$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c961d4f2-b3a6-320b-8397-de4fef27278c.roa File: c961d4f2-b3a6-320b-8397-de4fef27278c.roa (raw, json) Hash identifier: SBCmVzPxnwdpZVAWrNDJG2qSJNtESOoNNHd3krQRDi0= Subject key identifier: B3:0A:D8:B2:BE:F4:1E:52:A3:4A:27:DC:DA:A4:8F:6E:65:54:3C:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F11A15B28120E28545075C300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c961d4f2-b3a6-320b-8397-de4fef27278c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:5b:28:12:0e:28:54:50:75:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=be94f9ad-95cb-4e91-b9ca-8c1cff4f2d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:65:3f:3e:ca:c4:ba:ba:f3:a5:90:22:02: ea:b1:26:66:4a:96:d3:a1:98:26:b0:22:fc:b5:6d: a8:fa:a4:72:66:8a:79:9f:a6:9d:a9:ac:0b:84:8a: e6:37:c4:9e:4a:a3:a9:6e:c8:d3:71:19:97:4a:f6: 36:3e:1d:6a:02:bc:78:48:22:f1:d6:00:c9:55:bc: 8a:19:e7:df:04:e2:cc:20:74:54:dd:f4:e1:19:59: 00:96:d7:ef:77:e6:20:15:1f:c9:57:0e:11:dd:1f: 61:da:fd:4c:50:90:c6:31:c1:db:85:96:28:ee:61: 95:07:a8:ba:5e:6d:84:1d:4c:cb:6a:57:a0:8f:1d: 82:d4:03:9b:e5:4c:66:8e:2d:3b:ad:23:e7:bf:7f: bc:a3:35:bb:2a:02:00:19:e1:3f:8b:45:4d:e9:fb: cb:ed:14:7c:83:1e:49:2a:d6:b9:46:22:0e:36:49: a3:f5:81:17:b9:41:cd:25:c2:5a:38:ff:2d:74:bf: 7c:b2:b3:c9:12:0f:9a:01:5f:b2:c0:06:08:2e:b8: d7:b8:9f:c5:10:43:79:be:a3:6e:e0:f2:d3:4a:37: 82:99:58:73:ed:cf:cf:d7:7b:e2:04:02:c2:e2:9f: fb:2e:d8:dc:f1:22:ba:95:83:b3:64:7b:ca:1e:ef: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0A:D8:B2:BE:F4:1E:52:A3:4A:27:DC:DA:A4:8F:6E:65:54:3C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c961d4f2-b3a6-320b-8397-de4fef27278c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:32:00:ec:ec:40:67:72:be:02:db:6e:d5:5e:c1:c4:9b:e9: bb:d1:47:90:10:9f:b4:17:ec:b7:52:a2:b8:c2:d5:95:99:fa: d0:d8:e2:3f:e4:15:0f:cb:49:8e:1c:fc:d8:e1:b9:99:98:77: a7:a8:9c:ba:d6:07:49:5d:7c:2f:6d:6f:ee:c2:70:7b:8b:85: 3c:92:5f:b5:dd:c7:87:fc:6b:e1:3c:74:35:b0:13:73:7f:d7: 8a:ca:c6:29:bd:58:f2:e5:a4:24:07:e1:da:a5:c7:8e:8c:ad: 01:9c:11:1f:51:15:65:d4:12:51:6b:98:1f:5f:a0:5c:b2:39: 2b:44:cb:5b:cb:39:8b:6e:21:95:20:9f:b0:d1:b7:2b:c3:90: 63:50:95:3e:11:36:50:0e:bb:30:fc:73:5f:7c:e8:eb:86:96: 05:4c:6f:3f:d8:2d:c5:46:f8:ca:87:4f:0c:19:ca:6e:26:d9: ab:7d:b5:8e:bd:5b:01:c1:28:42:d5:08:c6:0b:84:f9:c1:5e: 6c:5c:9e:c0:a2:64:78:30:78:54:7e:43:41:29:e1:6d:ab:b6: 2d:36:95:1f:7f:60:e9:e8:2a:44:3f:c8:43:b2:fd:41:2a:93: ec:c8:59:12:45:bc:d7:3f:42:ca:e6:e6:a3:2e:85:4c:ce:54: 84:36:a7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVsoEg4oVFB1wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmU5NGY5YWQtOTVjYi00ZTkxLWI5Y2EtOGMxY2ZmNGYyZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQNlPz7KxLq686WQIgLqsSZmSpbToZgmsCL8 tW2o+qRyZop5n6adqawLhIrmN8SeSqOpbsjTcRmXSvY2Ph1qArx4SCLx1gDJVbyK GeffBOLMIHRU3fThGVkAltfvd+YgFR/JVw4R3R9h2v1MUJDGMcHbhZYo7mGVB6i6 Xm2EHUzLalegjx2C1AOb5Uxmji07rSPnv3+8ozW7KgIAGeE/i0VN6fvL7RR8gx5J Kta5RiIONkmj9YEXuUHNJcJaOP8tdL98srPJEg+aAV+ywAYILrjXuJ/FEEN5vqNu 4PLTSjeCmVhz7c/P13viBALC4p/7Ltjc8SK6lYOzZHvKHu/cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMK2LK+9B5So0on3Nqkj25lVDzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk2MWQ0ZjItYjNhNi0z MjBiLTgzOTctZGU0ZmVmMjcyNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAyAOzsQGdyvgLbbtVewcSb6bvRR5AQn7QX7LdSorjC1ZWZ+tDY4j/k FQ/LSY4c/NjhuZmYd6eonLrWB0ldfC9tb+7CcHuLhTySX7Xdx4f8a+E8dDWwE3N/ 14rKxim9WPLlpCQH4dqlx46MrQGcER9RFWXUElFrmB9foFyyOStEy1vLOYtuIZUg n7DRtyvDkGNQlT4RNlAOuzD8c1986OuGlgVMbz/YLcVG+MqHTwwZym4m2at9tY69 WwHBKELVCMYLhPnBXmxcnsCiZHgweFR+Q0Ep4W2rti02lR9/YOnoKkQ/yEOy/UEq k+zIWRJFvNc/Qsrm5qMuhUzOVIQ2p3M= -----END CERTIFICATE-----Generated at Sun Sep 20 20:16:01 2026 by rpki-client