$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa File: ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa (raw, json) Hash identifier: ZHMtVo0GscxAOitJnCu2e6janl3pNIuYDEe3m0ZOJDM= Subject key identifier: 31:29:31:F7:2E:71:D9:22:49:66:EC:0F:E3:A6:16:52:88:ED:8B:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498763EB52953B81A1E23500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:63:eb:52:95:3b:81:a1:e2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=94d46068-5a41-42cd-bee6-709d6c868042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:27:5f:43:76:bd:81:a8:79:10:75:3f:2e: e0:9f:1f:e5:ad:41:6e:d5:4e:ef:04:13:47:c3:b9: 93:ba:ff:61:c1:87:1b:87:c8:c1:8c:26:ec:13:24: bd:21:f2:f7:03:fd:a6:bc:c4:48:5b:82:65:1c:b9: 9b:b5:64:c6:6d:55:93:ff:59:c5:80:08:2e:fc:1e: 58:f7:8b:aa:5a:c5:a5:09:b9:20:b0:a4:f9:64:c9: af:7e:07:e7:2b:64:47:fa:a7:b7:2a:3d:21:ac:a9: 27:1e:93:53:17:a5:0b:9f:74:33:29:6a:cb:a8:93: 99:4a:38:c9:ea:88:ff:01:81:03:13:3d:3b:bd:a3: 2b:50:21:8b:e5:4d:04:f8:12:65:b1:4b:79:e6:60: 7b:03:e1:1e:3f:bc:64:56:4e:cc:05:54:22:35:80: cb:d3:2c:85:e5:f2:e5:ed:18:9e:85:38:2c:c8:27: ac:c9:28:58:ae:fb:1b:23:90:3e:5b:92:41:49:ef: 29:51:05:eb:fe:83:f2:4c:33:0a:1f:87:00:5e:3c: 76:60:b5:36:f5:f3:d3:53:36:a9:09:c9:70:1c:d9: 1a:7b:e4:f8:25:d6:aa:b5:53:5c:85:19:84:be:22: b3:16:80:97:3e:d3:10:a3:7c:66:c5:25:37:46:bc: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:31:F7:2E:71:D9:22:49:66:EC:0F:E3:A6:16:52:88:ED:8B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:da:a8:36:5e:6b:00:ce:c1:6f:9b:48:db:ca:05:67:e3:ac: e9:f5:8b:24:41:6f:c2:97:7d:c0:58:c9:75:f1:44:df:71:65: 98:e5:d0:27:d8:d5:bb:6c:d3:13:4d:62:63:8d:1e:11:53:e2: 0b:ab:e4:b5:76:81:5b:dc:37:40:84:88:5d:6e:fb:ee:fc:b2: 2a:3f:63:66:6e:10:04:4a:19:44:98:49:61:99:be:dd:65:56: 43:88:57:a9:a3:b0:b2:e7:54:68:e9:8c:e2:a5:96:a1:5b:74: 29:2e:0c:4b:7e:8c:5e:8c:e6:47:52:d5:9e:3f:75:c2:9d:3b: 83:cf:c0:55:00:f2:d1:4c:a1:03:3d:2f:a8:87:83:95:a4:05: ac:e5:a3:cc:ca:75:95:59:86:65:59:1c:50:8b:c6:cd:ef:ed: 49:69:ce:d4:77:e8:e5:cd:8c:e7:41:40:ef:c6:88:33:c0:00: 96:d0:73:8f:24:c5:c8:fd:c0:78:a6:5a:86:58:0a:80:37:64: 13:e7:ab:63:fb:f7:a1:f2:d9:61:b0:3e:b0:dc:ed:ef:bf:94: a3:be:85:2c:c5:4d:3a:86:a6:b6:94:e9:9c:fd:7f:89:f4:5f: 47:04:94:b5:57:a5:51:42:a5:ea:c0:c7:17:ee:8e:47:1c:6d: 6f:47:85:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh2PrUpU7gaHiNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTRkNDYwNjgtNWE0MS00MmNkLWJlZTYtNzA5ZDZjODY4MDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xYnX0N2vYGoeRB1Py7gnx/lrUFu1U7vBBNH w7mTuv9hwYcbh8jBjCbsEyS9IfL3A/2mvMRIW4JlHLmbtWTGbVWT/1nFgAgu/B5Y 94uqWsWlCbkgsKT5ZMmvfgfnK2RH+qe3Kj0hrKknHpNTF6ULn3QzKWrLqJOZSjjJ 6oj/AYEDEz07vaMrUCGL5U0E+BJlsUt55mB7A+EeP7xkVk7MBVQiNYDL0yyF5fLl 7RiehTgsyCesyShYrvsbI5A+W5JBSe8pUQXr/oPyTDMKH4cAXjx2YLU29fPTUzap CclwHNkae+T4JdaqtVNchRmEviKzFoCXPtMQo3xmxSU3RrzUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEpMfcucdkiSWbsD+OmFlKI7YtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWQ2N2Q1ZjctMjVhYi0z OTY1LWI2MTctMjVhYTRmNzgxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATaqDZeawDOwW+bSNvKBWfjrOn1iyRBb8KXfcBYyXXxRN9xZZjl0CfY 1bts0xNNYmONHhFT4gur5LV2gVvcN0CEiF1u++78sio/Y2ZuEARKGUSYSWGZvt1l VkOIV6mjsLLnVGjpjOKllqFbdCkuDEt+jF6M5kdS1Z4/dcKdO4PPwFUA8tFMoQM9 L6iHg5WkBazlo8zKdZVZhmVZHFCLxs3v7UlpztR36OXNjOdBQO/GiDPAAJbQc48k xcj9wHimWoZYCoA3ZBPnq2P796Hy2WGwPrDc7e+/lKO+hSzFTTqGpraU6Zz9f4n0 X0cElLVXpVFCperAxxfujkccbW9HhUA= -----END CERTIFICATE-----Generated at Sat Oct 10 10:46:46 2026 by rpki-client