$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa File: 3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa (raw, json) Hash identifier: r5DSgLDh+Qnu7ZD33p7HPwpJ06kQLzfBj4a7Z+6j/7Q= Subject key identifier: 13:39:05:54:18:91:9B:BF:EC:83:6E:AA:B5:5E:AE:CC:08:13:90:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF87CC3801DA9911ABCCFBD90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c3:80:1d:a9:91:1a:bc:cf:bd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c7e5a107-464c-40c8-990d-8dfb41e84fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:fd:5d:27:fd:67:a7:c2:ac:6b:06:d8:3a: 17:9f:79:f5:97:a2:cd:ce:c2:05:82:06:7d:d2:dd: ca:72:a5:bd:28:3c:8c:6c:13:a0:72:51:26:83:ad: 63:9b:a1:77:2a:24:c7:16:3d:80:d7:a4:cf:f8:ea: 86:aa:d2:a2:21:35:91:f8:43:02:b9:a7:64:08:66: 6c:c4:f0:54:f1:3c:7f:8b:40:b1:62:30:46:fb:81: be:e6:9e:83:e7:3f:ec:db:74:42:62:a3:c2:88:06: e5:29:7d:cc:b1:ab:ea:af:5c:0c:66:3c:a6:09:a3: 7f:a3:ce:28:77:29:8e:28:d6:bc:24:3f:c8:09:f8: 8a:52:a5:86:63:f6:10:10:7f:23:91:0c:45:3a:4d: 98:94:84:9e:97:86:95:6d:ce:1c:10:7b:46:dc:34: 87:6e:c9:71:a9:37:7b:c2:3f:f2:bc:8d:00:0a:5c: bf:72:1a:e1:54:b5:e8:a3:fd:bf:ef:e8:75:ac:b1: c7:58:84:47:4a:da:dd:1b:ee:f3:9f:6d:35:ee:96: 5a:18:fd:b4:b3:ae:aa:1c:b0:81:2e:40:25:42:fe: fc:fc:ae:c6:69:b6:f9:57:c6:b2:5b:b7:2a:15:d6: dc:f0:93:fc:00:b3:98:ca:35:28:98:97:f2:b6:71: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:39:05:54:18:91:9B:BF:EC:83:6E:AA:B5:5E:AE:CC:08:13:90:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:47:97:2a:be:6a:92:7e:a5:82:2a:8c:7c:e1:1a:e3:24:c5: 7d:f7:8e:04:f4:5b:97:05:fd:5a:56:78:ca:6d:8e:df:79:a2: b1:d9:82:af:16:b0:9a:cb:fb:6c:10:7f:41:c0:1e:47:ab:76: 05:dd:96:e8:c6:97:78:f4:cd:91:b5:06:b9:1c:c3:15:5b:a7: e2:aa:bc:62:d9:c3:6f:16:b4:db:a1:09:53:51:10:3a:cb:d4: 93:69:77:bf:2a:33:00:d9:9e:91:d4:63:9d:5a:1e:5b:94:9f: f7:13:ba:d5:61:4b:2f:85:01:6e:ad:45:4a:82:e9:89:a7:b5: 4c:95:9c:a1:f3:1b:59:9d:b5:af:b2:2a:8f:78:d2:4f:2d:13: 50:b7:ec:dd:fd:b9:05:e8:e8:25:54:02:15:b5:90:48:6e:d6: 94:bd:07:89:a1:e8:c9:94:79:56:88:b6:77:29:f4:b0:83:74: f8:f4:dc:47:64:22:4e:10:56:43:60:31:07:88:47:3b:35:4b: 53:b3:1a:d8:45:87:32:33:8f:50:10:a9:b0:2a:45:68:14:24: c6:58:a1:2f:b7:83:65:62:bc:76:1f:b6:b1:df:86:85:05:66: bf:59:45:e8:dd:4a:82:03:e5:22:22:70:5e:a8:ac:3f:1e:22: 7b:04:a8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMOAHamRGrzPvZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YzdlNWExMDctNDY0Yy00MGM4LTk5MGQtOGRmYjQxZTg0ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilr9XSf9Z6fCrGsG2DoXn3n1l6LNzsIFggZ9 0t3KcqW9KDyMbBOgclEmg61jm6F3KiTHFj2A16TP+OqGqtKiITWR+EMCuadkCGZs xPBU8Tx/i0CxYjBG+4G+5p6D5z/s23RCYqPCiAblKX3Msavqr1wMZjymCaN/o84o dymOKNa8JD/ICfiKUqWGY/YQEH8jkQxFOk2YlISel4aVbc4cEHtG3DSHbslxqTd7 wj/yvI0ACly/chrhVLXoo/2/7+h1rLHHWIRHStrdG+7zn2017pZaGP20s66qHLCB LkAlQv78/K7Gabb5V8ayW7cqFdbc8JP8ALOYyjUomJfytnG+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM5BVQYkZu/7INuqrVerswIE5AeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2EyYjJlZWUtNGI4NS0z YzFiLWIyYTYtYWY2MGUzNDZkOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Hlyq+apJ+pYIqjHzhGuMkxX33jgT0W5cF/VpWeMptjt95orHZgq8W sJrL+2wQf0HAHkerdgXdlujGl3j0zZG1BrkcwxVbp+KqvGLZw28WtNuhCVNREDrL 1JNpd78qMwDZnpHUY51aHluUn/cTutVhSy+FAW6tRUqC6YmntUyVnKHzG1mdta+y Ko940k8tE1C37N39uQXo6CVUAhW1kEhu1pS9B4mh6MmUeVaItncp9LCDdPj03Edk Ik4QVkNgMQeIRzs1S1OzGthFhzIzj1AQqbAqRWgUJMZYoS+3g2VivHYftrHfhoUF Zr9ZRejdSoID5SIicF6orD8eInsEqBk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:12:26 2026 by rpki-client