$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2c0761d-b085-3979-a391-1a4e8c926e4a.roa File: b2c0761d-b085-3979-a391-1a4e8c926e4a.roa (raw, json) Hash identifier: ugAFFyqpT8JV61LQUBPAIhZEPq+Q+EDZO3BoOwZCv7o= Subject key identifier: D1:0C:CC:81:85:91:49:36:91:E6:0B:F0:31:C5:C5:C5:E7:50:1C:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0672A26E32391B2674B92C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2c0761d-b085-3979-a391-1a4e8c926e4a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a2:6e:32:39:1b:26:74:b9:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=232647b3-87f4-4fe3-919c-19811e8e8442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:aa:9f:0a:3f:eb:22:1a:49:6a:48:e1:64: 7b:a9:17:04:e3:2c:19:31:0d:63:96:42:99:7a:93: 48:88:58:8b:52:56:13:c6:bf:dd:04:38:5f:d2:7e: 46:a8:90:3f:91:0f:1c:74:24:4b:a7:f0:c1:6d:fc: 41:02:de:18:7c:3f:87:85:35:16:a0:44:3f:9a:ef: 91:91:f8:19:81:eb:87:c6:14:9e:57:f0:5f:ca:11: d6:71:24:a8:88:61:13:f9:0d:3e:d7:51:1d:b6:4c: 43:b9:9a:d1:d9:19:3b:f0:9a:d6:5f:0f:ea:46:cc: 71:a9:55:45:21:5f:a7:7c:10:2f:07:8e:e7:73:1c: 83:4b:b6:50:72:00:88:38:70:80:37:11:3b:2b:97: 49:8d:53:69:a4:a5:41:35:7b:b9:53:d0:3b:55:83: 1b:d1:45:49:59:89:3a:51:95:31:13:c1:05:9e:9e: 60:8a:8c:96:49:72:fa:f0:e2:dd:f7:26:24:2f:dc: 65:77:9b:2f:90:d9:fd:c6:c2:b5:d5:e4:b3:35:0f: 35:29:5d:18:13:b4:51:8f:bd:13:e5:5d:f5:7b:47: 7a:0e:5a:3f:98:87:a7:2c:49:3f:1d:60:bf:3a:78: f0:a9:68:05:1f:5c:fe:a8:80:10:cd:cd:3d:f0:2c: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0C:CC:81:85:91:49:36:91:E6:0B:F0:31:C5:C5:C5:E7:50:1C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2c0761d-b085-3979-a391-1a4e8c926e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5b:be:05:a4:52:9e:88:5c:77:b4:7c:79:17:fc:82:6e:59: ae:e3:4f:3b:12:26:e5:40:e3:2a:de:1b:20:fc:ec:8f:83:2d: 64:69:fd:2f:b9:05:1f:ff:ba:cc:35:9e:06:d6:36:42:9b:c0: 49:5b:74:b1:49:7d:1c:02:af:3d:85:99:09:a0:70:8f:af:69: b0:66:43:b7:b4:c2:a0:bb:b4:57:03:44:bb:c7:03:e6:e8:2a: 26:a5:16:9f:6a:c3:eb:af:42:75:ca:21:47:5d:45:a8:85:19: c8:43:b3:bc:28:d0:58:e7:aa:c6:61:ea:27:a0:46:bc:6f:19: c3:4d:93:53:16:99:c2:94:e0:d7:8f:58:c3:5c:39:d2:d1:a0: 0f:43:39:82:d7:d7:4f:ff:46:01:46:41:98:9c:28:94:67:ba: 92:9b:51:39:8c:3a:82:c1:33:c3:02:33:41:af:ab:a5:7d:af: 68:0f:a1:7e:51:e8:3c:f7:06:a9:15:3e:9e:63:82:b2:20:82: e1:88:a6:01:5d:91:a6:10:67:d3:65:6a:14:48:41:5a:74:19: 33:62:66:2a:9b:3a:1c:96:11:6e:ad:d7:7f:ca:46:d0:e0:02: 8c:f9:88:ea:ac:64:3a:a9:b3:b6:8f:34:ee:58:18:81:32:e4: 7a:ad:99:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqJuMjkbJnS5LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjMyNjQ3YjMtODdmNC00ZmUzLTkxOWMtMTk4MTFlOGU4NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo2qnwo/6yIaSWpI4WR7qRcE4ywZMQ1jlkKZ epNIiFiLUlYTxr/dBDhf0n5GqJA/kQ8cdCRLp/DBbfxBAt4YfD+HhTUWoEQ/mu+R kfgZgeuHxhSeV/BfyhHWcSSoiGET+Q0+11EdtkxDuZrR2Rk78JrWXw/qRsxxqVVF IV+nfBAvB47ncxyDS7ZQcgCIOHCANxE7K5dJjVNppKVBNXu5U9A7VYMb0UVJWYk6 UZUxE8EFnp5gioyWSXL68OLd9yYkL9xld5svkNn9xsK11eSzNQ81KV0YE7RRj70T 5V31e0d6Dlo/mIenLEk/HWC/OnjwqWgFH1z+qIAQzc098CwOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEMzIGFkUk2keYL8DHFxcXnUByIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJjMDc2MWQtYjA4NS0z OTc5LWEzOTEtMWE0ZThjOTI2ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpbvgWkUp6IXHe0fHkX/IJuWa7jTzsSJuVA4yreGyD87I+DLWRp/S+5 BR//usw1ngbWNkKbwElbdLFJfRwCrz2FmQmgcI+vabBmQ7e0wqC7tFcDRLvHA+bo KialFp9qw+uvQnXKIUddRaiFGchDs7wo0FjnqsZh6iegRrxvGcNNk1MWmcKU4NeP WMNcOdLRoA9DOYLX10//RgFGQZicKJRnupKbUTmMOoLBM8MCM0Gvq6V9r2gPoX5R 6Dz3BqkVPp5jgrIgguGIpgFdkaYQZ9NlahRIQVp0GTNiZiqbOhyWEW6t13/KRtDg Aoz5iOqsZDqps7aPNO5YGIEy5Hqtmbk= -----END CERTIFICATE-----Generated at Sun Sep 20 21:58:00 2026 by rpki-client