$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa File: 11b3517b-f12e-375d-b1d9-32d912779dc7.roa (raw, json) Hash identifier: x+xyi/6dY4MLykriWhzYlAIZ0rmEiTMuQ1XysghpCUk= Subject key identifier: B4:D9:2C:8D:27:28:B3:E9:96:9A:19:9E:42:D6:B1:C9:B2:6F:37:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498823D931DE2A43CD123418 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.29.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:23:d9:31:de:2a:43:cd:12:34:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e5938552-28ba-4cd8-9a53-b74dfba7fbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:1d:ac:ab:9c:ba:f3:09:a9:97:45:ca:31: fa:e9:8c:35:1b:e5:ac:06:79:bb:5c:25:e7:ae:30: 1a:69:49:0a:ba:3a:4d:83:f6:21:e1:8f:05:3c:43: a8:bf:1b:5f:9e:67:6c:05:be:fa:83:b5:3f:e9:4c: b0:4c:b4:49:f0:d7:f4:5f:23:ad:88:76:d0:79:e2: aa:c2:32:d6:34:28:a1:d3:79:c2:1e:eb:bb:8a:ea: 6f:dd:2a:38:3f:f4:bb:42:45:9b:f4:f7:cb:ba:2d: 58:f4:84:ad:f1:b1:45:db:ed:16:e4:ff:9d:42:cb: 2d:1d:6f:f0:d8:7c:2e:ee:25:6d:87:bf:1b:60:83: 73:aa:76:54:5c:47:83:c2:b2:f8:10:c7:8b:48:26: 3a:28:94:2b:99:0a:56:25:73:fc:11:01:75:b1:84: 75:94:cb:08:25:e6:3c:24:b5:a8:91:9c:f8:7a:24: 92:6f:14:5a:84:5c:a9:e8:8b:fb:b8:be:4c:23:21: c9:6d:f9:d2:cf:60:26:03:dd:d2:43:cb:cd:28:93: 48:93:09:5a:77:b4:8b:8b:a5:72:5a:85:8b:84:8f: 7f:19:9f:ba:fa:91:a5:4d:ac:47:2f:3c:e5:7f:f2: 59:74:9d:35:de:25:03:58:a1:18:5e:ca:40:bc:ee: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D9:2C:8D:27:28:B3:E9:96:9A:19:9E:42:D6:B1:C9:B2:6F:37:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9a:67:62:9f:a2:cf:65:0e:de:ee:af:3a:0b:1c:ec:26:5f: 88:50:89:a7:15:76:36:cc:8b:2b:0b:32:4c:fc:df:33:32:46: 3a:b9:3b:6d:8e:64:7d:cb:62:e7:67:58:86:b6:0a:98:a3:d2: 6a:f7:5a:aa:17:30:33:c9:f9:5b:5d:f6:5b:ad:ca:1a:3b:55: 51:af:2c:0b:cb:5f:52:68:c0:4e:fc:5f:b2:42:98:88:9e:ab: 62:d4:87:2b:86:0e:9a:c4:99:3c:2f:37:5c:7a:3d:63:0f:1e: 47:cc:ff:4b:48:cd:1c:d3:52:21:2d:cb:bc:33:7b:3b:be:b8: 71:5a:ac:b7:b1:7d:1e:d5:bc:06:f0:19:b4:f8:b3:79:55:23: 13:9f:03:4f:10:6e:18:9f:97:58:0c:dc:95:13:d7:53:be:4d: 37:a6:9b:3c:ee:7e:f6:0a:44:87:12:e2:04:5a:33:69:ac:71: 33:3e:3d:77:53:db:87:24:f3:be:69:58:e4:43:00:5a:77:9e: 60:9e:b1:09:30:04:6c:b6:f0:1d:d0:34:97:d9:71:9e:a1:c7: 6b:43:22:aa:2c:dc:75:0a:14:f2:a5:17:db:ae:b6:b6:b5:3d: 26:b0:3f:3b:5d:58:c7:b8:19:a3:8f:1f:d0:23:9f:d0:76:d6: 3e:2d:d4:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCPZMd4qQ80SNBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTU5Mzg1NTItMjhiYS00Y2Q4LTlhNTMtYjc0ZGZiYTdmYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ0drKucuvMJqZdFyjH66Yw1G+WsBnm7XCXn rjAaaUkKujpNg/Yh4Y8FPEOovxtfnmdsBb76g7U/6UywTLRJ8Nf0XyOtiHbQeeKq wjLWNCih03nCHuu7iupv3So4P/S7QkWb9PfLui1Y9ISt8bFF2+0W5P+dQsstHW/w 2Hwu7iVth78bYINzqnZUXEeDwrL4EMeLSCY6KJQrmQpWJXP8EQF1sYR1lMsIJeY8 JLWokZz4eiSSbxRahFyp6Iv7uL5MIyHJbfnSz2AmA93SQ8vNKJNIkwlad7SLi6Vy WoWLhI9/GZ+6+pGlTaxHLzzlf/JZdJ013iUDWKEYXspAvO6PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTZLI0nKLPplpoZnkLWscmybzc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFiMzUxN2ItZjEyZS0z NzVkLWIxZDktMzJkOTEyNzc5ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6aZ2Kfos9lDt7urzoLHOwmX4hQiacVdjbMiysLMkz83zMyRjq5O22O ZH3LYudnWIa2Cpij0mr3WqoXMDPJ+Vtd9lutyho7VVGvLAvLX1JowE78X7JCmIie q2LUhyuGDprEmTwvN1x6PWMPHkfM/0tIzRzTUiEty7wzezu+uHFarLexfR7VvAbw GbT4s3lVIxOfA08Qbhifl1gM3JUT11O+TTemmzzufvYKRIcS4gRaM2mscTM+PXdT 24ck875pWORDAFp3nmCesQkwBGy28B3QNJfZcZ6hx2tDIqos3HUKFPKlF9uutra1 PSawPztdWMe4GaOPH9Ajn9B21j4t1F8= -----END CERTIFICATE-----Generated at Mon Sep 28 08:39:06 2026 by rpki-client