$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d576fe48-207f-38c6-ab6f-6af1794b81df.roa File: d576fe48-207f-38c6-ab6f-6af1794b81df.roa (raw, json) Hash identifier: 0w3ZQyPYZz/g8fHGdXhI1+T7jNeecOSQelTAWwkvA9I= Subject key identifier: 98:0C:00:87:08:FB:2C:3E:43:14:8D:B5:6F:37:60:AF:85:73:3D:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA78771455E256D13CD226900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d576fe48-207f-38c6-ab6f-6af1794b81df.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.28.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:71:45:5e:25:6d:13:cd:22:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=16c5f6f9-3104-4138-a75b-40dce2a84a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:37:d5:31:2a:68:76:43:55:69:6a:96:28: 4d:7a:f0:35:09:6d:a4:67:8e:5e:ce:85:7b:47:68: 4d:ee:e7:26:5f:ef:5a:c2:32:8f:91:64:ca:d4:f6: 70:07:af:b5:5a:8f:a8:2f:4c:1e:43:86:bd:e0:62: 40:98:a8:4e:c8:59:e3:49:82:5c:d5:16:5f:74:6d: 36:13:62:a7:97:d6:70:cc:98:88:ff:30:fa:a9:cd: a6:3e:3d:f7:0d:14:48:2d:97:70:2d:7d:e9:32:b5: d3:04:c2:c4:57:cf:f2:4c:3c:81:8f:10:b1:42:b9: 36:19:78:55:6b:c1:ef:f2:d5:3e:b2:f1:d2:5d:cf: 25:19:34:23:54:6d:5c:8f:3c:35:1b:67:89:7c:a1: 81:a5:ad:b6:80:32:cb:5a:59:b3:9f:cc:01:bd:4f: 96:86:dc:ff:71:16:93:7a:ba:d5:86:2b:c0:64:6f: b8:47:c9:55:fe:b4:75:fe:b6:7d:ec:05:21:b6:3c: 2f:f9:b4:06:e5:c6:b8:15:60:72:3b:d6:8e:b1:e2: 48:a9:35:a1:8f:56:f2:0d:c7:ac:6f:7f:c0:ed:b8: 24:44:d0:f0:5e:ab:79:0b:d9:51:fb:38:fe:15:a7: 93:87:a1:a1:f5:83:c9:55:93:3d:16:23:89:6a:1e: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:00:87:08:FB:2C:3E:43:14:8D:B5:6F:37:60:AF:85:73:3D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d576fe48-207f-38c6-ab6f-6af1794b81df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fb:31:27:e4:a7:ab:7b:50:a9:d3:0f:c6:ca:63:fb:83:a9: 7e:7c:03:d2:4b:d9:0e:c2:ac:55:57:df:af:a9:71:c9:d4:49: d9:f0:d4:15:f7:aa:4f:a4:2b:43:76:af:0f:9f:cd:da:c4:ed: 6a:6b:d1:2a:dd:7a:be:4d:b9:43:b9:85:f2:17:84:e7:ef:8a: 8b:16:a8:0a:b0:74:ac:31:c1:a0:54:7d:f4:4c:0f:c6:4b:8b: 89:3f:cc:fd:d9:24:dd:ed:dc:88:8e:29:f5:d0:13:f1:5d:1a: 45:e9:c6:2e:05:33:c6:01:ee:d4:62:c4:17:0c:44:2d:f9:b7: 83:ed:39:3c:11:85:68:f5:95:c7:e7:7d:8e:7e:9a:0f:93:3a: bd:82:5c:3d:0b:9d:00:57:60:60:b2:96:ad:0f:2b:72:5e:b3: 03:2f:c4:de:be:04:48:21:b6:8c:02:6c:85:88:d8:da:59:e0: 9a:5b:f0:90:f0:b9:76:c0:b2:3e:c7:aa:0a:1c:6a:d1:de:7b: 2e:2d:ec:5c:49:af:b6:f4:88:31:fc:10:2a:5b:5a:27:60:3f: 8a:e2:47:e8:82:79:41:2f:01:4a:94:52:9c:19:4e:98:33:9a: 28:70:b9:7f:2a:29:fe:64:33:0e:35:11:ee:9f:86:24:7f:e6: 40:8f:e7:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3FFXiVtE80iaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTZjNWY2ZjktMzEwNC00MTM4LWE3NWItNDBkY2UyYTg0YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRk31TEqaHZDVWlqlihNevA1CW2kZ45ezoV7 R2hN7ucmX+9awjKPkWTK1PZwB6+1Wo+oL0weQ4a94GJAmKhOyFnjSYJc1RZfdG02 E2Knl9ZwzJiI/zD6qc2mPj33DRRILZdwLX3pMrXTBMLEV8/yTDyBjxCxQrk2GXhV a8Hv8tU+svHSXc8lGTQjVG1cjzw1G2eJfKGBpa22gDLLWlmzn8wBvU+Whtz/cRaT errVhivAZG+4R8lV/rR1/rZ97AUhtjwv+bQG5ca4FWByO9aOseJIqTWhj1byDces b3/A7bgkRNDwXqt5C9lR+zj+FaeTh6Gh9YPJVZM9FiOJah5itQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgMAIcI+yw+QxSNtW83YK+Fcz1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDU3NmZlNDgtMjA3Zi0z OGM2LWFiNmYtNmFmMTc5NGI4MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv7MSfkp6t7UKnTD8bKY/uDqX58A9JL2Q7CrFVX36+pccnUSdnw1BX3 qk+kK0N2rw+fzdrE7Wpr0Srder5NuUO5hfIXhOfviosWqAqwdKwxwaBUffRMD8ZL i4k/zP3ZJN3t3IiOKfXQE/FdGkXpxi4FM8YB7tRixBcMRC35t4PtOTwRhWj1lcfn fY5+mg+TOr2CXD0LnQBXYGCylq0PK3JeswMvxN6+BEghtowCbIWI2NpZ4Jpb8JDw uXbAsj7HqgocatHeey4t7FxJr7b0iDH8ECpbWidgP4riR+iCeUEvAUqUUpwZTpgz mihwuX8qKf5kMw41Ee6fhiR/5kCP52Y= -----END CERTIFICATE-----Generated at Wed Jul 29 06:09:18 2026 by rpki-client