$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa File: db99f61d-31ec-37f3-b7ec-a859c703324e.roa (raw, json) Hash identifier: 5FI9BMdOuZmfmGdktj5mfHu6Q+C6Qs/urpMv/Xj8/eA= Subject key identifier: 66:57:03:3D:4D:D3:B0:4E:77:C7:01:FC:6D:A8:72:EE:51:2E:85:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B52A42B280D96713CF580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:52:a4:2b:28:0d:96:71:3c:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9bd3bf5e-06b7-4ac6-9d35-409922ab7e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:67:c0:72:4f:2f:db:ab:97:53:a1:ac:e8: 13:3e:78:ec:bc:20:c5:79:46:c5:7b:5a:3c:82:bd: 83:11:c4:d8:8c:b5:37:43:98:fb:4b:c4:b3:02:fc: 35:65:5c:c2:b0:f7:40:ba:6f:d5:a1:8a:3b:63:f0: 24:03:68:8b:2d:73:f8:07:5e:13:25:54:82:3b:22: 9b:93:54:84:f8:7d:2a:ad:2e:5f:28:c5:d1:07:63: 05:5b:5e:14:9c:7b:7b:4a:d6:d8:09:31:18:2c:10: 4c:aa:89:eb:6a:e3:85:49:d2:22:e3:54:bf:f5:0d: c6:a2:c5:ae:9d:0a:a0:1b:49:c9:d6:40:d9:6c:45: ef:f8:0f:29:bd:b4:d1:ad:b9:11:9d:cb:a3:9b:ba: f8:f1:41:d1:36:64:25:8f:e3:60:7c:0e:86:12:61: a3:9b:3f:a8:07:96:3a:ed:98:8b:be:ec:70:ae:53: 23:49:db:a6:03:d6:0a:d6:5e:62:e2:6b:ec:c7:15: 3b:c7:bd:33:6c:ab:d9:ee:aa:92:9e:2e:67:f1:f3: 3f:19:db:f0:a6:34:5c:25:2b:12:a3:4d:8d:1a:f2: 99:fa:2f:88:ef:9a:61:77:20:7d:e1:67:36:0a:9d: ab:b3:b2:1e:3d:19:65:7a:6e:da:25:e8:73:c6:71: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:03:3D:4D:D3:B0:4E:77:C7:01:FC:6D:A8:72:EE:51:2E:85:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:92:78:65:2d:70:b4:05:de:e8:e8:2b:90:1a:8d:d9:fe:f6: e7:64:2c:60:da:13:da:b6:92:fa:f3:c9:06:a4:dd:d8:37:af: dd:a8:56:a3:53:3f:77:21:be:d9:d2:dc:ec:32:75:7a:a3:56: 32:1b:af:d1:e4:1b:36:e7:30:9f:7d:f2:4c:78:91:9f:7a:2e: ea:a0:96:ee:f3:cd:23:20:7e:d0:b6:46:36:f2:44:18:94:d4: e0:ff:52:31:31:d8:77:3b:a1:48:ff:cc:46:13:ca:0c:6b:90: d2:be:1c:1b:48:5e:8e:4c:00:a2:9d:af:4c:57:5a:db:c0:d3: 14:9b:9c:e7:f6:92:98:16:87:17:d7:da:04:75:d7:f3:7a:63: ff:06:d5:a0:f3:40:85:ac:e5:ea:0b:5f:ce:41:47:38:e4:d0: 76:9e:23:4b:4e:d2:ac:19:17:42:e7:51:af:8b:b4:62:63:60: 42:cd:65:fe:7c:30:43:7e:69:b1:91:46:29:59:f3:e4:37:48: e5:66:9b:44:63:dd:3e:00:ef:1a:d1:5c:fe:cf:0b:7a:07:82: f0:e4:27:0e:44:c7:a7:05:6a:43:f4:68:72:47:27:6a:7a:e5: d5:a7:6e:05:61:2c:b8:74:cf:48:ee:ac:59:77:cf:2e:92:b3: 2f:ed:a7:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1KkKygNlnE89YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWJkM2JmNWUtMDZiNy00YWM2LTlkMzUtNDA5OTIyYWI3ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+FnwHJPL9url1OhrOgTPnjsvCDFeUbFe1o8 gr2DEcTYjLU3Q5j7S8SzAvw1ZVzCsPdAum/VoYo7Y/AkA2iLLXP4B14TJVSCOyKb k1SE+H0qrS5fKMXRB2MFW14UnHt7StbYCTEYLBBMqonrauOFSdIi41S/9Q3GosWu nQqgG0nJ1kDZbEXv+A8pvbTRrbkRncujm7r48UHRNmQlj+NgfA6GEmGjmz+oB5Y6 7ZiLvuxwrlMjSdumA9YK1l5i4mvsxxU7x70zbKvZ7qqSni5n8fM/GdvwpjRcJSsS o02NGvKZ+i+I75phdyB94Wc2Cp2rs7IePRllem7aJehzxnFGvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZXAz1N07BOd8cB/G2ocu5RLoX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5OWY2MWQtMzFlYy0z N2YzLWI3ZWMtYTg1OWM3MDMzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmSeGUtcLQF3ujoK5Aajdn+9udkLGDaE9q2kvrzyQak3dg3r92oVqNT P3chvtnS3OwydXqjVjIbr9HkGzbnMJ998kx4kZ96Luqglu7zzSMgftC2RjbyRBiU 1OD/UjEx2Hc7oUj/zEYTygxrkNK+HBtIXo5MAKKdr0xXWtvA0xSbnOf2kpgWhxfX 2gR11/N6Y/8G1aDzQIWs5eoLX85BRzjk0HaeI0tO0qwZF0LnUa+LtGJjYELNZf58 MEN+abGRRilZ8+Q3SOVmm0Rj3T4A7xrRXP7PC3oHgvDkJw5Ex6cFakP0aHJHJ2p6 5dWnbgVhLLh0z0jurFl3zy6Ssy/tp84= -----END CERTIFICATE-----Generated at Sat Sep 26 10:49:54 2026 by rpki-client