$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aaa733a-7556-3119-9595-8fc6dc587715.roa File: 4aaa733a-7556-3119-9595-8fc6dc587715.roa (raw, json) Hash identifier: 6mib/IxEeVjeREHdnR0Vq/oX2yYj52al0fRwOpbjjws= Subject key identifier: 88:B4:C6:2C:D4:82:01:68:13:C4:2A:1E:9A:6A:74:56:14:0F:2E:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6A0EFC121C39E0E90080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aaa733a-7556-3119-9595-8fc6dc587715.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.29.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6a:0e:fc:12:1c:39:e0:e9:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=21b37804-76ef-413b-bb56-3f7e7be77cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:84:a3:48:d1:a0:68:86:7c:03:83:6b:ab: 32:67:ee:8f:de:eb:9b:cc:b2:6f:76:9a:63:64:1b: cb:6e:b3:01:45:4d:0c:28:77:55:ff:e9:f4:d8:2c: 46:6a:64:12:10:de:af:78:43:4c:81:7c:12:c8:65: 4d:f2:b3:d8:a3:50:3e:44:2f:2d:3f:70:c3:99:1f: ad:71:1d:f6:d5:89:31:9e:54:16:a7:bf:fc:bd:61: d1:75:fd:51:aa:b0:94:81:f1:9b:be:34:67:13:9e: 60:9c:39:34:7e:86:75:73:fa:e4:30:3b:1b:c6:99: e6:5a:e1:3a:4d:8f:d7:0c:c2:64:2b:1b:2a:04:49: 9f:a4:c3:5c:2f:aa:24:61:91:6d:c9:51:3e:d1:ca: db:1f:ca:e8:44:ec:55:ec:75:7f:a8:44:64:ba:32: 28:58:fd:66:e5:2e:69:14:17:70:48:79:8a:05:c9: 08:25:80:e9:9b:15:6e:f4:47:58:fb:f9:3e:4b:aa: dc:a1:ad:67:5d:d0:b4:b9:4c:e4:29:4d:d5:98:16: d9:97:fb:8c:78:be:ea:87:41:36:ec:a4:3e:21:fa: 7a:2c:86:a7:8b:7f:28:e0:38:26:cc:f2:46:08:6c: 9f:ac:30:f2:03:b6:32:8c:60:fd:40:95:69:a4:88: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:C6:2C:D4:82:01:68:13:C4:2A:1E:9A:6A:74:56:14:0F:2E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aaa733a-7556-3119-9595-8fc6dc587715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bc:96:6e:61:57:3e:cc:a0:42:1e:2b:84:5c:4c:b4:76:2e: 86:ae:f3:09:86:c5:54:5b:db:6b:ec:41:0c:09:22:2f:de:08: da:78:d2:ef:7a:97:9a:42:e4:60:da:1c:87:08:47:d7:9a:2c: a0:5a:43:f4:61:f5:7a:d5:95:48:64:3d:0b:62:16:f5:67:50: 04:2a:e1:e8:4b:45:96:0d:e8:e8:1e:56:2b:0a:07:dd:ae:da: 67:2c:d2:7e:a4:ed:bf:11:53:c4:63:8c:14:90:18:5d:cb:76: 78:91:0d:f6:77:67:3d:f0:a2:80:87:51:8c:60:f0:f6:01:85: 01:a6:af:62:3a:03:17:d3:f6:6d:49:ba:08:30:35:ae:4d:83: 40:4c:dd:ef:f3:87:5d:80:29:95:1a:0f:ab:7c:14:27:4f:fb: ab:62:ba:72:0a:9f:47:6b:bd:41:ec:a0:97:3f:55:ee:16:21: 17:49:93:39:e4:f7:2c:5d:e2:62:04:7d:3c:08:81:b9:31:9e: 7c:77:86:e8:63:2b:51:42:e8:0e:19:da:95:24:67:2c:e6:9d: ca:68:a3:73:c1:f0:df:08:b4:60:c8:d2:ea:4d:01:40:e9:1f: 1a:2c:bb:eb:0d:57:53:50:b8:55:5a:e7:74:27:a2:a9:4b:47: 37:44:31:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWoO/BIcOeDpAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjFiMzc4MDQtNzZlZi00MTNiLWJiNTYtM2Y3ZTdiZTc3Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnKEo0jRoGiGfAODa6syZ+6P3uubzLJvdppj ZBvLbrMBRU0MKHdV/+n02CxGamQSEN6veENMgXwSyGVN8rPYo1A+RC8tP3DDmR+t cR321YkxnlQWp7/8vWHRdf1RqrCUgfGbvjRnE55gnDk0foZ1c/rkMDsbxpnmWuE6 TY/XDMJkKxsqBEmfpMNcL6okYZFtyVE+0crbH8roROxV7HV/qERkujIoWP1m5S5p FBdwSHmKBckIJYDpmxVu9EdY+/k+S6rcoa1nXdC0uUzkKU3VmBbZl/uMeL7qh0E2 7KQ+Ifp6LIani38o4DgmzPJGCGyfrDDyA7YyjGD9QJVppIjnkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi0xizUggFoE8QqHppqdFYUDy6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGFhYTczM2EtNzU1Ni0z MTE5LTk1OTUtOGZjNmRjNTg3NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG8lm5hVz7MoEIeK4RcTLR2Loau8wmGxVRb22vsQQwJIi/eCNp40u96 l5pC5GDaHIcIR9eaLKBaQ/Rh9XrVlUhkPQtiFvVnUAQq4ehLRZYN6OgeVisKB92u 2mcs0n6k7b8RU8RjjBSQGF3LdniRDfZ3Zz3wooCHUYxg8PYBhQGmr2I6AxfT9m1J uggwNa5Ng0BM3e/zh12AKZUaD6t8FCdP+6tiunIKn0drvUHsoJc/Ve4WIRdJkznk 9yxd4mIEfTwIgbkxnnx3huhjK1FC6A4Z2pUkZyzmncpoo3PB8N8ItGDI0upNAUDp Hxosu+sNV1NQuFVa53QnoqlLRzdEMYI= -----END CERTIFICATE-----Generated at Mon Sep 28 21:19:48 2026 by rpki-client