$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ff221-1411-3d0d-8474-46fd4ffd0c63.roa File: 2a8ff221-1411-3d0d-8474-46fd4ffd0c63.roa (raw, json) Hash identifier: 2GI+mY1wm9eOm6Cs8v1vHYQVgYCtjtSsEMjCX3NG5n4= Subject key identifier: 3B:B3:9C:6D:12:45:3E:25:35:D8:9D:74:86:5B:D5:BC:79:E5:BD:68 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F02C09EFF35813545C0FD2C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ff221-1411-3d0d-8474-46fd4ffd0c63.roa Signing time: Sun 30 Aug 2026 17:15:10 +0000 ROA not before: Sun 30 Aug 2026 17:15:10 +0000 ROA not after: Sat 28 Nov 2026 18:15:10 +0000 asID: 30036 IP address blocks: 173.19.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:c0:9e:ff:35:81:35:45:c0:fd:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 30 17:15:10 2026 GMT Not After : Nov 28 18:15:10 2026 GMT Subject: CN=6daa2bb6-33f0-4c35-b0cd-8e67bb6c13f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:c3:3a:b2:ee:b4:07:b3:03:87:e1:f6:02: a3:47:ef:db:59:49:c6:c5:eb:04:68:72:de:1f:07: d5:31:f8:10:be:d3:59:ef:1d:cb:1e:b0:a4:81:50: 43:f1:73:0e:76:1e:f1:f8:41:19:01:1d:d9:bf:58: a8:6e:e2:66:3d:02:05:e5:42:09:77:a5:11:4e:23: 95:ec:21:e0:95:04:74:8b:80:33:a7:14:d1:ed:57: e3:54:7c:d7:8c:d6:de:c5:be:db:97:99:5b:06:b2: 1c:67:56:33:a8:f2:9f:b6:f7:99:da:c7:d8:e4:db: 5d:6f:89:45:da:54:0c:36:2a:d1:3d:61:62:13:f9: a1:b2:ae:4a:56:ee:f7:80:e7:cb:ae:0e:dd:63:8e: 29:9c:87:8d:8a:d0:57:cf:5f:5e:4a:e5:70:b2:90: 38:29:39:cb:d6:26:f7:26:4f:1a:51:7e:cc:0a:54: 88:89:5d:e5:57:41:a0:a7:87:5b:b1:a0:d0:0a:58: e9:72:6e:85:de:06:2a:74:f6:14:dd:40:84:7c:a9: 05:00:65:c6:5e:eb:20:b7:1e:72:17:3c:5a:e9:da: 3e:b4:39:5e:30:4e:7d:8d:f1:67:61:0c:7b:44:32: a3:80:71:ab:98:5b:d5:0b:f4:67:ad:85:f2:82:63: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:9C:6D:12:45:3E:25:35:D8:9D:74:86:5B:D5:BC:79:E5:BD:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ff221-1411-3d0d-8474-46fd4ffd0c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a9:b5:c9:9a:f2:e3:81:f9:dd:09:1c:11:4e:28:b2:f7:78: 6e:65:ef:03:a4:e8:9f:05:fa:ec:c1:42:d2:9d:38:7c:12:76: 51:68:da:83:12:7c:c2:82:22:85:b9:10:3c:6a:8b:66:73:08: d9:b2:5d:79:75:09:d8:50:c9:36:8a:b7:40:2b:5d:94:6a:1d: 63:87:82:c3:fc:df:97:13:d2:f5:81:1f:5f:1c:0d:8f:d5:84: 8c:f6:c9:b8:87:ea:b2:32:0d:61:ed:fa:9f:4c:2a:4d:86:c7: b1:f1:c2:1f:c1:01:bf:60:0c:c6:58:04:64:3c:a3:ce:43:e2: d8:95:de:1e:14:fe:97:f4:65:2f:c8:f8:a0:80:fb:51:1f:a7: 15:b5:0c:52:32:33:69:9b:5a:77:db:69:3f:07:62:1d:92:e5: aa:2e:45:f5:64:21:1f:25:e9:45:ae:aa:2a:59:ed:10:d3:1c: de:b4:1c:ee:74:0c:d0:70:da:2d:44:4d:f1:66:b5:df:f8:4d: ca:21:46:ce:6a:05:6f:c9:f7:ce:f3:fb:fa:7f:de:73:22:92: ec:b2:49:0d:62:a4:5c:05:3b:bb:eb:ce:a9:b1:e9:ca:7b:98: 39:84:f6:4a:89:92:ac:37:6b:b7:5c:59:e1:73:4e:cf:24:8e: 36:17:94:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CwJ7/NYE1RcD9LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgzMDE3MTUxMFoXDTI2MTEyODE4MTUxMFowLzEtMCsGA1UEAxMk NmRhYTJiYjYtMzNmMC00YzM1LWIwY2QtOGU2N2JiNmMxM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimTDOrLutAezA4fh9gKjR+/bWUnGxesEaHLe HwfVMfgQvtNZ7x3LHrCkgVBD8XMOdh7x+EEZAR3Zv1iobuJmPQIF5UIJd6URTiOV 7CHglQR0i4AzpxTR7VfjVHzXjNbexb7bl5lbBrIcZ1YzqPKftveZ2sfY5Ntdb4lF 2lQMNirRPWFiE/mhsq5KVu73gOfLrg7dY44pnIeNitBXz19eSuVwspA4KTnL1ib3 Jk8aUX7MClSIiV3lV0Ggp4dbsaDQCljpcm6F3gYqdPYU3UCEfKkFAGXGXusgtx5y Fzxa6do+tDleME59jfFnYQx7RDKjgHGrmFvVC/RnrYXygmN/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuznG0SRT4lNdiddIZb1bx55b1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmE4ZmYyMjEtMTQxMS0z ZDBkLTg0NzQtNDZmZDRmZmQwYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWptcma8uOB+d0JHBFOKLL3eG5l7wOk6J8F+uzBQtKdOHwSdlFo2oMS fMKCIoW5EDxqi2ZzCNmyXXl1CdhQyTaKt0ArXZRqHWOHgsP835cT0vWBH18cDY/V hIz2ybiH6rIyDWHt+p9MKk2Gx7Hxwh/BAb9gDMZYBGQ8o85D4tiV3h4U/pf0ZS/I +KCA+1EfpxW1DFIyM2mbWnfbaT8HYh2S5aouRfVkIR8l6UWuqipZ7RDTHN60HO50 DNBw2i1ETfFmtd/4TcohRs5qBW/J987z+/p/3nMikuyySQ1ipFwFO7vrzqmx6cp7 mDmE9kqJkqw3a7dcWeFzTs8kjjYXlLg= -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:45 2026 by rpki-client