$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09b4f882-dbd9-39d8-a082-7ee10839fcd6.roa File: 09b4f882-dbd9-39d8-a082-7ee10839fcd6.roa (raw, json) Hash identifier: FSlCwtiEVJ/8zqZbNiFQQp7PIsGkxr1lDlXjxF1mFzg= Subject key identifier: 63:F4:B7:2B:09:DF:A0:5C:6E:1E:87:FD:DA:C0:A5:18:28:9A:63:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49732D19C532D4C542BA0840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09b4f882-dbd9-39d8-a082-7ee10839fcd6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2d:19:c5:32:d4:c5:42:ba:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a8a122a-aac9-4764-ac95-e04c86dbde1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:eb:dd:e4:fd:82:10:5c:88:87:5f:83:cf: c5:4b:f0:f9:ac:ab:9e:f0:c1:5b:fd:fb:72:ef:ad: 43:3d:b3:28:e1:08:8f:1f:a6:2a:c6:64:ba:b8:a2: 0b:b5:9d:94:e3:78:ff:4b:33:60:bb:12:98:6b:3d: 8f:18:f0:58:07:b8:f6:0f:09:6d:85:14:dc:b1:7b: 18:d3:99:6b:32:07:66:c9:22:3d:b3:24:01:35:4e: 73:2b:27:db:f4:32:b7:6b:e9:44:bf:2c:92:0c:2e: 50:b1:24:4b:0e:c2:fb:8c:71:7f:11:80:fa:d8:7e: fd:62:bc:e8:f5:a4:0c:8b:18:97:d2:3c:5e:11:2a: 88:87:63:fa:8d:65:e6:d5:be:49:9a:ae:d3:1b:f9: 2d:f4:bc:5a:91:5c:8f:94:54:de:39:d6:05:66:77: 30:03:fb:8a:45:23:21:bd:95:8b:55:de:86:27:4c: a1:fc:06:45:1b:fd:25:3b:c5:32:bb:e8:ea:43:8b: be:85:c7:4d:3a:32:5d:7a:d1:f6:62:c9:9b:34:15: ec:07:59:a0:a9:9d:1d:d1:22:9c:8f:4b:40:cf:5d: 97:48:c1:33:30:3f:bd:2e:0a:32:0a:c9:ef:34:49: 3a:94:7b:f8:70:63:a1:f1:9e:bc:ba:8d:b0:7e:da: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:B7:2B:09:DF:A0:5C:6E:1E:87:FD:DA:C0:A5:18:28:9A:63:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09b4f882-dbd9-39d8-a082-7ee10839fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:aa:cb:71:be:99:b4:fd:cd:eb:c6:d4:ee:67:2a:bc:97: df:79:98:db:dc:9e:6f:20:01:8f:1b:21:4d:c2:ca:29:55:d3: f6:73:89:81:1f:87:13:da:6a:b3:aa:bd:21:37:39:91:5e:6e: 17:20:dc:cc:8a:b3:53:08:85:37:98:3b:8c:6a:59:f0:5e:50: 14:bb:b6:df:ad:ef:f5:7a:45:22:67:eb:e1:48:62:09:04:2b: 41:c0:8d:a1:66:05:4e:fd:b4:8f:a4:c8:91:42:9f:c2:33:6f: 09:da:be:ae:32:25:1e:03:ef:15:01:97:98:61:70:c8:bb:cb: 52:2d:a0:8f:32:d0:5e:2d:51:f1:0e:bb:89:90:c6:fa:49:a1: de:43:4d:4c:dd:41:5d:94:0a:fe:22:c7:3a:50:d5:ab:63:b6: f8:0f:fc:b0:0a:34:e4:80:30:3e:e5:df:cb:55:2a:22:6c:f6: 24:db:fd:8f:c9:ab:ce:02:66:36:a3:b4:0b:02:2e:36:28:52: fb:5f:e7:33:1e:a8:e6:87:22:1b:94:9a:e7:29:0a:c7:fc:45: a4:ae:3f:e7:43:19:ca:e9:d5:c1:21:e5:b8:b5:0e:c5:17:08: c6:7a:96:e4:a7:97:f4:2f:73:3e:78:8a:4f:34:68:76:e0:62: cd:48:bb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy0ZxTLUxUK6CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E4YTEyMmEtYWFjOS00NzY0LWFjOTUtZTA0Yzg2ZGJkZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwfr3eT9ghBciIdfg8/FS/D5rKue8MFb/fty 761DPbMo4QiPH6YqxmS6uKILtZ2U43j/SzNguxKYaz2PGPBYB7j2DwlthRTcsXsY 05lrMgdmySI9syQBNU5zKyfb9DK3a+lEvyySDC5QsSRLDsL7jHF/EYD62H79Yrzo 9aQMixiX0jxeESqIh2P6jWXm1b5Jmq7TG/kt9LxakVyPlFTeOdYFZncwA/uKRSMh vZWLVd6GJ0yh/AZFG/0lO8Uyu+jqQ4u+hcdNOjJdetH2YsmbNBXsB1mgqZ0d0SKc j0tAz12XSMEzMD+9LgoyCsnvNEk6lHv4cGOh8Z68uo2wftqe0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP0tysJ36Bcbh6H/drApRgommMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDliNGY4ODItZGJkOS0z OWQ4LWEwODItN2VlMTA4MzlmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiNqstxvpm0/c3rxtTuZyq8l995mNvcnm8gAY8bIU3CyilV0/ZziYEf hxPaarOqvSE3OZFebhcg3MyKs1MIhTeYO4xqWfBeUBS7tt+t7/V6RSJn6+FIYgkE K0HAjaFmBU79tI+kyJFCn8Izbwnavq4yJR4D7xUBl5hhcMi7y1ItoI8y0F4tUfEO u4mQxvpJod5DTUzdQV2UCv4ixzpQ1atjtvgP/LAKNOSAMD7l38tVKiJs9iTb/Y/J q84CZjajtAsCLjYoUvtf5zMeqOaHIhuUmucpCsf8RaSuP+dDGcrp1cEh5bi1DsUX CMZ6luSnl/Qvcz54ik80aHbgYs1Iu2k= -----END CERTIFICATE-----Generated at Sat Sep 26 18:38:04 2026 by rpki-client