl1msymfgX vBtlB94xK0p4z1HSfjbFFxdsJy6l/job4razlKXwGhB8NR0OJ/RMQ8ZMukUOOy69 PkLEG+9v8j8Y/CEMpjh5cKEln7d0hLtTF1hKobknt2fLLLCwyryxcHlkp0iqQmtA oJiSlADh1lcF/mha3i0e8UPHI2/v74BZqGA4iMe4Ev7K9X0N/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNGCvttocmjK+eYgzrAsNI9vXj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU2MDljN2YtMzcxMC0z YzQ5LTg5ZTYtNmFkMmI5MzFlOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5zdMGE4e1uCLFtUyvKrcMcTv6vFtuKhtYvfW23Lfmrtlq36QZYV7nR mswmlGo3Ix8YklbtT4p30eycwT18qB+STHbnmn25cZz3jUQJwfv2Oly2mHy/fmtk cqXiZubnZOwhrZsEAAKmv1cw5z3+wvH4R+IB4fmGAipWZe3Y0W+DL6rMzNAafKW7 2KxMp2kpPz3JxGWBsciIsQ+kjHFoceaVWcsCTyrgpKvdaVpbpScM2DM/7wCgqhVj M7dpK/tDDBPZwFD4/4GNJ4IfnukMUnJ/MiK0/PNiojq6FudCCWZLM89hSSf06xCR lmlaEg9eKj3DMmJMN03VfBAGbv8TcMw= -----END CERTIFICATE-----Generated at Mon Oct 12 12:44:15 2026 by rpki-client