$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa File: eaba19c1-68aa-3949-9002-013681e0e87e.roa (raw, json) Hash identifier: mUwj3BhioPtW7Q7LN9Rkn4gjNiWat+YGPwIsuEx2z2g= Subject key identifier: 29:6E:1F:B9:E6:EC:10:C0:D4:68:C3:91:3F:B9:53:BE:52:81:8F:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4986F054C5500D0DB6C29D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.27.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:f0:54:c5:50:0d:0d:b6:c2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b4d3dae-ef19-4b5f-a1dc-5eabb88b30d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:9b:d5:9c:c6:b0:b0:da:1b:d7:63:49:a5: 07:bf:15:3c:72:e9:5d:43:d4:e0:b7:12:13:25:e7: ed:09:32:fb:57:cc:1e:3d:da:17:38:7b:bb:01:e1: b6:33:3a:b2:25:24:0a:91:41:13:fe:66:d3:fa:11: 43:13:57:a2:0d:65:29:70:c1:07:01:f1:c2:63:0e: 8c:7d:6a:37:94:80:9f:c3:6b:3b:f2:19:0c:b9:d0: 99:eb:7f:ed:2a:6b:2e:e6:b7:50:25:b6:af:58:af: 05:b8:45:26:f1:b4:41:49:a7:cb:bd:31:7d:09:09: a3:ad:16:81:fb:51:1a:d7:fc:4a:27:cf:f8:ab:e5: 7b:69:34:5a:42:0b:9e:c5:fc:c6:b3:38:1f:a0:7c: 5c:8a:27:fa:71:75:b7:35:72:ea:2c:dd:5a:ef:c2: 95:14:62:29:06:ce:d2:04:64:cd:ac:51:5d:7e:5c: f4:24:f6:ee:21:3f:49:ee:a0:01:71:47:99:7c:7a: 19:3f:56:2d:a2:53:60:9f:f9:36:14:59:70:31:ae: e8:78:31:4c:38:8f:f0:78:ca:ef:f4:f8:0c:e1:05: 15:eb:51:d1:43:80:5e:b8:77:cf:05:d8:a7:8f:e1: 42:8b:d8:be:7c:e9:89:b4:cb:88:0d:77:ed:dc:ee: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:1F:B9:E6:EC:10:C0:D4:68:C3:91:3F:B9:53:BE:52:81:8F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:18:d9:3e:2a:da:e7:1f:1b:ac:d0:a5:d4:06:8b:87:96:2e: dd:b2:18:4e:86:46:69:81:9a:8f:8b:b7:de:35:e9:21:34:51: b3:37:c1:9e:4a:13:3e:11:53:02:bb:32:a5:0c:38:94:3d:0c: aa:b4:13:18:8a:28:e0:4d:8a:21:07:88:cb:82:e7:56:56:69: d5:89:d1:61:cd:0a:66:83:cb:13:d6:2e:af:56:70:4c:9c:6c: 58:0c:3e:dd:c6:e1:61:44:eb:95:d1:8d:c6:6e:8d:0e:d1:c3: c7:bb:8b:b5:a8:a2:74:44:28:7a:11:d1:08:eb:7c:a4:68:39: cb:0b:11:68:13:b1:6c:8d:94:ba:eb:4e:59:72:59:6f:eb:28: 9d:be:05:2c:da:36:50:ec:e4:f7:e0:b7:7b:b3:3d:f9:97:f0: fa:55:6d:23:ac:07:c8:69:1c:c1:25:97:22:8d:97:e1:af:f5: e4:2f:29:34:0f:57:5d:2d:75:2f:8d:07:d9:9e:67:57:49:c9: c9:29:7a:be:be:44:85:68:8b:53:71:67:98:fc:6d:c1:b9:9f: 82:b5:39:d2:26:a2:32:88:9f:6a:65:5b:32:c9:9f:de:c7:ec: 12:f2:7d:51:50:d7:e0:35:0f:89:7e:a9:9a:41:08:af:b7:f5: 5f:9d:22:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhvBUxVANDbbCnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmI0ZDNkYWUtZWYxOS00YjVmLWExZGMtNWVhYmI4OGIzMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCb1ZzGsLDaG9djSaUHvxU8culdQ9TgtxIT JeftCTL7V8wePdoXOHu7AeG2MzqyJSQKkUET/mbT+hFDE1eiDWUpcMEHAfHCYw6M fWo3lICfw2s78hkMudCZ63/tKmsu5rdQJbavWK8FuEUm8bRBSafLvTF9CQmjrRaB +1Ea1/xKJ8/4q+V7aTRaQguexfzGszgfoHxciif6cXW3NXLqLN1a78KVFGIpBs7S BGTNrFFdflz0JPbuIT9J7qABcUeZfHoZP1YtolNgn/k2FFlwMa7oeDFMOI/weMrv 9PgM4QUV61HRQ4BeuHfPBdinj+FCi9i+fOmJtMuIDXft3O5wCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCluH7nm7BDA1GjDkT+5U75SgY9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWFiYTE5YzEtNjhhYS0z OTQ5LTkwMDItMDEzNjgxZTBlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMY2T4q2ucfG6zQpdQGi4eWLt2yGE6GRmmBmo+Lt9416SE0UbM3wZ5K Ez4RUwK7MqUMOJQ9DKq0ExiKKOBNiiEHiMuC51ZWadWJ0WHNCmaDyxPWLq9WcEyc bFgMPt3G4WFE65XRjcZujQ7Rw8e7i7WoonREKHoR0QjrfKRoOcsLEWgTsWyNlLrr TllyWW/rKJ2+BSzaNlDs5Pfgt3uzPfmX8PpVbSOsB8hpHMEllyKNl+Gv9eQvKTQP V10tdS+NB9meZ1dJyckper6+RIVoi1NxZ5j8bcG5n4K1OdImojKIn2plWzLJn97H 7BLyfVFQ1+A1D4l+qZpBCK+39V+dIkM= -----END CERTIFICATE-----Generated at Sat Sep 26 14:33:58 2026 by rpki-client