$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa File: 028897f4-52d8-3563-8d53-8759d0d4d122.roa (raw, json) Hash identifier: YIMMXbd6gASGy9CxUnLqdXU9fxK3Y53vs/WDfinUB48= Subject key identifier: C0:AD:97:29:7A:55:57:D9:CC:82:6A:8A:45:92:68:A5:40:7C:7D:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F46A7F31809A4E333E9BB4610 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f3:18:09:a4:e3:33:e9:bb:46:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=2f0e3d30-bf48-4ed2-a3d4-b6fa99b3ddd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:8d:03:d5:f7:ef:e8:66:a6:a1:5f:44:6e: 97:04:ed:63:48:84:2e:ed:c8:07:fb:fa:eb:35:ee: 8b:6f:d1:f6:92:98:ed:67:11:a5:cf:81:47:15:5e: dd:61:42:c2:62:32:6f:d3:7b:23:f3:71:a6:53:43: b8:2d:07:2a:25:fd:d1:d3:83:3b:f3:95:ff:f2:6e: 72:c6:2f:73:a1:00:12:f6:51:3c:19:71:72:31:5c: ee:63:33:de:66:77:3e:f9:d7:b0:7c:4c:75:7d:a6: 56:e0:1f:db:fd:40:68:35:9f:c8:5e:b8:bb:97:ae: 25:d3:fb:e6:da:b2:8c:66:6a:64:27:2a:16:65:be: d0:48:8b:e7:a0:31:63:2c:b5:da:27:be:a0:0f:c3: d0:fb:30:4e:e2:b8:d3:18:83:2f:c3:29:bd:65:ce: 02:3c:6e:eb:37:5b:41:85:ac:4c:b8:b1:33:83:a1: 85:56:b2:26:3f:d9:ab:d6:52:12:fa:4f:47:06:40: e6:17:f8:27:30:f6:64:a2:46:5c:6f:12:e6:83:4d: 7f:15:e3:78:21:d5:3a:b2:85:94:fa:21:8d:82:2c: 66:62:21:aa:9f:12:5f:63:41:43:e5:2c:b3:b7:16: 45:55:15:12:39:e5:b9:00:6b:2a:a7:6f:b4:c8:43: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AD:97:29:7A:55:57:D9:CC:82:6A:8A:45:92:68:A5:40:7C:7D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e5:e5:5f:1f:04:fb:43:f0:18:ca:dc:13:3f:ad:66:2b:8f: 33:4b:53:fa:b3:a9:87:89:07:a9:47:41:ad:94:f9:db:cb:f7: 4c:d2:78:7f:bb:ec:4a:18:d6:c6:4a:18:77:25:ca:41:02:f1: 11:c3:ef:27:61:20:52:da:8e:8d:91:b6:54:6d:73:61:d5:5a: dd:f2:3b:66:cd:c6:a1:ee:34:0a:0a:04:2c:0d:4e:3e:65:04: 92:b3:a8:8b:09:28:65:00:8f:2b:99:6c:cd:5a:ac:f6:70:9b: d7:dc:bc:e5:c1:5b:b8:bf:ac:a1:93:2e:b1:15:3b:d6:e3:22: d6:14:3f:c0:a7:b1:b6:1c:43:e6:ed:b5:e1:c1:de:b9:7a:c8: f7:04:62:a3:bd:a6:ee:6e:b8:75:20:6c:92:8a:53:e0:e8:f8: a8:f0:10:ab:da:cb:25:fc:f3:73:1f:98:e7:dc:39:c4:91:dd: a5:f2:92:be:05:cc:44:37:da:c9:43:81:70:1c:a6:98:e7:c6: 6f:60:54:b8:1f:0d:ae:e6:cf:82:39:c5:2a:d6:5d:a4:cc:14: 19:ad:fe:42:9a:6a:90:e5:2f:db:02:80:94:b1:cc:04:69:ee: 60:0f:f2:00:16:1d:d8:39:5a:a1:85:59:32:2b:93:db:09:14: a1:e8:bb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/MYCaTjM+m7RhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MmYwZTNkMzAtYmY0OC00ZWQyLWEzZDQtYjZmYTk5YjNkZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyCNA9X37+hmpqFfRG6XBO1jSIQu7cgH+/rr Ne6Lb9H2kpjtZxGlz4FHFV7dYULCYjJv03sj83GmU0O4LQcqJf3R04M785X/8m5y xi9zoQAS9lE8GXFyMVzuYzPeZnc++dewfEx1faZW4B/b/UBoNZ/IXri7l64l0/vm 2rKMZmpkJyoWZb7QSIvnoDFjLLXaJ76gD8PQ+zBO4rjTGIMvwym9Zc4CPG7rN1tB haxMuLEzg6GFVrImP9mr1lIS+k9HBkDmF/gnMPZkokZcbxLmg01/FeN4IdU6soWU +iGNgixmYiGqnxJfY0FD5SyztxZFVRUSOeW5AGsqp2+0yEOhnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCtlyl6VVfZzIJqikWSaKVAfH2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDI4ODk3ZjQtNTJkOC0z NTYzLThkNTMtODc1OWQwZDRkMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnl5V8fBPtD8BjK3BM/rWYrjzNLU/qzqYeJB6lHQa2U+dvL90zSeH+7 7EoY1sZKGHclykEC8RHD7ydhIFLajo2RtlRtc2HVWt3yO2bNxqHuNAoKBCwNTj5l BJKzqIsJKGUAjyuZbM1arPZwm9fcvOXBW7i/rKGTLrEVO9bjItYUP8CnsbYcQ+bt teHB3rl6yPcEYqO9pu5uuHUgbJKKU+Do+KjwEKvayyX883MfmOfcOcSR3aXykr4F zEQ32slDgXAcppjnxm9gVLgfDa7mz4I5xSrWXaTMFBmt/kKaapDlL9sCgJSxzARp 7mAP8gAWHdg5WqGFWTIrk9sJFKHou1w= -----END CERTIFICATE-----Generated at Sat Sep 26 15:46:35 2026 by rpki-client