$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0df0dd95-dc9f-3d7d-a284-3e0ce7fe1b3d.roa File: 0df0dd95-dc9f-3d7d-a284-3e0ce7fe1b3d.roa (raw, json) Hash identifier: Nig/OzN2vAMAD40gNBLInY1j8DP5YNNaEzdv42Vozcc= Subject key identifier: 3C:A9:4A:D3:61:40:E6:64:E5:6F:2A:35:38:59:B0:F6:A9:A5:0C:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B9B3CE07E7D54042902EAB470 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0df0dd95-dc9f-3d7d-a284-3e0ce7fe1b3d.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 173.26.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e0:7e:7d:54:04:29:02:ea:b4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=7a6f4be1-ac4a-47d1-8e60-cba936b33151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:3e:61:f3:d8:21:61:64:af:c8:24:3e:10: ee:1f:40:ad:b8:fd:3e:e1:d6:1a:fc:3a:14:d7:6d: 87:53:d2:a1:60:de:6d:91:89:a5:f9:b2:87:02:ec: 27:cc:35:f3:39:13:3a:84:87:43:e4:d0:ae:4e:4c: 6a:22:00:74:cb:ce:80:eb:fb:cd:7e:8a:a8:a8:61: f7:5d:86:25:52:0f:55:da:c8:94:ac:7d:38:3a:29: da:8f:cf:32:f8:0f:f8:c3:67:5e:ca:06:2a:9e:4b: 9b:7b:55:88:dd:46:50:17:8d:e8:5f:82:54:44:44: 70:10:79:5e:0e:30:0b:ac:97:cc:93:dc:47:18:73: 41:25:c8:39:4b:0b:62:79:9d:52:53:05:9a:53:31: 19:7f:0b:a0:d2:5c:d0:a7:58:b1:5c:97:b3:a5:e8: be:fc:09:6c:1f:15:33:9a:25:be:23:65:05:c5:af: 7b:df:ac:4f:92:55:bc:1b:f2:82:3e:54:b6:a9:09: a8:4d:95:4e:af:ba:de:08:c7:53:d9:f1:74:dc:d9: 80:2f:d2:be:f5:c4:d2:44:7a:e7:dc:49:f8:0a:a8: 75:d2:f2:db:f9:fd:81:98:e0:10:ea:21:1d:50:ea: 63:51:c4:18:92:9e:0c:02:76:4b:2a:e8:02:53:f6: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:4A:D3:61:40:E6:64:E5:6F:2A:35:38:59:B0:F6:A9:A5:0C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0df0dd95-dc9f-3d7d-a284-3e0ce7fe1b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:26:ca:4e:e4:69:a1:4e:0b:57:40:99:24:37:9e:55:23:a5: 32:29:a6:10:58:22:53:1f:81:e0:8e:62:c5:a8:d4:12:e1:0c: d4:2a:61:06:26:bc:84:6f:3a:1d:1e:09:66:d6:11:22:ec:9a: 66:a0:d1:75:69:62:db:83:78:0d:71:4a:c9:b1:d4:0d:ef:f6: 13:98:8f:30:79:a3:b8:74:8e:91:92:8b:36:20:d4:ae:f5:f4: 75:cd:b9:7e:57:4f:39:17:9a:00:b2:34:2e:83:71:ef:8a:84: 6e:db:11:c2:a8:71:3a:1d:3a:6a:f7:b6:f1:2e:8d:82:67:f8: 36:29:58:98:12:98:c7:a6:54:f5:91:08:26:b2:c3:1a:25:3f: b3:40:04:e5:ee:84:7e:00:a1:22:fc:84:de:c5:7d:6f:dc:e6: 1a:7f:9d:63:40:51:96:bb:9b:b3:8b:35:c0:12:59:5c:6f:9c: 4b:70:cb:6c:d1:65:ec:19:c5:7c:be:51:13:c1:b0:0b:7c:02: b6:f0:b6:a2:9e:81:7a:8f:33:b0:6e:ee:33:0d:3d:23:67:2b: 1e:91:55:bd:17:75:15:1f:08:19:e2:c1:f1:a9:b0:8f:9d:d2: 65:67:f1:77:f7:85:17:e5:4f:dc:7d:e4:71:74:ff:68:af:4d: 06:e3:2f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOB+fVQEKQLqtHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk N2E2ZjRiZTEtYWM0YS00N2QxLThlNjAtY2JhOTM2YjMzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7I+YfPYIWFkr8gkPhDuH0CtuP0+4dYa/DoU 122HU9KhYN5tkYml+bKHAuwnzDXzORM6hIdD5NCuTkxqIgB0y86A6/vNfoqoqGH3 XYYlUg9V2siUrH04Oinaj88y+A/4w2deygYqnkube1WI3UZQF43oX4JURERwEHle DjALrJfMk9xHGHNBJcg5SwtieZ1SUwWaUzEZfwug0lzQp1ixXJezpei+/AlsHxUz miW+I2UFxa9736xPklW8G/KCPlS2qQmoTZVOr7reCMdT2fF03NmAL9K+9cTSRHrn 3En4Cqh10vLb+f2BmOAQ6iEdUOpjUcQYkp4MAnZLKugCU/Zd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDypStNhQOZk5W8qNThZsPappQyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGRmMGRkOTUtZGM5Zi0z ZDdkLWEyODQtM2UwY2U3ZmUxYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYmyk7kaaFOC1dAmSQ3nlUjpTIpphBYIlMfgeCOYsWo1BLhDNQqYQYm vIRvOh0eCWbWESLsmmag0XVpYtuDeA1xSsmx1A3v9hOYjzB5o7h0jpGSizYg1K71 9HXNuX5XTzkXmgCyNC6Dce+KhG7bEcKocTodOmr3tvEujYJn+DYpWJgSmMemVPWR CCaywxolP7NABOXuhH4AoSL8hN7FfW/c5hp/nWNAUZa7m7OLNcASWVxvnEtwy2zR ZewZxXy+URPBsAt8ArbwtqKegXqPM7Bu7jMNPSNnKx6RVb0XdRUfCBniwfGpsI+d 0mVn8Xf3hRflT9x95HF0/2ivTQbjL0E= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:15 2025 by rpki-client