$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa File: 3b8538c7-b1af-312d-985d-bfad849eca5a.roa (raw, json) Hash identifier: PAlivdlQZWYQC4p+DK9jxivEZNsw/O5AlPpg2KuS80Y= Subject key identifier: 23:F4:D1:1F:28:1A:DC:71:B5:A6:9F:62:43:9F:32:D5:5A:30:F6:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972DA5A18D9CD9298278640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.29.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:da:5a:18:d9:cd:92:98:27:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a24441b-b8fb-40bc-9e3b-6b1f89f90559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:fa:42:33:07:70:49:c6:48:7c:7d:9a:d0: 16:65:93:d6:ba:a0:ba:7f:f5:4d:f3:af:7d:8a:01: 08:56:20:b1:ee:63:ae:55:e1:01:97:65:fc:ae:2d: 32:10:0f:9b:05:92:47:5f:14:56:81:91:73:6e:26: 75:f1:c5:99:fe:0b:5f:38:59:f6:b9:d4:ee:fc:66: bc:ca:c4:a9:36:4e:60:69:4a:ca:30:b5:d8:41:cc: 66:c0:e0:c6:bf:b3:ef:a1:97:8d:a5:aa:24:57:21: e6:2a:d3:3a:2d:71:32:ba:5f:d2:f0:29:02:f5:d4: 79:af:d1:38:de:99:f3:cc:a4:5f:e3:bb:2d:aa:57: ce:0a:80:1b:82:35:7a:18:c4:e7:69:ab:3e:d5:a8: 40:b4:58:2d:b2:ef:43:bf:fd:2d:dd:ef:9b:18:af: 84:06:80:1a:57:83:7a:fb:67:17:ba:3f:6c:1e:ea: f8:cb:ce:18:7a:a1:96:af:89:46:4a:a5:49:3d:0e: 64:06:74:9c:b7:12:25:54:8b:f4:74:5e:f5:75:dc: a8:3a:84:ec:3a:86:1b:b3:df:af:57:5f:6d:79:f6: 8f:e6:78:f6:87:12:fe:72:51:5c:4e:46:46:ed:1d: 73:9c:6c:ec:6b:8e:b2:96:45:cb:eb:b7:81:97:e8: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:D1:1F:28:1A:DC:71:B5:A6:9F:62:43:9F:32:D5:5A:30:F6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:03:fe:e7:fe:2f:90:ed:12:4f:a7:65:53:03:ad:6f:f1: 5e:4e:31:07:47:63:7c:9f:ce:4b:07:ca:10:ff:bc:c0:9e:6c: 74:bd:74:e6:ed:67:7b:70:ad:71:b2:8b:06:c2:3d:62:be:c8: 16:70:b9:92:bb:e6:13:60:52:30:5a:6c:e1:c9:db:d2:e6:e5: 58:42:63:61:51:79:ed:51:cc:30:8c:dd:93:9f:53:5b:21:14: 57:75:13:c6:61:bf:71:1b:61:66:ee:0c:db:28:18:db:09:1e: 74:50:3b:ff:d0:34:20:41:ee:6a:cd:0c:4b:20:c3:01:79:d8: 77:d7:20:6f:60:90:e7:d1:5f:2c:5f:a7:c2:18:5b:87:84:c0: 3b:01:11:42:5a:87:37:76:cb:27:fa:95:57:30:a3:e8:8e:3f: 66:50:94:30:d8:b2:3b:e8:2f:27:46:25:5d:2f:23:e9:b3:11: fb:df:3e:4c:63:bf:47:6d:92:2d:85:d6:9b:22:4b:ca:ef:bc: a5:8e:c8:f3:ea:3c:a3:18:0b:c4:90:ac:ba:73:82:8c:b9:f2: 18:2b:09:65:1e:df:a2:35:8f:28:96:a6:4c:b3:cd:04:1c:d8: c4:a2:df:b7:e7:56:9e:70:04:b8:30:f3:76:7d:d1:e1:de:dc: 86:e2:b5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctpaGNnNkpgnhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmEyNDQ0MWItYjhmYi00MGJjLTllM2ItNmIxZjg5ZjkwNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAH6QjMHcEnGSHx9mtAWZZPWuqC6f/VN8699 igEIViCx7mOuVeEBl2X8ri0yEA+bBZJHXxRWgZFzbiZ18cWZ/gtfOFn2udTu/Ga8 ysSpNk5gaUrKMLXYQcxmwODGv7PvoZeNpaokVyHmKtM6LXEyul/S8CkC9dR5r9E4 3pnzzKRf47stqlfOCoAbgjV6GMTnaas+1ahAtFgtsu9Dv/0t3e+bGK+EBoAaV4N6 +2cXuj9sHur4y84YeqGWr4lGSqVJPQ5kBnSctxIlVIv0dF71ddyoOoTsOoYbs9+v V19tefaP5nj2hxL+clFcTkZG7R1znGzsa46ylkXL67eBl+jzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP00R8oGtxxtaafYkOfMtVaMPbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I4NTM4YzctYjFhZi0z MTJkLTk4NWQtYmZhZDg0OWVjYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQA/7n/i+Q7RJPp2VTA61v8V5OMQdHY3yfzksHyhD/vMCebHS9dObt Z3twrXGyiwbCPWK+yBZwuZK75hNgUjBabOHJ29Lm5VhCY2FRee1RzDCM3ZOfU1sh FFd1E8Zhv3EbYWbuDNsoGNsJHnRQO//QNCBB7mrNDEsgwwF52HfXIG9gkOfRXyxf p8IYW4eEwDsBEUJahzd2yyf6lVcwo+iOP2ZQlDDYsjvoLydGJV0vI+mzEfvfPkxj v0dtki2F1psiS8rvvKWOyPPqPKMYC8SQrLpzgoy58hgrCWUe36I1jyiWpkyzzQQc 2MSi37fnVp5wBLgw83Z90eHe3IbitZI= -----END CERTIFICATE-----Generated at Mon Sep 28 22:52:10 2026 by rpki-client