$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa File: 0a230c6b-2917-388b-a676-14d9d9ea00e2.roa (raw, json) Hash identifier: Q1ELL1P3gZc/An/ph5i0gjJ1NVPxWAxUcY8QMh3oASk= Subject key identifier: 8D:FA:D4:45:3A:8E:09:77:7C:11:A5:AE:90:F8:2F:9A:B6:B0:5D:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D68FCAE9A5343CC19D080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.28.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:68:fc:ae:9a:53:43:cc:19:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bd607f92-9e97-48b9-a25a-462217a70557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:2b:74:0a:96:1f:29:b7:48:f0:8b:f0:62: 95:12:dc:7f:91:50:d2:31:6d:db:5f:e4:8c:7a:98: ad:37:86:90:51:9f:e1:1e:3d:b4:21:c0:42:65:d7: d3:3b:6e:bf:af:8c:c3:dc:8c:8c:02:40:00:2e:98: 8c:df:5e:02:86:1d:34:a6:d5:5d:6e:6f:76:44:8a: 58:46:82:20:50:7e:26:d4:15:94:24:67:24:9b:a6: 90:1d:e2:b8:de:98:47:a2:00:5b:84:a4:7a:19:eb: ab:45:74:01:3f:52:90:2d:eb:30:d5:b9:a5:f2:b4: 18:4b:26:47:86:bf:69:f6:62:3a:e1:91:d8:8c:05: bf:d0:15:31:b1:a2:82:e7:6a:43:28:74:41:dc:9d: 70:16:bd:70:4a:74:c2:8a:4e:8d:65:51:e6:a5:9c: c9:d7:8d:bb:56:e4:d1:eb:28:65:0a:88:77:df:f3: 75:d5:70:56:b4:5d:8b:16:18:ea:09:22:9f:8a:b5: ec:ad:c5:c5:92:78:9f:c5:ec:ae:c8:fb:3e:d0:17: 4d:3e:6b:72:5d:43:e1:21:7a:9e:7f:3a:a8:64:c5: 0e:98:93:be:4b:6a:f9:e9:92:25:b5:5a:9f:f4:ff: 8b:4f:17:b5:00:2d:45:e8:92:27:49:f6:51:98:16: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:D4:45:3A:8E:09:77:7C:11:A5:AE:90:F8:2F:9A:B6:B0:5D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:13:09:fc:5a:ee:e9:6e:95:36:70:6a:3a:04:59:81:2b:16: 61:fd:2e:e5:8e:f6:cc:23:06:3f:5f:bc:cf:e9:43:14:1e:1c: 92:98:a6:c1:97:48:20:31:fe:63:88:59:ae:b8:fa:61:de:df: 31:9f:ab:ff:0f:ce:8e:cf:e4:32:dd:b0:7c:8d:c8:1b:e6:7f: 44:08:bd:92:87:c4:66:e4:77:2c:fa:a4:71:86:c1:09:d5:61: 3c:5e:f7:cd:56:c3:c7:44:00:38:d1:25:bc:ef:05:18:cf:55: 67:db:c8:ae:64:b0:70:23:bc:e7:d1:40:b5:3f:99:5f:71:0c: 90:7f:db:64:03:56:87:d2:e6:84:87:6b:e5:db:39:b6:9b:01: 7a:72:52:ca:07:42:34:12:8b:3e:11:29:71:35:81:11:95:d5: 48:50:84:b0:84:37:b7:e2:01:88:30:08:79:b5:a7:86:a2:24: ed:a5:cc:81:0d:db:71:df:3d:b0:1e:5d:ce:cf:5f:92:50:1b: ee:f6:eb:28:ce:7d:5a:2e:b9:16:6a:cc:52:c9:6a:55:c2:36: 9f:e1:05:bd:c1:6c:02:8b:ee:e8:62:65:ca:dd:2f:d3:09:93: 91:79:44:0d:ad:09:1d:9c:39:39:17:9a:ce:f7:1c:a6:30:c7: 8a:1e:a8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWj8rppTQ8wZ0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmQ2MDdmOTItOWU5Ny00OGI5LWEyNWEtNDYyMjE3YTcwNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUUrdAqWHym3SPCL8GKVEtx/kVDSMW3bX+SM epitN4aQUZ/hHj20IcBCZdfTO26/r4zD3IyMAkAALpiM314Chh00ptVdbm92RIpY RoIgUH4m1BWUJGckm6aQHeK43phHogBbhKR6GeurRXQBP1KQLesw1bml8rQYSyZH hr9p9mI64ZHYjAW/0BUxsaKC52pDKHRB3J1wFr1wSnTCik6NZVHmpZzJ1427VuTR 6yhlCoh33/N11XBWtF2LFhjqCSKfirXsrcXFknifxeyuyPs+0BdNPmtyXUPhIXqe fzqoZMUOmJO+S2r56ZIltVqf9P+LTxe1AC1F6JInSfZRmBYtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI361EU6jgl3fBGlrpD4L5q2sF2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGEyMzBjNmItMjkxNy0z ODhiLWE2NzYtMTRkOWQ5ZWEwMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0TCfxa7ululTZwajoEWYErFmH9LuWO9swjBj9fvM/pQxQeHJKYpsGX SCAx/mOIWa64+mHe3zGfq/8Pzo7P5DLdsHyNyBvmf0QIvZKHxGbkdyz6pHGGwQnV YTxe981Ww8dEADjRJbzvBRjPVWfbyK5ksHAjvOfRQLU/mV9xDJB/22QDVofS5oSH a+XbObabAXpyUsoHQjQSiz4RKXE1gRGV1UhQhLCEN7fiAYgwCHm1p4aiJO2lzIEN 23HfPbAeXc7PX5JQG+726yjOfVouuRZqzFLJalXCNp/hBb3BbAKL7uhiZcrdL9MJ k5F5RA2tCR2cOTkXms73HKYwx4oeqMI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:45:07 2026 by rpki-client