$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa File: cf248ad8-cdcc-35a1-82a5-571430bb2417.roa (raw, json) Hash identifier: zCqmQOTcXBFXFmLY1vf/wrCyjLRAEO+AEHiCmxZxDSY= Subject key identifier: 48:33:6E:B1:BB:A8:CF:9D:98:1F:FF:E9:7E:7E:BE:63:FB:CF:A8:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B7181D33BE539C7559240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:71:81:d3:3b:e5:39:c7:55:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1627a190-ecee-4e81-a51e-d833097f79bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:ea:78:90:54:dd:57:74:05:29:14:a0:e5: 02:57:ba:00:0c:10:90:47:eb:37:2b:23:b0:97:b0: fd:dc:d5:a2:d3:b9:49:d1:66:c7:73:23:82:4a:02: d8:11:4c:a8:12:cd:4b:92:89:3d:9f:86:1f:44:62: fa:93:62:d9:24:c6:20:39:47:64:d8:58:fb:f4:24: 85:b0:c9:f4:16:5b:ce:f7:9f:da:72:a9:b3:ac:1d: 6a:74:dc:19:78:e6:27:ab:27:ee:49:20:a1:b7:77: fc:24:b8:26:a9:28:e1:c0:c7:9c:97:cf:2b:bc:8c: 21:b2:ca:89:bb:de:9f:e2:4d:b8:aa:80:04:48:da: fb:d7:35:a7:1f:57:aa:e2:eb:88:6f:17:82:34:63: b6:d0:88:2d:de:0f:48:ab:11:5c:6f:15:86:f6:ee: 54:70:88:a9:56:30:15:c1:22:24:e0:0c:5d:da:3a: b9:c0:6b:d9:9a:65:aa:97:31:ff:95:5b:32:70:c7: 93:07:f1:1f:94:15:c9:48:1a:47:82:03:67:64:12: 85:e0:51:1e:f6:bb:b2:42:7e:36:5f:2e:6c:c3:14: 1b:2d:59:dc:f4:bd:e2:db:fc:9d:e2:14:30:da:fc: fb:1b:7d:d4:c2:da:1e:cd:02:11:b3:c3:4f:7e:4a: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:6E:B1:BB:A8:CF:9D:98:1F:FF:E9:7E:7E:BE:63:FB:CF:A8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6e:1e:a5:9e:3f:4a:b5:4e:03:58:30:66:62:d3:02:e4:5c: c5:05:30:f8:d6:b2:dc:8f:33:0d:92:4e:0e:0a:31:c4:95:3a: 2e:db:1c:c6:c5:f1:87:cb:71:af:b0:31:4a:70:b7:a7:c9:b8: 36:00:81:f3:47:7a:8c:b4:51:55:12:a0:1a:2e:2c:b7:2f:c1: 33:25:2b:21:1d:e6:b9:ce:d4:14:50:28:91:39:fd:68:53:89: 9b:4d:80:62:b4:a6:53:c6:4b:a2:09:78:c2:f7:57:2d:3a:5c: ac:3e:16:c6:c2:0a:10:14:d2:80:26:a1:17:45:e3:dd:ec:5c: e3:e8:64:3b:f5:56:ed:91:bf:b3:fc:db:a3:5c:b1:2a:a0:ff: 03:9a:b9:77:46:47:b9:53:2d:bc:97:2b:2d:f4:1d:a7:1f:c1: 45:df:11:6c:03:18:98:1b:3e:ed:02:71:ca:25:2a:cd:b3:e6: f8:ae:f7:42:0f:80:16:3c:d2:76:7a:dd:49:6d:1b:07:06:ff: c9:ac:1b:02:b0:f0:1f:96:ef:91:1f:53:ae:80:e4:08:9e:48: c6:25:13:9d:f7:0d:9b:d1:f4:52:bc:12:9c:c4:9a:22:3c:02: 63:a4:d0:02:04:d9:66:60:7c:76:e4:2b:41:77:08:3e:83:08: 1b:d8:16:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji3GB0zvlOcdVkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTYyN2ExOTAtZWNlZS00ZTgxLWE1MWUtZDgzMzA5N2Y3OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ/qeJBU3Vd0BSkUoOUCV7oADBCQR+s3KyOw l7D93NWi07lJ0WbHcyOCSgLYEUyoEs1Lkok9n4YfRGL6k2LZJMYgOUdk2Fj79CSF sMn0FlvO95/acqmzrB1qdNwZeOYnqyfuSSCht3f8JLgmqSjhwMecl88rvIwhssqJ u96f4k24qoAESNr71zWnH1eq4uuIbxeCNGO20Igt3g9IqxFcbxWG9u5UcIipVjAV wSIk4Axd2jq5wGvZmmWqlzH/lVsycMeTB/EflBXJSBpHggNnZBKF4FEe9ruyQn42 Xy5swxQbLVnc9L3i2/yd4hQw2vz7G33UwtoezQIRs8NPfkoswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgzbrG7qM+dmB//6X5+vmP7z6jKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2YyNDhhZDgtY2RjYy0z NWExLTgyYTUtNTcxNDMwYmIyNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxuHqWeP0q1TgNYMGZi0wLkXMUFMPjWstyPMw2STg4KMcSVOi7bHMbF 8YfLca+wMUpwt6fJuDYAgfNHeoy0UVUSoBouLLcvwTMlKyEd5rnO1BRQKJE5/WhT iZtNgGK0plPGS6IJeML3Vy06XKw+FsbCChAU0oAmoRdF493sXOPoZDv1Vu2Rv7P8 26NcsSqg/wOauXdGR7lTLbyXKy30HacfwUXfEWwDGJgbPu0CccolKs2z5viu90IP gBY80nZ63UltGwcG/8msGwKw8B+W75EfU66A5AieSMYlE533DZvR9FK8EpzEmiI8 AmOk0AIE2WZgfHbkK0F3CD6DCBvYFgA= -----END CERTIFICATE-----Generated at Tue Sep 29 01:25:23 2026 by rpki-client