$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c42fd168-2bed-3a14-b4de-20e05d850568.roa File: c42fd168-2bed-3a14-b4de-20e05d850568.roa (raw, json) Hash identifier: 8PH9fo4QPweWbSyLgXXqq2d7DZqsl5162XHTcq9esH8= Subject key identifier: 96:8B:89:16:25:61:2C:E5:6B:B2:76:27:51:C1:9A:BA:DA:38:BF:48 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF01CCD04B5F3DD6E484C1960 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c42fd168-2bed-3a14-b4de-20e05d850568.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:cd:04:b5:f3:dd:6e:48:4c:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=f7eeae63-b181-4a9d-b31c-1450f9427f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:6b:b2:95:c6:5d:44:63:85:13:22:a6:6d: 34:f7:79:8c:f6:07:89:8f:9c:1e:3e:b1:95:7a:fb: e0:af:de:d3:ce:a3:25:89:bc:f7:01:2c:d0:ff:93: 00:c3:31:d6:1e:0b:d7:cc:6f:20:78:bb:2f:c1:d7: 54:63:d8:f2:30:ae:36:5e:7d:27:be:a8:ad:f7:43: e9:5c:c2:6b:95:6c:2d:02:f0:d4:5d:55:39:56:64: a1:7b:cd:78:2a:f0:81:db:74:1c:fb:99:9b:ea:d0: 64:3f:b9:18:25:00:47:af:b9:61:cf:fe:52:20:2a: f3:0a:c6:61:a6:0b:4f:1c:44:ed:b3:11:fc:ac:69: a0:ea:68:8d:7e:ee:07:d1:60:34:28:75:53:28:f4: 06:31:6f:24:2c:18:69:fa:15:c2:71:8e:5e:4a:71: 3f:d2:86:bd:c0:f6:74:e6:29:37:6c:84:dd:bf:98: 5a:b1:fc:f9:70:f0:1e:9f:61:8d:e6:fb:89:b5:05: 31:10:1b:d7:2e:d5:2e:d4:88:ea:49:5d:ec:be:64: 78:89:a2:ae:40:3b:17:9a:ae:38:db:39:06:ca:26: a9:f1:4f:c2:d6:3a:64:05:d5:0a:d4:f1:03:b6:1b: fd:80:74:70:80:29:0b:26:70:00:d4:2e:f3:06:7c: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:89:16:25:61:2C:E5:6B:B2:76:27:51:C1:9A:BA:DA:38:BF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c42fd168-2bed-3a14-b4de-20e05d850568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:51:20:ac:10:54:01:96:a7:93:b4:7b:65:37:40:7e:f5:13: 6e:64:f8:a4:25:d9:4f:d8:22:53:91:63:c7:13:c2:d0:74:15: b3:be:1d:9e:70:33:f1:0c:7a:4d:0d:10:e7:97:1f:df:2b:28: ee:30:25:5a:b9:b9:ac:4c:35:90:7c:45:45:39:77:dd:bd:bb: c4:73:c9:63:4b:d7:ae:b6:b1:79:ae:54:76:4b:a7:d5:e6:2f: fb:09:fa:04:45:12:f2:72:e1:f5:df:3f:af:e0:48:45:e4:3a: 26:98:1b:70:7f:22:0a:0c:0f:5d:a9:73:a2:31:ba:05:f5:b1: 14:f3:6c:70:55:23:0c:b7:7c:b1:d7:a2:c7:3e:4b:97:e6:05: 28:12:4f:b9:28:b9:df:4a:e3:ce:4c:84:ee:d1:18:e4:d1:03: cb:3e:28:1c:d6:c1:c8:7a:d1:b3:d9:92:be:31:a1:0a:4f:cb: 9c:4d:a1:57:fa:18:4f:4e:dd:cf:6b:47:2c:53:84:16:f9:0d: 88:a2:cd:e7:e2:ee:d5:bb:44:a6:84:c6:6a:0a:73:61:df:c5: 59:d5:b1:01:ec:9a:3b:4b:be:97:d7:3f:c5:68:7b:d8:09:51: f6:ad:3a:f4:72:8d:e0:a8:fa:7e:f3:37:40:96:1c:b5:f1:49: 7d:1d:4b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHM0EtfPdbkhMGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjdlZWFlNjMtYjE4MS00YTlkLWIzMWMtMTQ1MGY5NDI3ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLlrspXGXURjhRMipm0093mM9geJj5wePrGV evvgr97TzqMlibz3ASzQ/5MAwzHWHgvXzG8geLsvwddUY9jyMK42Xn0nvqit90Pp XMJrlWwtAvDUXVU5VmShe814KvCB23Qc+5mb6tBkP7kYJQBHr7lhz/5SICrzCsZh pgtPHETtsxH8rGmg6miNfu4H0WA0KHVTKPQGMW8kLBhp+hXCcY5eSnE/0oa9wPZ0 5ik3bITdv5hasfz5cPAen2GN5vuJtQUxEBvXLtUu1IjqSV3svmR4iaKuQDsXmq44 2zkGyiap8U/C1jpkBdUK1PEDthv9gHRwgCkLJnAA1C7zBnzBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaLiRYlYSzla7J2J1HBmrraOL9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQyZmQxNjgtMmJlZC0z YTE0LWI0ZGUtMjBlMDVkODUwNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlRIKwQVAGWp5O0e2U3QH71E25k+KQl2U/YIlORY8cTwtB0FbO+HZ5w M/EMek0NEOeXH98rKO4wJVq5uaxMNZB8RUU5d929u8RzyWNL1662sXmuVHZLp9Xm L/sJ+gRFEvJy4fXfP6/gSEXkOiaYG3B/IgoMD12pc6IxugX1sRTzbHBVIwy3fLHX osc+S5fmBSgST7koud9K485MhO7RGOTRA8s+KBzWwch60bPZkr4xoQpPy5xNoVf6 GE9O3c9rRyxThBb5DYiizefi7tW7RKaExmoKc2HfxVnVsQHsmjtLvpfXP8Voe9gJ UfatOvRyjeCo+n7zN0CWHLXxSX0dS7s= -----END CERTIFICATE-----Generated at Tue Sep 22 21:14:25 2026 by rpki-client