$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d280886-5f93-320d-8e77-de19e03e92e6.roa File: 0d280886-5f93-320d-8e77-de19e03e92e6.roa (raw, json) Hash identifier: /aeEwcFe7/Js5x4o3KT97QDS073V57uFhvCaZqamzEo= Subject key identifier: F6:A4:3B:1F:0A:54:E6:99:46:C2:65:D7:F1:33:2C:37:FF:79:B5:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497467339DAAB9BC7C624040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d280886-5f93-320d-8e77-de19e03e92e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 150.195.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:67:33:9d:aa:b9:bc:7c:62:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=91cc0e24-6923-42d6-be3f-0cc15f9a06cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:a7:07:f4:85:a6:a3:5e:52:94:fb:15:b7: ef:8a:24:7d:ce:c6:ba:39:51:6c:5b:9e:56:aa:9a: 5c:7d:f0:07:b5:c1:e9:87:79:5c:ca:14:91:c6:8c: 13:bf:eb:56:0f:ac:87:7b:38:56:9b:43:4c:ce:e2: ee:5b:d4:ea:30:0d:09:1f:27:53:7c:da:e2:7d:8e: 40:bc:ba:b7:47:09:59:b0:a0:6c:1f:de:72:b3:22: b8:7f:92:e9:3c:56:80:15:ca:2c:e9:fb:93:c2:7d: e5:77:a0:26:22:94:55:cb:70:2b:23:79:49:c2:2e: 22:00:15:bb:cf:8d:a1:73:b7:ec:a3:a2:39:82:c0: 73:47:32:c2:53:61:90:e3:c2:f9:85:60:25:f5:7e: e7:9b:53:8a:13:d4:7b:38:7d:5c:44:32:36:46:50: a9:5f:72:65:2d:e7:f3:19:b6:f9:e8:89:54:0d:ac: 05:a2:69:93:d2:a0:c4:73:f3:95:ab:90:44:ef:00: f6:a1:94:e0:41:4f:fa:7d:e0:73:d0:50:ed:8f:0a: e1:39:02:5c:1b:79:79:d6:98:25:25:01:11:4e:49: 4d:25:31:b4:d7:0f:fb:f4:56:09:84:a9:a5:c2:f9: 86:f2:f6:00:97:6d:e3:07:f3:ec:29:52:5f:80:90: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:3B:1F:0A:54:E6:99:46:C2:65:D7:F1:33:2C:37:FF:79:B5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d280886-5f93-320d-8e77-de19e03e92e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6e:cd:4b:9c:f7:e9:7e:65:9e:73:e7:18:dd:45:3d:2b:cc: 74:9a:70:bd:78:cc:7f:7e:8a:d6:e0:72:63:f5:dc:8c:da:1c: 2a:3b:f2:c7:e8:98:88:8c:ca:a9:9a:e1:a6:99:3e:6b:e2:ae: c5:54:1c:e7:e4:92:62:ef:47:81:69:d1:16:4c:4e:dc:4e:6e: aa:c6:06:66:7b:e2:a1:b3:80:0b:38:6f:d1:87:77:40:c8:ba: 89:d3:14:a6:79:03:d9:54:46:fa:6f:6e:74:fb:97:2a:fc:48: 5b:b2:eb:61:35:7c:fb:fd:de:d6:5d:e7:2a:e9:02:78:b9:0f: 7a:10:73:75:84:0b:95:7d:2a:03:f5:da:86:85:8d:48:d5:fa: b9:1a:18:c5:d9:1d:bd:60:e1:b7:9b:2c:a0:fb:a5:02:42:67: c4:71:e6:12:52:c1:e8:38:25:22:e0:29:ee:45:9e:d6:2d:f2: 5d:28:1f:a5:c6:a3:4e:f4:e3:db:27:a8:9d:1d:08:d7:b1:a0: a3:21:ec:dc:f5:fa:c4:e1:96:fa:34:32:f0:0a:61:12:e1:97: 5b:cc:50:ca:02:34:5d:69:f7:95:74:e1:8f:5f:3e:bf:a7:de: 34:2d:67:d8:f5:29:37:b0:28:6f:c5:da:63:bf:15:77:2c:ba: c0:aa:2d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGcznaq5vHxiQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTFjYzBlMjQtNjkyMy00MmQ2LWJlM2YtMGNjMTVmOWEwNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XOnB/SFpqNeUpT7FbfviiR9zsa6OVFsW55W qppcffAHtcHph3lcyhSRxowTv+tWD6yHezhWm0NMzuLuW9TqMA0JHydTfNrifY5A vLq3RwlZsKBsH95ysyK4f5LpPFaAFcos6fuTwn3ld6AmIpRVy3ArI3lJwi4iABW7 z42hc7fso6I5gsBzRzLCU2GQ48L5hWAl9X7nm1OKE9R7OH1cRDI2RlCpX3JlLefz Gbb56IlUDawFommT0qDEc/OVq5BE7wD2oZTgQU/6feBz0FDtjwrhOQJcG3l51pgl JQERTklNJTG01w/79FYJhKmlwvmG8vYAl23jB/PsKVJfgJB/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPakOx8KVOaZRsJl1/EzLDf/ebVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGQyODA4ODYtNWY5My0z MjBkLThlNzctZGUxOWUwM2U5MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1uzUuc9+l+ZZ5z5xjdRT0rzHSacL14zH9+itbgcmP13IzaHCo78sfo mIiMyqma4aaZPmvirsVUHOfkkmLvR4Fp0RZMTtxObqrGBmZ74qGzgAs4b9GHd0DI uonTFKZ5A9lURvpvbnT7lyr8SFuy62E1fPv93tZd5yrpAni5D3oQc3WEC5V9KgP1 2oaFjUjV+rkaGMXZHb1g4bebLKD7pQJCZ8Rx5hJSweg4JSLgKe5FntYt8l0oH6XG o07049snqJ0dCNexoKMh7Nz1+sThlvo0MvAKYRLhl1vMUMoCNF1p95V04Y9fPr+n 3jQtZ9j1KTewKG/F2mO/FXcsusCqLW4= -----END CERTIFICATE-----Generated at Fri Sep 25 06:37:26 2026 by rpki-client