$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa File: f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa (raw, json) Hash identifier: A+izIaazhRHzrJHIFJMB0PwRlb2eGzWaTkjZy7JxahE= Subject key identifier: 37:54:0E:A6:3B:B6:48:3F:CE:3C:CB:17:64:FF:09:07:CF:75:4C:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE1E4750085FB7D8E2F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 170.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e1:e4:75:00:85:fb:7d:8e:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cdf21abb-834b-46ef-9a2a-12844f00be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:15:0e:dc:cd:7e:55:68:37:b4:f9:9d:74: be:4f:df:1a:1c:b3:59:75:10:96:0a:66:f9:4d:d0: 61:52:9f:93:31:fe:5c:eb:86:ac:ad:82:f0:30:9a: 80:86:85:12:6c:8b:11:17:2a:62:da:ea:4c:14:16: 14:c5:42:03:d6:43:39:7f:7e:fe:11:fc:0d:51:31: c0:db:f6:3b:35:5d:03:e6:ca:1c:b3:5c:24:33:70: bc:18:62:7d:86:63:eb:2f:1f:67:45:66:e6:c1:83: 64:e6:9e:dd:5d:c8:1f:89:7d:d9:32:89:fa:a9:f0: 85:f7:d0:13:fc:b1:06:e8:37:01:9b:99:47:95:5b: 5f:21:09:a6:f4:5c:c9:8c:26:9d:b0:d2:4a:97:71: b8:08:ef:5c:ee:22:a4:79:75:61:57:a7:f9:04:19: 3b:a7:d3:68:ad:f0:be:d5:0e:a4:47:33:cb:d9:d2: a4:70:ee:6b:1d:3c:40:53:42:1b:80:1f:b3:d4:e3: 4e:bb:17:ab:e2:9a:b0:e7:09:e1:26:b3:a1:db:cf: d2:30:09:23:31:c4:70:0a:8c:02:b7:e3:65:ba:37: 28:65:e4:47:69:19:70:6e:b6:ca:91:0e:72:6a:2b: d1:32:6e:cf:08:49:76:80:2f:a0:c1:26:8b:b0:25: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:54:0E:A6:3B:B6:48:3F:CE:3C:CB:17:64:FF:09:07:CF:75:4C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:99:61:4c:76:d6:d8:9d:ef:38:af:1a:b5:20:69:79:48:03: 29:68:2b:24:c9:30:a6:7d:82:92:22:31:84:e9:d7:7c:5a:fe: 3d:51:fe:30:48:c5:38:e2:21:01:34:99:3b:06:56:06:d3:dc: 63:b2:c6:2f:be:29:df:6b:2c:fe:ba:cf:50:02:39:1d:ed:be: 87:c9:7c:00:8c:58:f0:7e:1e:1d:89:af:75:b1:c6:57:18:e2: 62:28:fb:32:d4:c4:99:b1:2c:c3:c6:87:8d:33:73:df:f6:4c: 43:b5:31:f1:b8:6d:fd:c6:32:28:26:7d:f8:74:32:8a:42:f9: ca:ed:a5:c8:57:b1:fd:d4:bd:55:ad:13:4f:c5:65:f2:5b:81: 95:58:6f:6f:ef:2f:d3:66:66:b4:7f:28:8c:24:36:e4:f8:40: 67:a9:0a:34:e8:32:2f:3c:14:09:34:2f:3f:c2:14:d1:55:1a: ca:b6:02:19:a8:d8:41:fb:95:79:16:ca:30:8c:a9:66:10:fc: c6:41:f2:1c:d0:61:4b:0c:82:6d:ce:52:5c:5c:a6:27:cf:0e: 5b:12:7c:f3:26:33:72:e0:27:c5:c7:8b:d6:86:1a:b5:7e:8c: 02:ba:aa:3f:76:52:39:6c:54:66:ef:b9:10:dd:11:15:4c:57: 83:65:9a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeHkdQCF+32OL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2RmMjFhYmItODM0Yi00NmVmLTlhMmEtMTI4NDRmMDBiZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYIVDtzNflVoN7T5nXS+T98aHLNZdRCWCmb5 TdBhUp+TMf5c64asrYLwMJqAhoUSbIsRFypi2upMFBYUxUID1kM5f37+EfwNUTHA 2/Y7NV0D5socs1wkM3C8GGJ9hmPrLx9nRWbmwYNk5p7dXcgfiX3ZMon6qfCF99AT /LEG6DcBm5lHlVtfIQmm9FzJjCadsNJKl3G4CO9c7iKkeXVhV6f5BBk7p9NorfC+ 1Q6kRzPL2dKkcO5rHTxAU0IbgB+z1ONOuxer4pqw5wnhJrOh28/SMAkjMcRwCowC t+NlujcoZeRHaRlwbrbKkQ5yaivRMm7PCEl2gC+gwSaLsCUbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdUDqY7tkg/zjzLF2T/CQfPdUyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU0YTQ2NGUtMWRlZi0z MmRkLWFjM2QtYWMwZGEwZTBjMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2ZYUx21tid7zivGrUgaXlIAyloKyTJMKZ9gpIiMYTp13xa/j1R/jBI xTjiIQE0mTsGVgbT3GOyxi++Kd9rLP66z1ACOR3tvofJfACMWPB+Hh2Jr3WxxlcY 4mIo+zLUxJmxLMPGh40zc9/2TEO1MfG4bf3GMigmffh0MopC+crtpchXsf3UvVWt E0/FZfJbgZVYb2/vL9NmZrR/KIwkNuT4QGepCjToMi88FAk0Lz/CFNFVGsq2Ahmo 2EH7lXkWyjCMqWYQ/MZB8hzQYUsMgm3OUlxcpifPDlsSfPMmM3LgJ8XHi9aGGrV+ jAK6qj92UjlsVGbvuRDdERVMV4NlmvI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:39:12 2026 by rpki-client