$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa File: d4f111c8-3652-3329-88ee-ce79c6a6d011.roa (raw, json) Hash identifier: DRjVK/61+Nw+Xk888S99g8nyhcpzYrsj8Axm/irqABs= Subject key identifier: 04:D2:3A:69:0E:CD:DD:4A:F1:07:CB:2B:89:23:06:21:19:A0:D9:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49742098DF664575F11D77F8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:20:98:df:66:45:75:f1:1d:77:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aeda75f9-fc6b-45d4-90da-0adeebb1d0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:5c:62:82:b6:68:46:78:59:33:a0:9e:3e: c7:d5:79:7f:fa:12:7a:3a:15:1a:fa:2e:9f:ef:23: f6:bd:be:31:9a:74:50:e9:67:02:d1:e5:36:d9:cb: 35:ab:7a:60:ff:ad:b4:0c:f1:44:07:28:eb:75:8b: 12:21:6e:10:92:a3:73:64:55:33:9b:06:89:4b:5c: 52:8d:14:1e:bd:4d:bd:bf:0d:ea:20:bf:23:77:f9: 1d:5f:ab:60:99:ca:15:b6:91:db:75:ee:8a:e6:7c: 45:0f:31:ff:59:8e:e5:72:35:53:0a:5d:b0:e0:d7: f3:db:5a:fd:c5:27:f4:64:06:4f:13:9b:da:80:05: 4b:fc:bd:ee:46:87:31:50:88:ae:d6:4a:46:06:86: ed:86:47:4d:8e:db:3d:54:5b:2d:ee:95:93:5e:b6: 25:31:6a:a5:b6:dd:4c:31:35:d7:33:83:a9:23:f8: 12:47:7d:62:2d:94:82:47:d9:ac:21:5d:03:d0:14: 72:ab:3e:d2:28:70:78:94:32:63:28:6a:db:c0:cf: e5:9c:0f:07:f4:32:06:16:78:0e:e3:08:d3:6f:13: 3c:13:3d:5d:bd:e9:d7:15:41:2e:25:6f:4b:1c:23: 72:b5:a4:1d:9c:10:f5:2b:10:f3:b1:40:00:ee:ce: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:3A:69:0E:CD:DD:4A:F1:07:CB:2B:89:23:06:21:19:A0:D9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:97:60:1a:7b:61:a2:2b:79:7b:b2:25:34:95:51:cb:56:ea: be:c8:ee:0c:90:a8:09:9f:8c:6b:a8:33:1e:23:96:b8:3f:9d: e1:5c:d6:08:91:70:9d:2c:32:52:f7:10:b1:d0:1c:09:fc:fb: 89:c3:19:ec:db:14:1a:4c:d3:70:7f:a2:53:af:56:26:64:a6: a4:09:1a:a3:b7:6a:a5:1d:12:3e:4d:5f:44:ae:83:26:45:73: 06:09:1b:3e:cc:50:2d:99:6c:57:d5:82:62:4d:f1:45:0c:41: 74:89:f7:0f:6b:26:f5:44:1f:0c:57:4d:14:b3:b5:e2:77:ac: 92:39:c6:14:9c:14:79:23:8d:71:32:90:fd:93:59:11:26:e4: 07:b3:3e:8c:83:ab:4c:20:14:48:6c:eb:5b:0d:c2:bf:2c:b9: 27:45:86:6b:67:6d:ef:8f:41:d7:a5:54:63:a5:6f:6a:41:e7: 11:5b:5a:64:35:7d:be:83:a6:ea:e9:f8:57:9d:5e:54:9c:f9: 6f:53:c4:d0:56:83:4b:c7:4a:b0:96:77:b1:72:35:2d:8f:65: 7c:f3:47:cf:55:2d:bb:1f:3c:ae:ad:92:4e:0d:3d:89:aa:2a: e6:d1:fc:51:2c:f7:d7:f5:76:54:27:a6:66:13:f2:ad:85:3b: 0c:27:c6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCCY32ZFdfEdd/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWVkYTc1ZjktZmM2Yi00NWQ0LTkwZGEtMGFkZWViYjFkMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugdcYoK2aEZ4WTOgnj7H1Xl/+hJ6OhUa+i6f 7yP2vb4xmnRQ6WcC0eU22cs1q3pg/620DPFEByjrdYsSIW4QkqNzZFUzmwaJS1xS jRQevU29vw3qIL8jd/kdX6tgmcoVtpHbde6K5nxFDzH/WY7lcjVTCl2w4Nfz21r9 xSf0ZAZPE5vagAVL/L3uRocxUIiu1kpGBobthkdNjts9VFst7pWTXrYlMWqltt1M MTXXM4OpI/gSR31iLZSCR9msIV0D0BRyqz7SKHB4lDJjKGrbwM/lnA8H9DIGFngO 4wjTbxM8Ez1dvenXFUEuJW9LHCNytaQdnBD1KxDzsUAA7s7AMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATSOmkOzd1K8QfLK4kjBiEZoNmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmMTExYzgtMzY1Mi0z MzI5LTg4ZWUtY2U3OWM2YTZkMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiXYBp7YaIreXuyJTSVUctW6r7I7gyQqAmfjGuoMx4jlrg/neFc1giR cJ0sMlL3ELHQHAn8+4nDGezbFBpM03B/olOvViZkpqQJGqO3aqUdEj5NX0SugyZF cwYJGz7MUC2ZbFfVgmJN8UUMQXSJ9w9rJvVEHwxXTRSzteJ3rJI5xhScFHkjjXEy kP2TWREm5AezPoyDq0wgFEhs61sNwr8suSdFhmtnbe+PQdelVGOlb2pB5xFbWmQ1 fb6Dpurp+FedXlSc+W9TxNBWg0vHSrCWd7FyNS2PZXzzR89VLbsfPK6tkk4NPYmq KubR/FEs99f1dlQnpmYT8q2FOwwnxtM= -----END CERTIFICATE-----Generated at Sat Sep 26 17:03:26 2026 by rpki-client