$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbebc286-cd83-3f41-ace7-5e64034bc767.roa File: cbebc286-cd83-3f41-ace7-5e64034bc767.roa (raw, json) Hash identifier: 0W9gfxw5qmmHRyqMAF7LqTUwgh5s1Et/xWklFvm7nGg= Subject key identifier: 05:D9:93:F1:DE:46:4D:CB:35:E3:7F:C0:04:55:89:AD:0F:73:97:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498C1B861086C98C32E53F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbebc286-cd83-3f41-ace7-5e64034bc767.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.29.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1b:86:10:86:c9:8c:32:e5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8e08015-d17f-4b89-93f8-c2c2ba154cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:ad:fc:2e:4f:5c:f3:a3:a6:c4:5c:25:15: 67:cf:fc:c3:0c:79:e2:0c:d4:bd:03:13:01:c5:2b: 5c:91:b0:77:ef:be:f8:51:12:fa:14:ca:3b:7b:48: de:b9:d7:f7:f6:32:95:49:bd:63:ca:65:25:b6:d1: 5d:ce:9d:54:61:cf:54:84:86:a0:32:99:17:03:8c: e0:f2:52:17:84:2e:4e:61:c1:94:8b:e9:44:f0:55: 62:c1:d0:89:6c:c3:a3:6c:8a:48:66:d0:f3:be:26: 5d:81:2d:62:aa:f9:d9:6b:e0:d3:b4:c5:19:7f:d6: 76:39:2a:87:1d:9d:fb:58:06:f6:49:2d:26:da:dd: fc:75:cb:c6:19:33:34:74:9d:4c:54:d9:e6:72:56: a1:6d:c2:5a:82:53:40:a0:93:62:59:d4:4e:27:b6: d2:25:86:b2:61:5e:f5:e5:a1:e5:03:85:fd:b5:1d: 89:f1:94:86:af:72:f2:af:b6:3a:50:8f:00:9a:1f: 4b:06:a3:00:60:7d:55:12:7a:6d:46:57:f5:59:9e: 18:3f:a3:b3:e4:09:d5:68:bd:d7:a7:60:4d:02:b4: 9e:ca:64:03:12:ef:2b:32:7d:8d:ca:a3:d4:c4:dd: 91:e9:60:65:41:de:19:5e:2a:f1:29:e6:4f:09:5c: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:93:F1:DE:46:4D:CB:35:E3:7F:C0:04:55:89:AD:0F:73:97:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbebc286-cd83-3f41-ace7-5e64034bc767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d6:e4:c5:03:1f:55:a7:31:8a:85:b8:83:ed:e7:33:f1:cc: b3:eb:89:6c:4e:0e:21:1c:16:83:c2:b6:25:3d:65:2a:ed:c9: 91:fd:95:53:c0:cd:4a:29:67:35:e7:1b:db:03:04:73:c5:93: 19:c3:20:9c:7e:c2:2a:7b:de:f2:25:c7:bb:88:6a:a6:27:7b: a6:5b:76:31:93:52:8a:cd:9a:bf:56:60:30:61:c6:6e:f0:73: c1:52:f4:ed:c3:92:e2:ad:69:2a:26:e0:87:cf:47:cd:3e:f3: cf:c1:d5:7b:8c:0b:4f:ad:1b:63:03:68:f4:5b:9a:d6:91:79: 07:4f:50:19:c8:da:0b:5b:a3:af:89:4c:a2:31:7b:dd:57:23: 8a:97:f4:c1:c8:80:31:00:19:8d:67:56:aa:fc:c9:11:c4:94: bc:be:44:a5:b9:31:14:93:fe:e6:0f:dc:5c:41:e6:a3:1c:a4: cf:ae:48:d9:0b:60:42:4c:5e:b8:13:35:02:01:a9:42:73:58: 46:f8:58:72:8e:53:95:ad:80:cf:87:10:38:75:cf:a8:c4:d7: 66:05:5c:b4:9f:df:be:cc:a0:f8:3f:0f:f9:e5:70:4c:24:cd: 88:2e:5f:e1:f2:a7:1a:69:0e:06:c4:6b:ff:b5:d6:17:b2:60: 69:52:ba:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBuGEIbJjDLlP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThlMDgwMTUtZDE3Zi00Yjg5LTkzZjgtYzJjMmJhMTU0Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gat/C5PXPOjpsRcJRVnz/zDDHniDNS9AxMB xStckbB37774URL6FMo7e0jeudf39jKVSb1jymUlttFdzp1UYc9UhIagMpkXA4zg 8lIXhC5OYcGUi+lE8FViwdCJbMOjbIpIZtDzviZdgS1iqvnZa+DTtMUZf9Z2OSqH HZ37WAb2SS0m2t38dcvGGTM0dJ1MVNnmclahbcJaglNAoJNiWdROJ7bSJYayYV71 5aHlA4X9tR2J8ZSGr3Lyr7Y6UI8Amh9LBqMAYH1VEnptRlf1WZ4YP6Oz5AnVaL3X p2BNArSeymQDEu8rMn2NyqPUxN2R6WBlQd4ZXirxKeZPCVzZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXZk/HeRk3LNeN/wARVia0Pc5d9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JlYmMyODYtY2Q4My0z ZjQxLWFjZTctNWU2NDAzNGJjNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzW5MUDH1WnMYqFuIPt5zPxzLPriWxODiEcFoPCtiU9ZSrtyZH9lVPA zUopZzXnG9sDBHPFkxnDIJx+wip73vIlx7uIaqYne6ZbdjGTUorNmr9WYDBhxm7w c8FS9O3DkuKtaSom4IfPR80+88/B1XuMC0+tG2MDaPRbmtaReQdPUBnI2gtbo6+J TKIxe91XI4qX9MHIgDEAGY1nVqr8yRHElLy+RKW5MRST/uYP3FxB5qMcpM+uSNkL YEJMXrgTNQIBqUJzWEb4WHKOU5WtgM+HEDh1z6jE12YFXLSf377MoPg/D/nlcEwk zYguX+HypxppDgbEa/+11heyYGlSuqo= -----END CERTIFICATE-----Generated at Sun Sep 27 05:41:14 2026 by rpki-client