$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f272a4-2cdb-3f0c-b351-b38f238265d6.roa File: c2f272a4-2cdb-3f0c-b351-b38f238265d6.roa (raw, json) Hash identifier: INU1OHPmgu1EvCyYm0r1WFBBfIfrIzRJuLaZ93ka2W4= Subject key identifier: F2:30:A4:D6:53:F3:34:CF:27:C0:21:1B:56:3D:75:58:90:BE:88:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5FC8016896EBD28EEB545480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f272a4-2cdb-3f0c-b351-b38f238265d6.roa Signing time: Sat 03 Oct 2026 01:00:12 +0000 ROA not before: Sat 03 Oct 2026 01:00:12 +0000 ROA not after: Fri 01 Jan 2027 02:00:12 +0000 asID: 19905 IP address blocks: 173.23.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:c8:01:68:96:eb:d2:8e:eb:54:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:12 2026 GMT Not After : Jan 1 02:00:12 2027 GMT Subject: CN=223394f3-36af-40dd-b7a2-abb7884b6a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:5e:27:59:7f:65:0e:2b:c0:2c:42:2a:c3: ec:c3:0b:86:df:92:e7:cd:d6:be:f8:97:8d:c0:cd: f3:b3:b3:f9:c8:1d:c1:9c:e1:b4:e0:04:56:83:02: a0:be:49:b0:98:0e:d3:8c:3f:7a:2c:56:58:80:57: 69:d0:f5:0c:e8:5e:4a:02:ad:63:6c:65:3d:08:d5: 15:bc:49:eb:b3:39:a5:09:93:6d:67:a8:f5:66:48: c6:4f:fd:e5:63:69:ed:5b:00:47:09:11:ca:af:02: a4:31:07:7a:3f:f7:59:21:b1:49:02:3b:0d:70:51: f4:59:ce:16:3b:48:9a:6c:ce:21:11:01:11:40:98: d3:e0:90:57:09:b1:98:d8:c0:15:1e:cf:48:0b:f8: 0e:9c:5b:31:a7:9d:8c:58:96:4e:d5:52:e5:95:9c: 20:04:b0:f2:56:1c:83:bc:37:d5:cf:e4:f4:5f:70: ac:07:78:d5:e7:ec:b8:68:c5:ef:91:b2:06:a7:6d: fd:e5:92:05:16:ca:36:70:c6:d8:0c:aa:64:04:80: db:c4:18:e9:f2:ae:bb:ec:b0:74:66:a5:c0:45:ef: 4e:ad:16:4c:ae:e5:96:3c:d0:34:4d:c4:50:0b:da: 65:cf:56:ae:1f:b3:62:59:20:99:8e:d8:36:83:d3: 83:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:30:A4:D6:53:F3:34:CF:27:C0:21:1B:56:3D:75:58:90:BE:88:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f272a4-2cdb-3f0c-b351-b38f238265d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f5:20:58:a1:2a:6b:7b:54:cb:de:2f:01:b7:b2:02:ec:9c: 4f:70:e0:cc:9c:b1:b0:60:54:98:60:6a:98:89:a6:75:44:a2: a2:25:fc:4e:04:8c:43:7c:90:7f:b2:f8:21:b9:cd:0f:fd:f9: 95:00:5c:51:16:60:87:48:57:09:36:d1:6a:e1:49:7d:95:df: ca:9d:7c:47:e1:f7:ed:5a:d0:73:e5:58:f7:1a:5d:73:5c:6e: 5f:59:2c:9e:38:b7:3d:59:9c:3b:74:9f:7f:f7:af:57:f4:65: f3:7b:13:26:92:3b:66:44:40:83:b4:18:91:d0:1e:38:b4:82: dc:e1:5a:3e:bb:43:a4:57:1b:7a:6a:85:ed:2b:53:ab:68:64: bc:bc:ea:67:33:44:d2:0d:c8:23:f6:cb:db:d2:04:6b:c0:11: 6c:64:85:48:f4:b9:c8:64:7f:74:46:1c:a4:68:f0:95:dc:84: cd:62:79:4b:3b:b2:1b:d7:15:66:0e:4b:01:98:04:bb:db:28: 64:e3:d8:95:7f:45:4d:76:9b:4c:08:e0:bb:a8:1c:9a:b3:a4: fc:79:38:63:78:b2:02:33:81:48:7a:16:4f:38:ac:df:28:c7: f0:a2:9b:3c:21:89:ac:26:8e:36:5f:99:bd:16:69:aa:f0:d0: 9a:d5:5f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fyAFoluvSjutUVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMzAxMDAxMloXDTI3MDEwMTAyMDAxMlowLzEtMCsGA1UEAxMk MjIzMzk0ZjMtMzZhZi00MGRkLWI3YTItYWJiNzg4NGI2YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OdeJ1l/ZQ4rwCxCKsPswwuG35Lnzda++JeN wM3zs7P5yB3BnOG04ARWgwKgvkmwmA7TjD96LFZYgFdp0PUM6F5KAq1jbGU9CNUV vEnrszmlCZNtZ6j1ZkjGT/3lY2ntWwBHCRHKrwKkMQd6P/dZIbFJAjsNcFH0Wc4W O0iabM4hEQERQJjT4JBXCbGY2MAVHs9IC/gOnFsxp52MWJZO1VLllZwgBLDyVhyD vDfVz+T0X3CsB3jV5+y4aMXvkbIGp2395ZIFFso2cMbYDKpkBIDbxBjp8q677LB0 ZqXARe9OrRZMruWWPNA0TcRQC9plz1auH7NiWSCZjtg2g9ODqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIwpNZT8zTPJ8AhG1Y9dViQvojiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzJmMjcyYTQtMmNkYi0z ZjBjLWIzNTEtYjM4ZjIzODI2NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID1IFihKmt7VMveLwG3sgLsnE9w4MycsbBgVJhgapiJpnVEoqIl/E4E jEN8kH+y+CG5zQ/9+ZUAXFEWYIdIVwk20WrhSX2V38qdfEfh9+1a0HPlWPcaXXNc bl9ZLJ44tz1ZnDt0n3/3r1f0ZfN7EyaSO2ZEQIO0GJHQHji0gtzhWj67Q6RXG3pq he0rU6toZLy86mczRNINyCP2y9vSBGvAEWxkhUj0uchkf3RGHKRo8JXchM1ieUs7 shvXFWYOSwGYBLvbKGTj2JV/RU12m0wI4LuoHJqzpPx5OGN4sgIzgUh6Fk84rN8o x/CimzwhiawmjjZfmb0Waarw0JrVXwE= -----END CERTIFICATE-----Generated at Mon Oct 12 09:50:15 2026 by rpki-client