$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bce8fa0d-477b-3c9c-b86d-44cb2208e36a.roa File: bce8fa0d-477b-3c9c-b86d-44cb2208e36a.roa (raw, json) Hash identifier: Ha0TDwNcc+rVpPfHdCI5ZB4mOYqL7GMzzIKO0KzrZRA= Subject key identifier: 8D:4B:D1:E8:0F:F6:AC:F5:E2:C6:4D:21:25:DD:A2:96:34:2A:C5:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA795B7C2325D24624CBC4200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bce8fa0d-477b-3c9c-b86d-44cb2208e36a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.25.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:b7:c2:32:5d:24:62:4c:bc:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a4d55b3f-15f8-41fb-b198-d95cc38e4a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:91:f3:e2:bf:78:7d:81:6b:b3:7e:cf:28: ab:91:5e:48:e6:49:9d:a4:8c:14:1f:4b:b4:d7:c5: 49:61:e6:c0:2e:af:2d:11:2d:8b:71:af:b1:ad:92: 65:d1:df:68:47:a6:86:4e:ab:7c:cd:59:42:e3:b8: 9d:d2:8d:f5:16:19:97:c5:3f:57:5c:8f:72:d1:f7: 90:ce:6c:44:d9:25:51:f0:85:f1:c5:bf:02:ae:52: a4:b9:40:86:93:ec:5c:6c:3d:93:68:c8:61:eb:ef: 30:2e:f8:40:79:12:ee:a3:1f:ef:8c:d4:fd:fd:2b: 53:f9:e9:63:6d:26:15:c8:9e:e4:41:bb:b1:a0:a6: 20:53:b1:79:9b:17:0a:41:85:fa:46:3a:55:db:de: 22:a7:f1:44:3d:62:7e:c4:97:da:ad:3f:70:d9:5c: 9a:b3:57:f7:aa:29:2e:fc:c2:5d:27:3f:bb:d4:6f: 96:2b:60:36:63:a1:ff:1f:bf:d4:32:54:f1:7a:9e: 95:98:2c:9b:e5:2b:2e:68:28:ed:ce:b9:c3:1d:ba: b5:ec:4b:0b:fc:19:c9:2e:65:75:b9:a5:2e:a4:bf: 20:d2:f1:05:f5:6c:f5:b7:1a:27:d3:b6:8b:3a:53: a8:2d:d6:60:32:e6:ae:94:e7:42:76:b8:79:70:12: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:D1:E8:0F:F6:AC:F5:E2:C6:4D:21:25:DD:A2:96:34:2A:C5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bce8fa0d-477b-3c9c-b86d-44cb2208e36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dc:c3:fd:27:d0:2c:49:b7:1e:b7:9d:03:5f:36:2b:b8:bd: 59:76:74:44:ed:68:f5:39:7e:11:18:9f:74:74:6e:1b:d7:39: 32:6e:82:66:0c:4a:e2:cb:dc:73:02:2c:bf:94:fa:ae:69:bc: 3a:b0:f7:95:fb:9a:88:3f:95:dd:57:ba:9d:18:81:ce:75:eb: 16:46:7f:e8:34:fd:6d:92:48:2f:a6:7a:13:60:39:0a:c5:8f: 36:ca:08:45:a4:3d:2c:ae:8e:78:14:06:3e:6e:1d:36:eb:5d: 3a:2d:e1:3f:12:6a:e5:66:97:6d:17:83:9d:27:cf:1e:df:22: cf:01:5a:41:2f:f5:33:2e:90:90:13:fc:c0:87:ce:8c:42:aa: 29:9c:9a:6d:97:3d:7b:95:85:8a:83:39:91:be:3e:a4:92:d7: 17:99:e5:77:4a:be:07:69:5a:ee:b0:2c:5d:ca:ab:3f:51:4b: 6c:af:07:a1:3f:29:66:1e:e1:f1:57:00:03:7f:01:20:b8:e6: 5c:7c:71:48:44:28:36:63:1a:7b:31:20:04:24:8f:e9:3e:58: 99:57:18:b8:d4:2f:43:39:c2:44:c6:1f:f4:5d:39:72:8e:03: bb:73:69:0d:35:d1:26:9e:fb:91:b9:ff:ef:f6:64:00:34:8c: 57:b1:74:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlbfCMl0kYky8QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTRkNTViM2YtMTVmOC00MWZiLWIxOTgtZDk1Y2MzOGU0YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqySR8+K/eH2Ba7N+zyirkV5I5kmdpIwUH0u0 18VJYebALq8tES2Lca+xrZJl0d9oR6aGTqt8zVlC47id0o31FhmXxT9XXI9y0feQ zmxE2SVR8IXxxb8CrlKkuUCGk+xcbD2TaMhh6+8wLvhAeRLuox/vjNT9/StT+elj bSYVyJ7kQbuxoKYgU7F5mxcKQYX6RjpV294ip/FEPWJ+xJfarT9w2Vyas1f3qiku /MJdJz+71G+WK2A2Y6H/H7/UMlTxep6VmCyb5SsuaCjtzrnDHbq17EsL/BnJLmV1 uaUupL8g0vEF9Wz1txon07aLOlOoLdZgMuaulOdCdrh5cBJZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1L0egP9qz14sZNISXdopY0KsU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmNlOGZhMGQtNDc3Yi0z YzljLWI4NmQtNDRjYjIyMDhlMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfcw/0n0CxJtx63nQNfNiu4vVl2dETtaPU5fhEYn3R0bhvXOTJugmYM SuLL3HMCLL+U+q5pvDqw95X7mog/ld1Xup0Ygc516xZGf+g0/W2SSC+mehNgOQrF jzbKCEWkPSyujngUBj5uHTbrXTot4T8SauVml20Xg50nzx7fIs8BWkEv9TMukJAT /MCHzoxCqimcmm2XPXuVhYqDOZG+PqSS1xeZ5XdKvgdpWu6wLF3Kqz9RS2yvB6E/ KWYe4fFXAAN/ASC45lx8cUhEKDZjGnsxIAQkj+k+WJlXGLjUL0M5wkTGH/RdOXKO A7tzaQ010Sae+5G5/+/2ZAA0jFexdKo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:09:16 2026 by rpki-client