$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa File: 943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa (raw, json) Hash identifier: yi7GtuHurSWCmP+cr0pCNkHBwekzP9sWWBpverOirzU= Subject key identifier: C4:1A:67:9B:38:E8:75:0A:92:BA:18:72:67:15:30:AF:F5:66:89:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F06729C7BF24AA6B7A4752CA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9c:7b:f2:4a:a6:b7:a4:75:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=4b63f0bf-dea9-4762-afc8-dd3fc9077484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:dd:a4:4f:60:e0:51:54:5c:20:99:66:46: be:5b:3a:17:ea:26:47:b4:d2:c7:36:25:01:6c:a5: ae:a5:b9:f4:f6:c4:6b:41:a2:b3:8a:a2:53:0a:86: 7c:2d:ba:86:a8:63:79:1f:24:af:e8:39:49:4c:47: c4:fb:9b:c4:e2:a9:2b:53:ee:9c:d6:ee:65:33:0e: 75:29:47:01:21:b6:eb:67:71:6b:8a:cd:91:52:31: 18:72:e9:f3:41:0e:00:ba:9f:c9:51:2c:31:b1:31: 69:df:a0:d2:84:3e:c0:b5:6c:9b:fa:b7:a9:9c:94: 66:70:6d:82:f1:ec:9e:1a:bc:dc:25:b1:ba:77:c4: 7f:da:b3:88:f7:68:c1:99:c0:c8:4e:6b:63:d7:d2: 00:ac:7d:01:77:c5:15:f7:48:bf:c9:b3:ab:cc:37: 3a:05:a5:ee:ac:f3:52:42:e2:f9:2b:35:cf:70:f4: c6:eb:cb:02:c1:eb:d3:36:b3:ed:f6:48:ba:db:94: ad:cd:1e:3b:4d:87:f3:0b:9a:48:bf:5b:c8:0c:a3: 1d:1d:5e:00:0b:80:c2:23:d6:18:e1:f4:28:79:71: 66:1b:9c:c2:1d:ab:97:c5:7f:69:ff:47:b2:69:42: 91:2e:77:e6:56:22:3b:1b:95:7d:45:fb:8d:52:e3: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:67:9B:38:E8:75:0A:92:BA:18:72:67:15:30:AF:F5:66:89:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:70:b2:07:fd:70:f6:a8:04:78:3f:f4:25:d3:ec:27:83:fd: a6:2d:3a:08:e0:0a:e3:06:ac:9d:1c:77:d1:32:19:82:75:13: 39:b9:6b:dc:8a:fe:3e:a5:f5:21:09:ee:1b:95:15:af:58:fd: bf:b5:ef:f2:96:65:ed:86:51:e4:8a:a3:0f:65:71:cd:b2:ae: 67:f0:9a:64:75:73:f7:2d:cf:16:c0:4c:3b:db:50:74:6f:94: 3f:2d:53:71:54:70:1c:78:ac:d5:ff:4c:e9:82:28:d5:18:18: c7:cc:2d:8c:7f:4a:1b:dd:27:98:2b:fd:2e:2c:74:d0:84:6c: 81:f2:f4:34:a5:62:66:c0:d6:38:36:d5:63:0d:ec:63:f5:4d: 71:78:f4:f4:fe:31:b7:05:82:9e:cd:5a:27:0a:df:50:e0:8d: 92:6d:50:97:38:cf:59:ca:b7:f1:13:82:1e:99:1b:8d:64:15: 3e:e2:c7:f9:e4:ed:b3:55:2f:c7:79:0d:5d:84:de:23:3d:7a: 6a:77:3f:10:d0:01:28:2b:6f:93:12:b7:cd:6a:a2:68:7e:1a: 69:d7:5d:d5:13:57:8b:ca:46:9e:69:af:92:81:db:c4:22:e2: a6:09:83:10:92:fb:a5:a9:a7:98:e0:ac:ec:58:19:47:a2:ab: 75:77:51:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcpx78kqmt6R1LKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGI2M2YwYmYtZGVhOS00NzYyLWFmYzgtZGQzZmM5MDc3NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9XdpE9g4FFUXCCZZka+WzoX6iZHtNLHNiUB bKWupbn09sRrQaKziqJTCoZ8LbqGqGN5HySv6DlJTEfE+5vE4qkrU+6c1u5lMw51 KUcBIbbrZ3Fris2RUjEYcunzQQ4Aup/JUSwxsTFp36DShD7AtWyb+repnJRmcG2C 8eyeGrzcJbG6d8R/2rOI92jBmcDITmtj19IArH0Bd8UV90i/ybOrzDc6BaXurPNS QuL5KzXPcPTG68sCwevTNrPt9ki625StzR47TYfzC5pIv1vIDKMdHV4AC4DCI9YY 4fQoeXFmG5zCHauXxX9p/0eyaUKRLnfmViI7G5V9RfuNUuNrUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQaZ5s46HUKkroYcmcVMK/1ZomhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTQzZDc3NWUtYTgwYS0z YmQyLThmN2UtMWM1ZTUzYWYxOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVwsgf9cPaoBHg/9CXT7CeD/aYtOgjgCuMGrJ0cd9EyGYJ1Ezm5a9yK /j6l9SEJ7huVFa9Y/b+17/KWZe2GUeSKow9lcc2yrmfwmmR1c/ctzxbATDvbUHRv lD8tU3FUcBx4rNX/TOmCKNUYGMfMLYx/ShvdJ5gr/S4sdNCEbIHy9DSlYmbA1jg2 1WMN7GP1TXF49PT+MbcFgp7NWicK31DgjZJtUJc4z1nKt/ETgh6ZG41kFT7ix/nk 7bNVL8d5DV2E3iM9emp3PxDQASgrb5MSt81qomh+GmnXXdUTV4vKRp5pr5KB28Qi 4qYJgxCS+6Wpp5jgrOxYGUeiq3V3UeE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:31:42 2026 by rpki-client