$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa File: 0ffe719d-7b62-3608-b488-f385e0f93231.roa (raw, json) Hash identifier: LUZ0Uj0K0IY1rl61NI3y6QmIjElQfhYAq1m/X3h0cjA= Subject key identifier: 7D:BC:E3:22:01:76:CF:50:94:D2:EC:CF:2E:1C:DD:1A:8F:AD:37:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE881F6EC23BCCC76C020 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.19.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e8:81:f6:ec:23:bc:cc:76:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=803cfb7a-f7cc-4766-abb2-1b403fa761b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:3f:d8:15:b1:6c:1f:cb:a9:d4:f2:99:2f: da:03:90:3b:0f:f0:70:2c:e1:b5:d0:b4:25:51:fa: 7a:53:9e:e9:f0:10:16:91:51:fc:e3:ab:b3:5b:07: 3e:e5:db:8a:c6:90:06:ce:dd:d4:73:e1:51:71:ae: 0b:cd:e9:3a:93:4f:b3:ae:d2:bd:88:84:d8:40:f8: 14:a0:20:43:b2:0c:4f:63:fd:85:67:58:76:3b:ec: 92:b6:cd:b9:75:db:d0:5e:6c:ee:08:22:53:d7:42: 67:60:90:00:26:1d:fd:66:d2:68:0d:4e:15:dd:c5: 2d:e4:6e:ac:63:91:2c:fe:4c:dd:3e:72:22:cb:7e: 65:f3:e6:01:d6:21:09:a0:8b:ff:87:c3:a2:3c:8f: 8d:bf:2e:5f:08:b7:6c:bf:74:7d:57:13:dc:cf:86: 8f:7b:4b:9d:e0:eb:17:cb:59:f5:ef:c5:ea:b0:93: 18:ae:0e:65:4e:ff:e4:da:01:41:9a:b6:cc:2a:76: f1:be:b9:42:5b:66:61:20:b1:48:fd:97:1e:84:af: 46:86:85:06:4b:6a:ee:7b:f3:60:18:35:d5:4b:71: 8c:e4:8c:64:85:24:2a:b7:14:10:11:5b:37:6c:c4: a4:35:ef:56:23:15:ab:c8:59:72:e5:b2:94:5e:81: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:E3:22:01:76:CF:50:94:D2:EC:CF:2E:1C:DD:1A:8F:AD:37:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:14:6c:06:d3:91:cf:8a:2b:f2:ab:a1:76:85:b8:86:db:32: 82:e1:e7:f1:34:3b:4b:64:7e:ae:69:bf:40:ac:bc:3d:7e:38: 66:18:c8:8a:d8:03:17:73:f5:2f:91:58:36:3e:32:b6:ea:50: 36:35:aa:cf:ad:95:a6:86:0e:34:c5:28:76:de:10:5f:36:dc: db:25:53:3c:1d:74:9d:10:bd:91:b8:dc:f8:41:46:62:de:89: 9f:ac:50:4a:c8:6f:18:74:7d:5e:0e:1e:9e:07:34:16:6e:de: 8b:39:58:53:9b:a1:9d:f8:2a:08:29:9f:a8:ba:e8:ba:d1:8e: ad:da:ee:fd:19:97:c1:89:23:ee:77:f3:7f:7a:27:bf:80:6e: 44:ca:61:f1:bf:a7:60:5d:8e:b5:c7:76:1f:6d:9e:fd:6d:7c: 92:39:ff:d2:65:aa:af:04:b7:57:c6:47:c8:1f:48:b5:23:9a: 8f:47:27:5e:6b:32:fe:9f:99:82:f4:09:5f:02:71:60:eb:78: 8d:37:f3:94:0f:ca:1b:a3:24:c2:b2:c2:90:5d:dc:1f:9f:f3: fa:41:17:b8:21:b5:18:ae:e7:e4:52:b1:06:1f:06:c8:94:5a: 83:0c:13:5c:32:69:b8:4c:22:11:36:1b:30:5a:09:60:db:08: c8:48:0b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeiB9uwjvMx2wCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODAzY2ZiN2EtZjdjYy00NzY2LWFiYjItMWI0MDNmYTc2MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTs/2BWxbB/LqdTymS/aA5A7D/BwLOG10LQl Ufp6U57p8BAWkVH846uzWwc+5duKxpAGzt3Uc+FRca4Lzek6k0+zrtK9iITYQPgU oCBDsgxPY/2FZ1h2O+ySts25ddvQXmzuCCJT10JnYJAAJh39ZtJoDU4V3cUt5G6s Y5Es/kzdPnIiy35l8+YB1iEJoIv/h8OiPI+Nvy5fCLdsv3R9VxPcz4aPe0ud4OsX y1n178XqsJMYrg5lTv/k2gFBmrbMKnbxvrlCW2ZhILFI/ZcehK9GhoUGS2rue/Ng GDXVS3GM5IxkhSQqtxQQEVs3bMSkNe9WIxWryFly5bKUXoHeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH284yIBds9QlNLszy4c3RqPrTf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZTcxOWQtN2I2Mi0z NjA4LWI0ODgtZjM4NWUwZjkzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAUbAbTkc+KK/KroXaFuIbbMoLh5/E0O0tkfq5pv0CsvD1+OGYYyIrY Axdz9S+RWDY+MrbqUDY1qs+tlaaGDjTFKHbeEF823NslUzwddJ0QvZG43PhBRmLe iZ+sUErIbxh0fV4OHp4HNBZu3os5WFOboZ34Kggpn6i66LrRjq3a7v0Zl8GJI+53 8396J7+AbkTKYfG/p2BdjrXHdh9tnv1tfJI5/9Jlqq8Et1fGR8gfSLUjmo9HJ15r Mv6fmYL0CV8CcWDreI0385QPyhujJMKywpBd3B+f8/pBF7ghtRiu5+RSsQYfBsiU WoMME1wyabhMIhE2GzBaCWDbCMhIC7E= -----END CERTIFICATE-----Generated at Sat Sep 26 11:35:07 2026 by rpki-client