$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a7adf18-b48d-3df6-8e11-da7f734e32a2.roa File: 8a7adf18-b48d-3df6-8e11-da7f734e32a2.roa (raw, json) Hash identifier: M/K7G9We7bBTFHJpvD9T+sadCG59q0m8JH8wOUwK+fA= Subject key identifier: 41:62:B5:45:A6:17:8B:40:4C:06:85:24:B3:00:DE:72:1C:FC:09:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F13024973E2A8A6C136B96880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a7adf18-b48d-3df6-8e11-da7f734e32a2.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:49:73:e2:a8:a6:c1:36:b9:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=a0f37f5c-a7ac-452b-a877-0bc93081ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:5a:fd:22:9e:45:c5:02:e6:2e:a8:a5:73: a8:12:ec:90:10:03:c6:15:98:32:2e:8f:26:2f:b7: 39:a3:7d:85:e2:4f:0d:84:a2:42:77:c3:e1:de:4d: 9f:e2:94:20:b3:1e:8e:71:42:47:f0:b0:79:6c:b5: c0:20:a9:da:04:9c:9c:95:63:8a:7c:ef:fa:95:12: 6f:5a:62:eb:7b:82:22:9a:cc:ed:7f:66:54:75:1e: 05:75:bb:b8:5d:d3:6f:88:2f:9f:b0:a2:1e:c8:b0: cc:4f:bd:61:fe:30:fb:5d:22:07:fa:b9:f1:cd:d6: bf:e9:44:15:cf:12:33:47:89:54:95:8a:43:af:62: cd:b9:a7:40:fb:28:d2:cc:58:67:cf:6b:de:9e:0e: d8:ab:d2:48:41:ad:2d:01:7a:ca:54:c6:9c:9d:24: 0e:a4:4e:f2:eb:df:22:99:14:2f:a0:7b:15:27:a5: 02:17:ed:a8:57:9e:49:73:d7:cc:ca:27:50:c5:b4: 56:31:87:75:64:71:90:ee:09:14:d7:f9:fa:b4:22: bd:c0:31:f5:5e:86:d4:33:f4:89:0c:be:13:dd:09: 69:e3:fc:7c:67:c5:75:7c:f8:bd:7d:65:fc:2c:74: fe:50:1b:f7:60:16:7b:f1:2e:26:6a:67:26:de:ee: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:62:B5:45:A6:17:8B:40:4C:06:85:24:B3:00:DE:72:1C:FC:09:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a7adf18-b48d-3df6-8e11-da7f734e32a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8c:3b:5a:ae:53:13:d3:ab:e4:a3:c1:b2:9e:f2:5d:d0:d0: 21:36:94:5f:af:53:f3:dd:aa:3a:17:c0:08:1b:37:d7:d2:10: b3:ff:f5:f8:be:46:d5:37:8b:11:4f:e1:53:ad:e7:82:2a:ca: 2d:48:a5:22:29:fa:91:2c:38:38:0a:04:04:98:f9:e2:3d:2c: 3a:30:88:a2:44:e8:b8:cd:ad:93:6c:d0:55:d2:e2:4f:56:ba: b0:90:99:a6:92:8a:2f:2c:4a:6e:87:ef:c7:30:bb:66:c8:b2: 28:82:db:33:e2:74:d2:bd:7a:9e:53:bc:60:dd:7b:b6:89:5a: a5:5b:db:40:4a:5a:25:71:ed:40:3c:bf:a2:d5:50:e4:0a:a5: a3:be:18:2a:ed:35:57:31:57:ef:63:31:14:25:e0:52:53:60: 90:e8:3b:18:1b:cb:cb:b0:fd:e4:51:2d:f6:21:f2:25:97:c6: 9b:32:61:81:1f:4b:00:44:4a:09:98:fc:cb:75:54:2a:e2:4a: f2:90:64:11:4f:3c:f3:1e:a6:c0:b0:46:58:cf:4a:45:40:c9: 46:06:b0:66:a4:80:96:23:ae:65:c0:5a:f6:a3:d9:f2:98:ca: e8:ff:6f:02:cf:65:bb:31:e4:2f:93:da:4c:03:01:17:55:83: ad:05:7d:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAklz4qimwTa5aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YTBmMzdmNWMtYTdhYy00NTJiLWE4NzctMGJjOTMwODFhZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIBa/SKeRcUC5i6opXOoEuyQEAPGFZgyLo8m L7c5o32F4k8NhKJCd8Ph3k2f4pQgsx6OcUJH8LB5bLXAIKnaBJyclWOKfO/6lRJv WmLre4Iimsztf2ZUdR4Fdbu4XdNviC+fsKIeyLDMT71h/jD7XSIH+rnxzda/6UQV zxIzR4lUlYpDr2LNuadA+yjSzFhnz2veng7Yq9JIQa0tAXrKVMacnSQOpE7y698i mRQvoHsVJ6UCF+2oV55Jc9fMyidQxbRWMYd1ZHGQ7gkU1/n6tCK9wDH1XobUM/SJ DL4T3Qlp4/x8Z8V1fPi9fWX8LHT+UBv3YBZ78S4mamcm3u4unwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFitUWmF4tATAaFJLMA3nIc/AmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGE3YWRmMTgtYjQ4ZC0z ZGY2LThlMTEtZGE3ZjczNGUzMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+MO1quUxPTq+SjwbKe8l3Q0CE2lF+vU/PdqjoXwAgbN9fSELP/9fi+ RtU3ixFP4VOt54Iqyi1IpSIp+pEsODgKBASY+eI9LDowiKJE6LjNrZNs0FXS4k9W urCQmaaSii8sSm6H78cwu2bIsiiC2zPidNK9ep5TvGDde7aJWqVb20BKWiVx7UA8 v6LVUOQKpaO+GCrtNVcxV+9jMRQl4FJTYJDoOxgby8uw/eRRLfYh8iWXxpsyYYEf SwBESgmY/Mt1VCriSvKQZBFPPPMepsCwRljPSkVAyUYGsGakgJYjrmXAWvaj2fKY yuj/bwLPZbsx5C+T2kwDARdVg60FfRg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:23:51 2026 by rpki-client