$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9dab50e-63a7-3936-b7bf-8f3be27de68d.roa File: d9dab50e-63a7-3936-b7bf-8f3be27de68d.roa (raw, json) Hash identifier: s44ovF0xh6mNUJC5E5VC2vch03YCYoCMhHMH6jGCzhg= Subject key identifier: 2B:28:5C:A0:50:B5:4D:32:A8:26:36:1D:09:0B:8A:4D:0D:70:F7:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F119CE1093E068B18D5B3C840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9dab50e-63a7-3936-b7bf-8f3be27de68d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e1:09:3e:06:8b:18:d5:b3:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6d28f994-3c02-404c-8df8-49cdcfddc96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:c3:18:a3:8f:81:eb:67:32:fb:c7:b7:67: 8d:bb:25:24:9f:d5:38:ec:0d:bb:5a:97:1a:fc:40: 27:5d:71:82:cf:a0:b3:a5:4b:5d:5a:7c:38:c7:79: bc:63:19:62:63:c1:27:3d:a6:99:98:f2:e8:31:71: d4:5a:4b:65:2c:aa:df:c5:52:da:e1:ef:86:00:a0: 5a:73:5b:39:78:1a:5e:a1:89:a4:d5:03:96:b0:52: 56:54:b4:fc:a6:ce:bd:b1:73:41:f5:36:c6:38:93: c7:21:2b:9d:2b:8b:fb:f0:4c:ed:03:0d:aa:4c:78: 5e:51:ee:da:47:74:4c:26:40:ee:6d:12:d7:d0:bf: 12:ed:65:be:d6:90:50:8c:e5:a2:31:e2:aa:1f:bb: fd:ce:b7:3c:c1:f1:80:a1:0d:ca:5f:2e:0f:d0:4f: 8c:d0:d4:b0:44:f5:f7:5e:c8:10:4a:ea:7c:af:20: b6:4c:be:d8:2d:5b:97:a7:01:f9:18:c7:f9:1d:34: d6:6e:ab:fb:a1:ee:e3:1e:57:77:a0:a4:6e:4c:a5: ac:50:fd:cb:99:1b:eb:56:7a:5c:f7:3d:91:d6:f8: e1:a4:93:69:55:50:e5:5c:32:be:dc:04:2e:48:d6: af:bf:2a:d3:11:3a:81:95:3c:7e:cb:23:c9:9e:1d: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:5C:A0:50:B5:4D:32:A8:26:36:1D:09:0B:8A:4D:0D:70:F7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9dab50e-63a7-3936-b7bf-8f3be27de68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:af:5d:d4:43:43:48:d2:dc:d8:6b:73:93:32:a8:4a:9f:16: 5a:5b:e2:03:98:0d:7d:60:01:de:d8:af:42:b8:db:69:b5:1b: 29:62:78:14:fe:96:6f:13:2e:27:8b:9e:2b:db:92:c4:62:52: 77:5d:9c:02:57:27:23:67:44:ed:97:51:51:38:ae:38:d2:25: e8:88:a8:b1:88:0b:e6:d4:aa:d1:2b:d6:46:3c:7e:d0:75:f7: 5f:c4:bf:69:55:07:9e:eb:d2:82:34:24:a4:01:09:e8:3f:6c: 36:f2:42:08:df:44:ef:22:bf:57:1e:ab:6f:c4:b1:03:20:b4: cb:42:7b:3a:3c:ae:62:d9:13:23:3d:54:e7:e7:f3:f3:06:50: 42:87:ae:cb:da:ce:2a:d1:69:60:49:9d:9c:fa:5f:00:c3:01: ea:4a:89:74:7e:9a:72:1d:cc:b2:7e:3d:6a:2c:64:a3:90:99: ce:a3:92:c1:86:cd:34:4d:cd:3c:9a:8c:99:12:88:91:46:f1: 47:8d:9e:2f:fa:3e:b2:11:2e:2b:df:01:6f:56:ab:66:dc:8c: 7c:34:ee:98:fe:cf:ee:42:f8:0c:73:c2:77:2c:c0:0a:e7:ad: a6:1d:f1:35:f1:04:de:a5:aa:fb:8d:64:04:f5:bd:b8:29:79: aa:85:6c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOEJPgaLGNWzyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQyOGY5OTQtM2MwMi00MDRjLThkZjgtNDljZGNmZGRjOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWjDGKOPgetnMvvHt2eNuyUkn9U47A27Wpca /EAnXXGCz6CzpUtdWnw4x3m8YxliY8EnPaaZmPLoMXHUWktlLKrfxVLa4e+GAKBa c1s5eBpeoYmk1QOWsFJWVLT8ps69sXNB9TbGOJPHISudK4v78EztAw2qTHheUe7a R3RMJkDubRLX0L8S7WW+1pBQjOWiMeKqH7v9zrc8wfGAoQ3KXy4P0E+M0NSwRPX3 XsgQSup8ryC2TL7YLVuXpwH5GMf5HTTWbqv7oe7jHld3oKRuTKWsUP3LmRvrVnpc 9z2R1vjhpJNpVVDlXDK+3AQuSNavvyrTETqBlTx+yyPJnh1ujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsoXKBQtU0yqCY2HQkLik0NcPfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDlkYWI1MGUtNjNhNy0z OTM2LWI3YmYtOGYzYmUyN2RlNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWvXdRDQ0jS3Nhrc5MyqEqfFlpb4gOYDX1gAd7Yr0K422m1GylieBT+ lm8TLieLnivbksRiUnddnAJXJyNnRO2XUVE4rjjSJeiIqLGIC+bUqtEr1kY8ftB1 91/Ev2lVB57r0oI0JKQBCeg/bDbyQgjfRO8iv1ceq2/EsQMgtMtCezo8rmLZEyM9 VOfn8/MGUEKHrsvazirRaWBJnZz6XwDDAepKiXR+mnIdzLJ+PWosZKOQmc6jksGG zTRNzTyajJkSiJFG8UeNni/6PrIRLivfAW9Wq2bcjHw07pj+z+5C+AxzwncswArn raYd8TXxBN6lqvuNZAT1vbgpeaqFbOM= -----END CERTIFICATE-----Generated at Sun Sep 20 22:01:58 2026 by rpki-client