$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/577a8af6-f9ea-3108-9f84-6c2612679cb5.roa File: 577a8af6-f9ea-3108-9f84-6c2612679cb5.roa (raw, json) Hash identifier: 3XrWPpIs2UE8VvTzB/b3gszWelJDTLuphxLsrIyd2p8= Subject key identifier: B1:F7:37:15:45:83:F0:C6:53:92:82:32:D4:12:41:F7:2D:9D:1F:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D1DBB071F096F88F30100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/577a8af6-f9ea-3108-9f84-6c2612679cb5.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.19.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1d:bb:07:1f:09:6f:88:f3:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=4b908122-ad73-4dd8-908b-24ab785d323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:cb:47:44:b5:0e:d5:d0:57:3c:2c:21:70: e7:73:94:52:11:64:05:19:d2:7e:94:53:27:8f:ac: a9:72:c9:e3:db:e4:1f:3f:8e:03:62:59:f6:4d:bf: f8:78:25:fa:6b:96:8e:fe:54:f9:1b:fd:68:71:b6: 69:64:ce:a1:1c:a2:10:ec:e8:5e:07:98:d0:d2:99: 9b:8f:b5:80:36:fa:14:20:d4:cb:48:0f:54:21:52: 83:6a:7c:45:4b:62:10:74:54:3f:62:ee:c0:d9:b3: 83:39:59:33:2e:81:6a:fd:29:98:14:6d:de:88:d3: 0a:de:3e:c9:e6:21:cf:ca:8f:af:c3:52:eb:00:38: 10:01:1b:eb:1a:68:00:2a:a1:79:9d:3c:2a:f2:2e: d1:dd:7a:14:0c:fd:90:75:7f:8b:87:81:09:56:db: aa:bb:61:bf:b1:e1:6f:53:f8:4b:00:bf:22:a6:fd: 84:9d:72:fa:0a:52:d9:01:58:c4:98:1a:24:59:41: af:d7:1e:a9:a6:25:d4:6f:fe:12:d0:48:e5:20:33: 95:cd:e5:15:53:60:e8:cc:da:01:b0:84:72:0d:1e: b2:ee:04:7e:95:b2:a7:bf:84:5e:dc:aa:ab:dc:ce: 0f:47:be:66:8b:be:61:b6:b4:f0:9c:9d:d4:81:15: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:37:15:45:83:F0:C6:53:92:82:32:D4:12:41:F7:2D:9D:1F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/577a8af6-f9ea-3108-9f84-6c2612679cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3f:fe:aa:2f:5b:76:1c:56:a3:ff:77:74:dd:bf:c8:a5:f3: 66:3e:7f:7b:74:2d:be:27:a9:8c:6b:38:bb:74:ff:dc:b8:48: f4:47:9c:6f:1d:19:14:4b:0b:ea:f0:34:06:5c:ef:5e:10:04: 00:10:70:19:a6:49:72:48:83:57:32:99:7d:f2:87:65:2a:eb: 22:d0:57:d5:32:18:96:c6:b2:73:34:4d:4e:f9:56:d3:5f:66: 93:ef:82:0e:81:95:42:f5:00:df:7d:18:86:50:74:12:28:08: 0f:6a:89:e0:23:65:27:16:67:b9:05:6e:92:c0:a0:49:57:b6: 20:44:41:53:c8:bd:24:8f:05:9b:48:ca:ca:e9:cb:69:a0:8f: 13:8b:6d:fd:10:da:ff:76:cb:54:71:cc:b6:a0:bf:a0:0d:92: 8a:a3:dd:dc:f6:bf:0f:3d:5c:73:0c:a1:f8:bf:38:55:c6:91: af:3e:af:b4:11:07:e6:b9:de:27:d9:c7:d3:7d:7d:cd:b2:00: 04:78:a9:08:3c:b5:12:db:d1:72:47:96:37:5c:76:e6:96:f7: 96:a7:91:fd:72:29:8a:d7:16:a2:d4:d2:b8:33:46:a2:ec:26: 55:c6:6e:5b:28:a7:b1:c9:54:b1:0c:a3:ea:51:be:eb:fe:b5: c4:75:70:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHR27Bx8Jb4jzAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NGI5MDgxMjItYWQ3My00ZGQ4LTkwOGItMjRhYjc4NWQzMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKjLR0S1DtXQVzwsIXDnc5RSEWQFGdJ+lFMn j6ypcsnj2+QfP44DYln2Tb/4eCX6a5aO/lT5G/1ocbZpZM6hHKIQ7OheB5jQ0pmb j7WANvoUINTLSA9UIVKDanxFS2IQdFQ/Yu7A2bODOVkzLoFq/SmYFG3eiNMK3j7J 5iHPyo+vw1LrADgQARvrGmgAKqF5nTwq8i7R3XoUDP2QdX+Lh4EJVtuqu2G/seFv U/hLAL8ipv2EnXL6ClLZAVjEmBokWUGv1x6ppiXUb/4S0EjlIDOVzeUVU2DozNoB sIRyDR6y7gR+lbKnv4Re3Kqr3M4PR75mi75htrTwnJ3UgRXtdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH3NxVFg/DGU5KCMtQSQfctnR/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTc3YThhZjYtZjllYS0z MTA4LTlmODQtNmMyNjEyNjc5Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8//qovW3YcVqP/d3Tdv8il82Y+f3t0Lb4nqYxrOLt0/9y4SPRHnG8d GRRLC+rwNAZc714QBAAQcBmmSXJIg1cymX3yh2Uq6yLQV9UyGJbGsnM0TU75VtNf ZpPvgg6BlUL1AN99GIZQdBIoCA9qieAjZScWZ7kFbpLAoElXtiBEQVPIvSSPBZtI ysrpy2mgjxOLbf0Q2v92y1RxzLagv6ANkoqj3dz2vw89XHMMofi/OFXGka8+r7QR B+a53ifZx9N9fc2yAAR4qQg8tRLb0XJHljdcduaW95ankf1yKYrXFqLU0rgzRqLs JlXGblsop7HJVLEMo+pRvuv+tcR1cKA= -----END CERTIFICATE-----Generated at Sun Sep 20 20:49:00 2026 by rpki-client