$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77ac51f2-948e-36ea-8e95-c53dc0a9f59c.roa File: 77ac51f2-948e-36ea-8e95-c53dc0a9f59c.roa (raw, json) Hash identifier: jnCxCKM3yOLWbmmq3Ov5Xp9FqsS0w3Nz2YbfLKHiyH8= Subject key identifier: 9D:DA:09:86:83:8E:C3:42:20:C8:BA:37:34:3F:D4:07:BF:2E:FD:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F15CD07ABFF2276A8246A6080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77ac51f2-948e-36ea-8e95-c53dc0a9f59c.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.29.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:07:ab:ff:22:76:a8:24:6a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=cb788d29-58f4-4e2b-8c0c-01652e504796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:b6:4a:75:4a:75:6b:bd:e2:f8:be:6a:2c: d6:b1:36:82:c5:4e:2d:56:2c:a7:b2:1f:a9:43:60: 49:38:b1:98:10:62:fa:77:0c:97:6e:14:84:ad:8f: e6:22:fa:03:51:5a:f6:dd:7e:ef:19:7b:b3:b7:76: 89:d7:ae:15:95:38:83:05:48:9a:13:2d:57:ac:7d: 83:cf:9e:7b:db:89:5e:e7:27:2c:e5:de:b4:cd:5f: c4:3f:05:4b:0b:28:68:67:d6:78:f8:03:29:ba:71: b7:5d:84:bd:4f:5a:61:1a:4b:66:12:f3:f5:52:84: ca:61:3f:cf:b7:ee:cf:45:02:b9:75:5e:20:81:9c: bf:df:27:7a:60:ee:17:28:04:c9:30:77:c3:61:1a: bf:4f:88:89:5a:95:57:6a:06:8b:11:2e:6c:1c:e0: f1:26:6f:6c:3b:9a:97:f0:a7:4e:71:58:97:c8:34: 1a:19:ef:7e:4e:4b:b6:41:a5:0e:01:24:9d:b8:88: 8f:5c:45:cd:e6:b9:19:39:4a:bd:4f:45:d9:64:ed: eb:7b:01:a1:b3:ca:ba:08:01:f2:48:f0:fe:da:85: 35:42:ee:e9:99:71:be:a4:d9:32:9d:32:68:c5:ea: e4:f8:61:cd:c2:76:20:20:e9:53:7c:c5:28:c9:f6: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:09:86:83:8E:C3:42:20:C8:BA:37:34:3F:D4:07:BF:2E:FD:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77ac51f2-948e-36ea-8e95-c53dc0a9f59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ea:d1:b4:f7:d5:1a:f1:3e:20:f3:23:f0:78:6a:6a:69:67: 5d:5b:77:67:26:2a:4b:51:dd:e0:4a:2f:dc:1d:8e:3f:ee:01: d4:9b:c5:1b:59:bd:14:40:35:f6:f1:ea:47:87:41:94:97:4e: d3:61:1e:f7:f7:b8:33:e0:af:8a:f4:77:37:0c:ed:84:8e:60: 50:b0:ad:80:dd:85:19:d3:1a:0b:8a:7a:2b:1a:ad:1a:19:f7: 4b:a1:54:7c:a7:b6:1c:2a:39:f8:49:ea:7d:fe:dd:68:7d:f5: 06:e8:0c:60:6d:72:5c:68:9d:02:6c:ee:b9:df:0a:22:39:6c: f7:f7:b6:46:4b:a3:d4:08:42:e3:3a:23:18:57:a7:40:d0:62: d2:c5:34:2f:0f:da:cd:13:ef:ed:ed:9c:10:a2:3e:c9:6c:81: 09:d9:29:2a:1d:97:e6:73:30:68:05:b0:44:95:bc:ea:1f:fc: 17:86:ee:4c:b6:5b:84:ac:97:7b:4d:7d:88:05:00:88:46:df: 52:79:2c:0d:c4:6e:2a:bc:25:54:ee:78:c2:a4:29:a4:65:d2: a3:31:29:61:ac:4c:d9:89:00:6d:2c:94:65:e2:9a:02:fa:56: f4:b7:07:7f:ca:44:17:c2:3c:af:4a:a1:85:74:4b:e8:32:d6: 60:6b:47:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQer/yJ2qCRqYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk Y2I3ODhkMjktNThmNC00ZTJiLThjMGMtMDE2NTJlNTA0Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo22SnVKdWu94vi+aizWsTaCxU4tViynsh+p Q2BJOLGYEGL6dwyXbhSErY/mIvoDUVr23X7vGXuzt3aJ164VlTiDBUiaEy1XrH2D z55724le5ycs5d60zV/EPwVLCyhoZ9Z4+AMpunG3XYS9T1phGktmEvP1UoTKYT/P t+7PRQK5dV4ggZy/3yd6YO4XKATJMHfDYRq/T4iJWpVXagaLES5sHODxJm9sO5qX 8KdOcViXyDQaGe9+Tku2QaUOASSduIiPXEXN5rkZOUq9T0XZZO3rewGhs8q6CAHy SPD+2oU1Qu7pmXG+pNkynTJoxerk+GHNwnYgIOlTfMUoyfZFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3aCYaDjsNCIMi6NzQ/1Ae/Lv1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzdhYzUxZjItOTQ4ZS0z NmVhLThlOTUtYzUzZGMwYTlmNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfq0bT31RrxPiDzI/B4amppZ11bd2cmKktR3eBKL9wdjj/uAdSbxRtZ vRRANfbx6keHQZSXTtNhHvf3uDPgr4r0dzcM7YSOYFCwrYDdhRnTGguKeisarRoZ 90uhVHynthwqOfhJ6n3+3Wh99QboDGBtclxonQJs7rnfCiI5bPf3tkZLo9QIQuM6 IxhXp0DQYtLFNC8P2s0T7+3tnBCiPslsgQnZKSodl+ZzMGgFsESVvOof/BeG7ky2 W4Ssl3tNfYgFAIhG31J5LA3Ebiq8JVTueMKkKaRl0qMxKWGsTNmJAG0slGXimgL6 VvS3B3/KRBfCPK9KoYV0S+gy1mBrRxk= -----END CERTIFICATE-----Generated at Thu Sep 24 01:44:16 2026 by rpki-client