$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ab3dd9b-e8ea-3470-84a8-03ec2e3f3cf5.roa File: 0ab3dd9b-e8ea-3470-84a8-03ec2e3f3cf5.roa (raw, json) Hash identifier: 91zKqDQmfk1EzGJl69c2F2vYThvsnN72xo+vL6Bnxrk= Subject key identifier: 96:36:0E:8A:5C:36:9E:CB:A8:4D:14:FE:A3:FA:27:D9:23:C3:70:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D62CFCEBBD402F940D4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ab3dd9b-e8ea-3470-84a8-03ec2e3f3cf5.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.19.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:62:cf:ce:bb:d4:02:f9:40:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=1b3adcd5-880c-4443-8b92-64b5a6a3a777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:c8:40:b5:79:27:2e:a8:0e:60:67:7d:71: 06:f7:eb:0c:b3:f8:d2:f1:df:37:9a:72:df:93:cf: f8:0c:2a:0a:34:4d:66:50:0e:3d:3f:dd:b9:f9:98: 01:97:64:ba:04:7a:13:ba:61:ce:8f:f3:e1:f6:e0: 54:8a:dc:91:33:b3:5e:c9:20:b1:bc:fa:9e:bc:12: 56:ff:88:05:e7:35:00:2d:d1:02:ea:e4:68:ce:ac: e5:33:fe:03:00:06:51:37:aa:17:f4:5b:d2:5a:6d: 0f:81:5c:9e:46:26:26:7f:98:e8:42:f5:0c:97:bd: 67:7a:29:3d:1e:12:d4:83:a1:b5:c7:87:dd:01:b7: b3:e1:af:56:6a:19:a8:3a:87:13:f8:3d:99:83:62: e7:a0:ff:eb:a2:e4:41:7f:15:8c:e5:7e:e5:48:1e: 1a:fd:db:97:e3:b2:b0:2c:0e:18:11:4f:f9:7e:eb: 5d:f9:93:db:23:1f:86:d4:4b:ae:dd:82:3b:c5:e9: 1d:d4:de:a9:87:0e:53:fe:99:8a:9c:79:a6:c7:a6: 66:fd:42:87:f1:d2:70:5d:de:87:ef:30:af:8a:a9: c3:84:f4:c1:04:d5:b3:f4:46:61:c5:98:40:ba:96: 14:8e:8c:56:04:a5:11:9c:47:44:d4:5a:30:d8:ea: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:36:0E:8A:5C:36:9E:CB:A8:4D:14:FE:A3:FA:27:D9:23:C3:70:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ab3dd9b-e8ea-3470-84a8-03ec2e3f3cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f0:f9:0c:e7:47:7b:59:83:07:a8:46:e5:ac:d3:6e:f3:a4: 82:29:d2:43:dd:ba:50:71:70:e6:c2:ae:8a:4a:98:56:86:f5: e9:66:61:53:40:fa:4b:a7:e7:dc:be:50:ea:d4:d8:f6:1d:49: 55:f9:f8:08:8a:55:a3:6f:54:c5:77:39:b9:3e:e0:60:86:fa: fd:4e:8f:d0:bb:3f:25:18:a9:3a:d6:65:6a:0e:10:8b:6b:0f: fb:80:b1:c8:da:f4:56:7b:f7:92:98:df:71:4e:88:2e:b6:45: 2a:aa:e6:43:1f:71:b3:a1:45:e7:38:5b:1e:a3:cc:6b:36:28: 39:28:37:b1:3d:d2:ae:dd:59:83:80:3a:67:24:9d:13:e4:81: f4:86:9f:63:c0:a1:c7:c3:2a:4c:dd:1c:a5:a2:ec:22:ee:46: 1b:84:5c:e1:a7:83:0d:4e:81:17:7d:61:21:bc:24:9b:a1:2d: 21:62:69:f2:53:ca:64:cf:a9:a8:82:a8:ab:87:f7:2f:c9:77: 96:2d:8e:a7:0f:d3:a4:b7:f2:9c:98:25:80:5f:d1:ea:d8:b6: 81:ff:91:18:a8:03:f7:52:ce:d1:68:48:8e:ba:31:92:78:4e: 9d:25:76:9e:ba:c0:c8:3e:8c:97:de:4b:10:ea:ac:b8:d1:28: ab:12:a6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWLPzrvUAvlA1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MWIzYWRjZDUtODgwYy00NDQzLThiOTItNjRiNWE2YTNhNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbXIQLV5Jy6oDmBnfXEG9+sMs/jS8d83mnLf k8/4DCoKNE1mUA49P925+ZgBl2S6BHoTumHOj/Ph9uBUityRM7NeySCxvPqevBJW /4gF5zUALdEC6uRozqzlM/4DAAZRN6oX9FvSWm0PgVyeRiYmf5joQvUMl71neik9 HhLUg6G1x4fdAbez4a9WahmoOocT+D2Zg2LnoP/rouRBfxWM5X7lSB4a/duX47Kw LA4YEU/5futd+ZPbIx+G1Euu3YI7xekd1N6phw5T/pmKnHmmx6Zm/UKH8dJwXd6H 7zCviqnDhPTBBNWz9EZhxZhAupYUjoxWBKURnEdE1Fow2OozBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY2DopcNp7LqE0U/qP6J9kjw3DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFiM2RkOWItZThlYS0z NDcwLTg0YTgtMDNlYzJlM2YzY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrw+QznR3tZgweoRuWs027zpIIp0kPdulBxcObCropKmFaG9elmYVNA +kun59y+UOrU2PYdSVX5+AiKVaNvVMV3Obk+4GCG+v1Oj9C7PyUYqTrWZWoOEItr D/uAscja9FZ795KY33FOiC62RSqq5kMfcbOhRec4Wx6jzGs2KDkoN7E90q7dWYOA OmcknRPkgfSGn2PAocfDKkzdHKWi7CLuRhuEXOGngw1OgRd9YSG8JJuhLSFiafJT ymTPqaiCqKuH9y/Jd5YtjqcP06S38pyYJYBf0erYtoH/kRioA/dSztFoSI66MZJ4 Tp0ldp66wMg+jJfeSxDqrLjRKKsSpmk= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:26 2026 by rpki-client