$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa File: 5d3267ca-6e43-3335-8054-b8605f4ab679.roa (raw, json) Hash identifier: uvHtUxDSW84iCtkFbVMJTcOoD7N309YYv9jYPBIYbSc= Subject key identifier: 42:58:0A:4C:28:38:90:38:EC:B2:B8:0B:EF:E2:5A:73:D7:30:BC:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A65218F18283346125240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:65:21:8f:18:28:33:46:12:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63cdd84e-9b70-42d2-b026-a0bfe26f2df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:89:b0:72:26:de:d1:83:bd:f8:ba:f2:65: f8:2a:73:65:be:6d:52:b4:b5:5d:b8:8d:ff:08:fe: da:55:6e:ed:d5:02:80:77:1b:da:ab:b8:ba:d0:c7: d9:3f:b5:47:b6:29:06:79:10:9c:6c:58:72:15:68: 2c:02:60:b1:23:27:f6:37:c8:fe:b7:b2:9d:54:89: 98:9f:94:0e:c0:b3:90:39:6b:1d:38:f0:d2:31:c2: 6a:58:54:33:74:75:79:3a:9c:df:8c:dc:d2:98:1a: c9:58:2a:cd:e9:24:10:2d:ef:1a:2e:15:78:3f:ee: 25:d7:d0:98:d5:3a:c6:6a:6a:d7:13:c0:d0:b4:14: 28:86:73:68:ab:9d:e4:00:73:7a:67:cd:4f:b1:61: fb:41:95:28:de:54:2a:a8:0c:5f:9a:98:ae:6b:b8: b8:40:2e:34:09:0d:99:58:24:b1:02:83:54:aa:e6: 03:db:38:11:06:63:51:c9:e7:b6:f5:d4:d8:a8:dd: 26:6a:0e:2d:6a:84:c3:1a:e4:ec:c0:17:31:3f:12: bf:50:81:09:11:08:73:3a:92:0c:91:bf:63:ee:38: 80:d8:2f:ef:f5:8b:86:0a:f2:7d:1f:93:3e:00:17: c2:24:18:b0:f4:3b:73:b1:57:cc:d2:c2:0e:ea:69: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:58:0A:4C:28:38:90:38:EC:B2:B8:0B:EF:E2:5A:73:D7:30:BC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:88:d1:c3:51:9e:42:75:61:73:f2:48:31:72:29:05:1f:ae: 2d:7e:e3:49:00:93:0e:c8:31:a0:b6:d4:78:48:3d:46:5e:4e: 9e:57:65:29:7e:cb:b6:13:8f:11:d0:7b:ec:74:fc:30:9d:50: 85:fc:98:c1:b5:c6:cb:6b:3b:7e:50:37:3d:52:c2:21:45:4f: 6c:7d:8f:5e:8d:bf:68:e3:9a:c9:3d:29:81:e2:80:93:c6:51: 96:c5:a6:12:c0:51:83:2b:17:1b:24:91:ef:e1:42:6b:6f:d5: ba:1b:ab:25:62:a7:b7:8f:d3:44:ed:b1:1d:bc:55:91:43:e3: 5d:2b:0b:35:39:af:e4:3b:e9:a2:ef:b9:dc:ce:5f:3e:f7:8f: a7:2b:42:02:9d:ee:2f:34:d4:1f:30:66:98:54:33:f3:11:cf: 57:e9:6a:29:72:56:ad:b2:fa:7c:25:86:0a:28:fb:41:e3:81: de:53:47:66:95:37:00:a3:9e:95:b0:91:2e:04:57:6a:01:87: 91:00:62:a8:6f:04:60:a5:3d:68:05:4e:ea:ae:fb:95:9c:39: bd:fb:7c:e8:89:fa:a6:9c:35:76:d7:15:5f:49:ee:0b:61:d0: f0:fa:82:be:00:a1:8f:38:fd:54:f5:47:c0:04:2d:28:99:ce: 24:69:a9:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JimUhjxgoM0YSUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjNjZGQ4NGUtOWI3MC00MmQyLWIwMjYtYTBiZmUyNmYyZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36+JsHIm3tGDvfi68mX4KnNlvm1StLVduI3/ CP7aVW7t1QKAdxvaq7i60MfZP7VHtikGeRCcbFhyFWgsAmCxIyf2N8j+t7KdVImY n5QOwLOQOWsdOPDSMcJqWFQzdHV5OpzfjNzSmBrJWCrN6SQQLe8aLhV4P+4l19CY 1TrGamrXE8DQtBQohnNoq53kAHN6Z81PsWH7QZUo3lQqqAxfmpiua7i4QC40CQ2Z WCSxAoNUquYD2zgRBmNRyee29dTYqN0mag4taoTDGuTswBcxPxK/UIEJEQhzOpIM kb9j7jiA2C/v9YuGCvJ9H5M+ABfCJBiw9DtzsVfM0sIO6mkc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJYCkwoOJA47LK4C+/iWnPXMLyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQzMjY3Y2EtNmU0My0z MzM1LTgwNTQtYjg2MDVmNGFiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKI0cNRnkJ1YXPySDFyKQUfri1+40kAkw7IMaC21HhIPUZeTp5XZSl+ y7YTjxHQe+x0/DCdUIX8mMG1xstrO35QNz1SwiFFT2x9j16Nv2jjmsk9KYHigJPG UZbFphLAUYMrFxskke/hQmtv1bobqyVip7eP00TtsR28VZFD410rCzU5r+Q76aLv udzOXz73j6crQgKd7i801B8wZphUM/MRz1fpailyVq2y+nwlhgoo+0Hjgd5TR2aV NwCjnpWwkS4EV2oBh5EAYqhvBGClPWgFTuqu+5WcOb37fOiJ+qacNXbXFV9J7gth 0PD6gr4AoY84/VT1R8AELSiZziRpqUE= -----END CERTIFICATE-----Generated at Mon Sep 28 23:34:18 2026 by rpki-client