$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa File: d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa (raw, json) Hash identifier: BjOAVTrR081kDKrro9zjZoB0iVMIopy8BRhVxfvjNoA= Subject key identifier: 20:7E:08:D0:C3:9B:B1:87:9D:9F:B1:43:C4:39:86:8F:54:7A:C0:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0672A5C854B58BC0EF42F000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a5:c8:54:b5:8b:c0:ef:42:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=71da85b2-1188-449b-8fde-1db6c1f98b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:d6:38:a6:e7:d3:c7:83:7e:39:b5:78:2b: 40:c2:0c:8f:ab:87:82:88:1b:8b:95:39:d6:d5:1c: 44:c1:77:eb:bb:2c:4e:08:5b:19:ef:b9:b0:48:b2: 1d:60:eb:a0:12:68:2c:41:a9:e2:5e:25:52:7c:4b: f8:1c:cd:75:d5:42:50:dd:56:02:b1:21:d7:28:71: 4e:07:e6:0a:98:16:15:09:1b:c2:20:1e:6f:81:cb: e6:b5:e5:ba:8e:61:62:1b:23:fe:ad:7a:30:bd:f6: 12:94:41:2f:33:5c:76:07:2c:5a:3d:28:31:2b:82: bf:24:24:78:b6:d7:0f:2a:62:40:dc:04:2e:71:6f: a0:1d:d7:7e:d8:a5:89:ee:a4:4f:a8:c5:5c:6f:2e: 51:b5:33:a4:9a:6c:75:c8:3b:0a:0a:91:4b:42:1e: f6:37:d4:d9:75:7e:63:a8:68:7c:df:73:20:81:72: b5:14:95:c0:3e:e5:be:1f:2d:cb:8e:84:20:f1:b3: 11:f0:d7:0f:25:1c:93:b5:93:dc:33:c9:38:9a:38: bd:fe:da:a7:fa:af:e5:49:58:3f:6f:1b:d3:f5:fb: 45:5d:fe:a4:72:8d:17:a0:7a:9c:e4:f0:e6:5d:c5: 62:9f:81:c4:b0:40:d8:36:10:72:f6:16:5f:83:03: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:08:D0:C3:9B:B1:87:9D:9F:B1:43:C4:39:86:8F:54:7A:C0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:b0:e4:f2:1e:b7:cf:df:3c:8d:96:38:bc:63:81:60:d0: 74:9a:ed:1b:87:ee:70:45:cf:0a:e9:ee:a1:4f:be:87:b0:90: 46:0a:de:72:88:10:3e:ab:ef:22:33:07:3f:96:00:e2:f3:d6: c3:27:f0:54:f7:cc:92:ed:b5:56:63:68:32:bb:0b:0d:24:f6: 03:09:80:81:89:e0:c6:3f:61:aa:78:56:fd:d1:65:2a:ff:c5: 5c:8d:29:d8:a6:ee:2b:f8:7c:63:dc:a2:9e:35:c9:2b:3b:a5: 9f:70:d0:2b:62:4f:55:2b:6f:aa:b3:52:97:94:09:f9:e2:01: e7:3d:d1:6c:e0:06:6d:f0:f3:aa:97:6d:91:74:b0:0e:25:3b: 04:08:68:e2:14:23:1e:68:9f:35:ad:46:ab:fd:de:eb:6d:af: d1:55:c9:ff:4a:34:3b:d2:81:04:e3:3d:2c:5d:d2:17:bc:b0: 3e:1b:19:4c:36:ed:db:c3:8f:5d:80:9b:d6:0a:7b:22:49:04: 48:67:ca:04:73:ec:9c:cc:37:6e:e2:78:02:9d:11:d4:ce:24: 81:19:39:18:ec:7e:43:8b:d6:ae:c2:5c:2e:41:90:4a:1c:17: dc:22:b9:c7:2b:be:5c:60:9c:72:8a:54:b1:00:b0:00:f2:31: 7b:c6:d7:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqXIVLWLwO9C8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NzFkYTg1YjItMTE4OC00NDliLThmZGUtMWRiNmMxZjk4YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJfWOKbn08eDfjm1eCtAwgyPq4eCiBuLlTnW 1RxEwXfruyxOCFsZ77mwSLIdYOugEmgsQaniXiVSfEv4HM111UJQ3VYCsSHXKHFO B+YKmBYVCRvCIB5vgcvmteW6jmFiGyP+rXowvfYSlEEvM1x2ByxaPSgxK4K/JCR4 ttcPKmJA3AQucW+gHdd+2KWJ7qRPqMVcby5RtTOkmmx1yDsKCpFLQh72N9TZdX5j qGh833MggXK1FJXAPuW+Hy3LjoQg8bMR8NcPJRyTtZPcM8k4mji9/tqn+q/lSVg/ bxvT9ftFXf6kco0XoHqc5PDmXcVin4HEsEDYNhBy9hZfgwORTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB+CNDDm7GHnZ+xQ8Q5ho9UesB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDY5N2JmOGItYzEyZC0z YmZkLWEwZjgtOGYxYjgzMDRiZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGJsOTyHrfP3zyNlji8Y4Fg0HSa7RuH7nBFzwrp7qFPvoewkEYK3nKI ED6r7yIzBz+WAOLz1sMn8FT3zJLttVZjaDK7Cw0k9gMJgIGJ4MY/Yap4Vv3RZSr/ xVyNKdim7iv4fGPcop41ySs7pZ9w0CtiT1Urb6qzUpeUCfniAec90WzgBm3w86qX bZF0sA4lOwQIaOIUIx5onzWtRqv93uttr9FVyf9KNDvSgQTjPSxd0he8sD4bGUw2 7dvDj12Am9YKeyJJBEhnygRz7JzMN27ieAKdEdTOJIEZORjsfkOL1q7CXC5BkEoc F9wiuccrvlxgnHKKVLEAsADyMXvG1ys= -----END CERTIFICATE-----Generated at Mon Sep 21 14:11:54 2026 by rpki-client