$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fadf7ec-845b-3531-8e3d-b41f20f31fa7.roa File: 2fadf7ec-845b-3531-8e3d-b41f20f31fa7.roa (raw, json) Hash identifier: ITVZ1k361+HH17H3OF8b10y/gzqPm7NbgpPF9lmeUao= Subject key identifier: 88:F4:33:63:93:E0:F1:9A:C7:D0:35:BD:92:8F:4A:22:EE:27:07:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F218508ABE84CD997F83C15C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fadf7ec-845b-3531-8e3d-b41f20f31fa7.roa Signing time: Thu 10 Sep 2026 17:45:10 +0000 ROA not before: Thu 10 Sep 2026 17:45:10 +0000 ROA not after: Wed 09 Dec 2026 18:45:10 +0000 asID: 19905 IP address blocks: 173.19.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:85:08:ab:e8:4c:d9:97:f8:3c:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 17:45:10 2026 GMT Not After : Dec 9 18:45:10 2026 GMT Subject: CN=a4d801ba-aa71-4a7e-be03-35b902e0bcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:0a:62:3b:18:92:4c:11:df:e0:e6:12:e5: b3:02:a5:be:2f:41:8d:02:cf:ef:30:aa:ca:da:8b: c4:04:29:09:dd:b0:5f:39:e4:e2:cc:3b:74:b5:d1: 13:9f:93:1c:c2:1c:b8:93:d2:91:f7:36:ad:f7:5d: 67:b4:5a:0a:a9:51:39:6d:88:4b:d2:78:65:16:ca: 0b:b2:56:59:bc:19:b4:9f:e0:93:65:52:be:5a:c8: d9:48:52:e6:89:d7:d2:65:57:57:ce:54:81:b0:3c: 7b:54:29:f0:e2:d1:c0:3e:96:f5:04:85:4a:7a:b3: be:d9:88:de:e9:10:8b:3f:a8:ac:0c:31:76:65:c0: 15:1b:02:ba:a5:14:fe:31:65:62:8c:6a:9e:81:4f: 72:91:7d:12:d3:67:57:df:3b:5e:e2:a1:bc:05:d1: d0:97:08:40:96:34:fd:62:2f:fb:43:65:21:ef:31: 8d:2c:26:5d:26:a1:1e:79:7b:5c:28:7c:49:36:97: 83:60:99:83:13:5c:b3:57:31:b6:d0:00:ad:37:55: 51:26:4f:fb:e4:61:71:d3:9a:78:b4:e0:ae:1e:72: 5c:7d:3a:24:d8:6f:34:33:c3:60:4e:e0:ce:ff:f8: b1:c9:5d:c3:b7:79:16:bc:a7:f7:87:ca:bf:dc:2a: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F4:33:63:93:E0:F1:9A:C7:D0:35:BD:92:8F:4A:22:EE:27:07:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fadf7ec-845b-3531-8e3d-b41f20f31fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:06:40:58:15:3f:4e:e0:15:96:d1:94:ad:61:20:5a:b7:f6: d8:e4:56:09:f9:2d:37:86:47:bf:da:c5:39:39:d8:8d:a7:a1: 2c:e3:e6:e7:c7:b3:79:c6:da:b9:24:ab:7a:74:f3:5b:1b:72: db:64:51:11:22:c1:7f:a6:00:bb:07:9f:f5:44:95:cc:91:67: 1e:23:80:8f:14:e1:58:f2:77:c1:40:56:2d:f7:bd:8b:a4:7d: 6b:03:b2:0e:28:64:a4:b9:f4:5b:6f:4a:20:cd:39:09:8a:e7: 88:53:45:28:af:d3:1f:3f:12:5b:5c:78:2b:ca:e9:67:0e:02: 8a:5a:f3:45:53:c9:0d:56:33:24:83:e5:ce:1b:8a:0a:80:75: f4:72:e2:ba:f4:d3:aa:43:1c:52:cf:3e:ca:11:3e:61:5e:12: 9a:21:58:a2:98:0e:bf:7d:cd:24:c9:e9:30:7c:6e:16:43:55: e7:14:1f:6b:5d:22:68:cd:31:bb:b6:82:40:f4:a0:d0:28:43: d5:33:91:49:c2:d2:5a:79:af:83:26:fc:4a:a6:9e:40:6b:66: fc:d5:99:ff:56:37:ee:bb:03:26:ae:82:43:10:ce:a3:96:04: 2a:ef:b5:3e:c9:32:f2:82:5f:87:2b:fb:67:a1:d9:32:84:91: b8:ba:1a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8hhQir6EzZl/g8FcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMDE3NDUxMFoXDTI2MTIwOTE4NDUxMFowLzEtMCsGA1UEAxMk YTRkODAxYmEtYWE3MS00YTdlLWJlMDMtMzViOTAyZTBiY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXEKYjsYkkwR3+DmEuWzAqW+L0GNAs/vMKrK 2ovEBCkJ3bBfOeTizDt0tdETn5Mcwhy4k9KR9zat911ntFoKqVE5bYhL0nhlFsoL slZZvBm0n+CTZVK+WsjZSFLmidfSZVdXzlSBsDx7VCnw4tHAPpb1BIVKerO+2Yje 6RCLP6isDDF2ZcAVGwK6pRT+MWVijGqegU9ykX0S02dX3zte4qG8BdHQlwhAljT9 Yi/7Q2Uh7zGNLCZdJqEeeXtcKHxJNpeDYJmDE1yzVzG20ACtN1VRJk/75GFx05p4 tOCuHnJcfTok2G80M8NgTuDO//ixyV3Dt3kWvKf3h8q/3Cq1YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj0M2OT4PGax9A1vZKPSiLuJwcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZhZGY3ZWMtODQ1Yi0z NTMxLThlM2QtYjQxZjIwZjMxZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRN2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYGQFgVP07gFZbRlK1hIFq39tjkVgn5LTeGR7/axTk52I2noSzj5ufH s3nG2rkkq3p081sbcttkUREiwX+mALsHn/VElcyRZx4jgI8U4Vjyd8FAVi33vYuk fWsDsg4oZKS59FtvSiDNOQmK54hTRSiv0x8/EltceCvK6WcOAopa80VTyQ1WMySD 5c4bigqAdfRy4rr006pDHFLPPsoRPmFeEpohWKKYDr99zSTJ6TB8bhZDVecUH2td ImjNMbu2gkD0oNAoQ9UzkUnC0lp5r4Mm/EqmnkBrZvzVmf9WN+67AyaugkMQzqOW BCrvtT7JMvKCX4cr+2eh2TKEkbi6GsU= -----END CERTIFICATE-----Generated at Mon Sep 21 12:37:17 2026 by rpki-client