$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2a6a8c7-920d-3883-9dd8-1a158b8f2ad9.roa File: f2a6a8c7-920d-3883-9dd8-1a158b8f2ad9.roa (raw, json) Hash identifier: XCacrFkmAJEPDwofdFx2qcvu7EQuK9mJqNpdyOroJZ0= Subject key identifier: 0C:8D:2B:8F:75:EC:15:30:11:3D:D8:56:2C:96:A7:20:85:3E:9F:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D1A1E2E822490E4FA2080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2a6a8c7-920d-3883-9dd8-1a158b8f2ad9.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.19.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1a:1e:2e:82:24:90:e4:fa:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=cb67195a-19a5-41d2-836f-1b76d6ba6030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:d4:e0:ec:d7:7b:88:27:b2:14:de:81:25: f6:67:3f:70:01:cc:20:60:83:91:f5:68:8e:bd:c4: a4:14:fd:ed:3e:1b:e8:f0:14:10:ab:3c:3b:61:29: 6c:25:ab:37:1e:25:b3:e0:22:ed:29:9e:d8:43:c5: 02:d7:37:2d:8f:b6:d6:54:a2:72:42:b8:97:ea:46: 47:eb:b0:d9:91:2b:d1:77:75:22:40:58:90:4d:62: 5e:64:3f:28:7f:aa:ba:81:61:71:1f:9c:da:5b:c7: 58:70:41:9e:df:5c:aa:ef:6c:6c:2b:3e:7e:db:0d: 6e:f3:28:27:3a:fd:27:5b:29:d7:6e:f0:ce:bf:c3: a0:6c:d9:5d:33:ae:e9:ed:65:70:a9:a4:c8:19:05: 7f:e9:4b:6e:30:7c:30:47:26:91:0d:e0:29:d8:0f: 3e:72:c7:d2:92:0f:b9:a4:17:0a:c3:50:93:23:1d: 73:64:7b:92:a2:70:a1:4b:a0:fd:1b:61:cd:46:52: ad:1c:69:29:c2:2a:f6:5c:76:55:dd:95:8c:b6:db: e8:41:69:c8:3b:d9:36:ed:5c:9d:66:01:b5:ad:4f: 75:df:c0:89:01:87:bb:6b:d0:9e:d5:fc:a2:84:8b: 2f:7d:7b:43:ac:c6:60:eb:cf:a7:02:10:55:9f:b2: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:2B:8F:75:EC:15:30:11:3D:D8:56:2C:96:A7:20:85:3E:9F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2a6a8c7-920d-3883-9dd8-1a158b8f2ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ea:23:d1:06:0e:78:4a:44:c0:43:35:9b:a4:fc:e1:d8:0b: e9:26:c4:04:95:0e:fc:44:0b:6d:bb:33:09:37:68:26:af:60: 80:3f:10:32:af:21:9e:7c:50:f7:40:70:88:0c:cc:fe:a0:54: ee:b4:04:99:de:84:7f:4f:84:af:95:a1:a1:8a:fd:47:79:5d: 5d:ec:f0:c4:e8:92:80:74:5c:56:89:7b:11:36:c4:84:9f:73: 3c:2f:81:74:ae:da:89:b2:28:53:07:ef:6f:90:21:06:e9:65: 44:9c:97:a2:96:f5:31:84:8f:7c:19:6d:fa:83:30:9b:3c:dc: ea:6f:83:2a:8c:f0:ef:a9:21:8a:2b:9f:72:57:60:30:f6:98: 2d:fb:13:fa:7a:b4:12:20:03:0e:64:bf:3b:57:0f:b4:2f:06: 30:63:04:90:07:36:a2:3f:a1:c3:51:40:8f:bb:0f:33:c1:fb: 75:30:ee:6d:d1:3e:9e:b1:a8:38:68:2a:57:0a:a4:57:df:f9: 86:95:37:29:41:aa:4f:82:42:03:b3:0e:db:1c:81:47:a0:a4: 03:e8:de:6e:2d:5b:01:92:08:0f:66:5d:98:d4:4e:04:7c:f0: f4:0e:89:56:23:71:42:fc:23:1c:60:48:33:66:39:09:f8:a2: 3a:34:4e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRoeLoIkkOT6IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk Y2I2NzE5NWEtMTlhNS00MWQyLTgzNmYtMWI3NmQ2YmE2MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvU4OzXe4gnshTegSX2Zz9wAcwgYIOR9WiO vcSkFP3tPhvo8BQQqzw7YSlsJas3HiWz4CLtKZ7YQ8UC1zctj7bWVKJyQriX6kZH 67DZkSvRd3UiQFiQTWJeZD8of6q6gWFxH5zaW8dYcEGe31yq72xsKz5+2w1u8ygn Ov0nWynXbvDOv8OgbNldM67p7WVwqaTIGQV/6UtuMHwwRyaRDeAp2A8+csfSkg+5 pBcKw1CTIx1zZHuSonChS6D9G2HNRlKtHGkpwir2XHZV3ZWMttvoQWnIO9k27Vyd ZgG1rU9138CJAYe7a9Ce1fyihIsvfXtDrMZg68+nAhBVn7JUAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyNK4917BUwET3YViyWpyCFPp+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjJhNmE4YzctOTIwZC0z ODgzLTlkZDgtMWExNThiOGYyYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbqI9EGDnhKRMBDNZuk/OHYC+kmxASVDvxEC227Mwk3aCavYIA/EDKv IZ58UPdAcIgMzP6gVO60BJnehH9PhK+VoaGK/Ud5XV3s8MTokoB0XFaJexE2xISf czwvgXSu2omyKFMH72+QIQbpZUScl6KW9TGEj3wZbfqDMJs83OpvgyqM8O+pIYor n3JXYDD2mC37E/p6tBIgAw5kvztXD7QvBjBjBJAHNqI/ocNRQI+7DzPB+3Uw7m3R Pp6xqDhoKlcKpFff+YaVNylBqk+CQgOzDtscgUegpAPo3m4tWwGSCA9mXZjUTgR8 8PQOiVYjcUL8IxxgSDNmOQn4ojo0Thk= -----END CERTIFICATE-----Generated at Mon Sep 21 10:49:52 2026 by rpki-client