$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa File: 1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa (raw, json) Hash identifier: SRZ8Gav21+ZPS2ZBFBi/H9A5kAEUsysCoJZqpQ1z2Jg= Subject key identifier: 4D:72:DF:82:5B:28:3D:FB:01:74:8D:9F:C1:09:7C:F2:F7:7A:CC:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498811F251E01B3A6087D900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:11:f2:51:e0:1b:3a:60:87:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25d609ca-29e2-468a-8138-cf57f9fc3765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:f8:f7:86:de:05:dc:29:1b:ad:d0:ff:2d: e2:9e:49:a6:50:1c:31:fa:cd:cb:5e:69:fa:1f:76: 09:70:d4:aa:6d:46:38:eb:f6:54:b6:9c:15:b0:0e: 82:49:44:94:33:4f:23:24:06:cb:32:57:d2:ab:a2: 93:59:f9:d5:1b:84:d7:9f:28:55:83:06:8e:28:8f: d5:61:65:e3:88:65:d6:27:d2:3e:e9:38:f2:b7:39: 33:c8:5a:e3:03:e0:0d:83:d2:11:44:ab:2a:68:75: 88:29:a1:e0:46:60:cc:f4:08:3d:a5:6c:04:dc:32: b7:17:7e:ba:9b:7c:31:50:9c:68:23:f6:36:b4:77: 65:01:6e:44:2c:e7:3e:5c:46:46:bd:71:e9:18:d8: 5d:d9:0c:87:f2:c4:97:34:89:76:ac:40:e6:6b:0e: 97:0e:3a:6e:cd:20:b3:f5:84:b1:63:76:da:15:17: 4d:98:2e:cc:24:74:b4:97:bb:74:21:1a:97:53:56: cf:10:b7:74:cd:b1:2c:76:8b:c0:4e:f4:32:da:43: ae:80:2f:62:f9:cc:47:de:5a:6b:73:40:ca:21:7d: 25:5c:07:18:08:60:3a:d7:a3:8f:f0:7f:c9:2e:c7: de:59:e7:9c:bf:4d:7e:70:f9:56:5b:a7:c8:95:9e: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:DF:82:5B:28:3D:FB:01:74:8D:9F:C1:09:7C:F2:F7:7A:CC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a7:b7:9c:a7:6c:c8:9b:5a:9a:28:ce:8d:18:d8:1c:85:d4: 4e:13:89:96:a7:70:8c:1e:b3:11:ed:65:d0:80:2b:4b:5c:58: 6d:5d:9c:66:1a:88:03:31:5b:52:60:9a:82:29:db:24:9f:e4: ca:95:97:e2:0e:3c:84:b6:54:93:30:6c:db:4b:70:84:0a:bd: e9:e5:a7:63:02:f2:28:18:84:bb:57:73:47:95:f2:9a:59:8a: 32:53:39:f1:3e:4d:70:49:1b:f7:0c:6f:26:16:2d:81:fc:cf: 25:1f:17:ae:a8:01:9a:d3:1d:e8:53:8d:3a:90:0d:ad:d3:87: 2a:c7:0c:53:e3:16:ee:37:05:ca:d9:51:3c:22:ce:7c:4e:1c: 53:09:49:66:c0:4c:8e:69:dc:2b:ac:1b:64:19:5a:7a:fb:4c: 4b:5d:2b:28:72:7d:0b:71:9e:c2:ea:8d:66:ba:17:b7:c8:fb: 51:1a:1c:26:26:d3:e9:92:49:a2:e0:17:45:2b:cc:a9:56:e7: f6:e1:5e:52:50:29:9a:42:d3:45:9c:6d:fd:a9:62:1d:52:74: 2e:f2:ff:bf:b4:b1:7c:5b:34:e8:50:2c:d4:3c:42:f8:09:9c: d9:fa:17:08:96:2c:3d:a1:fc:76:46:81:64:fd:16:b0:40:f9: f5:54:43:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiBHyUeAbOmCH2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVkNjA5Y2EtMjllMi00NjhhLTgxMzgtY2Y1N2Y5ZmMzNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth7494beBdwpG63Q/y3inkmmUBwx+s3LXmn6 H3YJcNSqbUY46/ZUtpwVsA6CSUSUM08jJAbLMlfSq6KTWfnVG4TXnyhVgwaOKI/V YWXjiGXWJ9I+6TjytzkzyFrjA+ANg9IRRKsqaHWIKaHgRmDM9Ag9pWwE3DK3F366 m3wxUJxoI/Y2tHdlAW5ELOc+XEZGvXHpGNhd2QyH8sSXNIl2rEDmaw6XDjpuzSCz 9YSxY3baFRdNmC7MJHS0l7t0IRqXU1bPELd0zbEsdovATvQy2kOugC9i+cxH3lpr c0DKIX0lXAcYCGA616OP8H/JLsfeWeecv01+cPlWW6fIlZ5evwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1y34JbKD37AXSNn8EJfPL3eswKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM5N2EwZGQtZjI5My0z YWMxLThjOTYtMTZhYzNlNGUyOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKnt5ynbMibWpoozo0Y2ByF1E4TiZancIwesxHtZdCAK0tcWG1dnGYa iAMxW1JgmoIp2ySf5MqVl+IOPIS2VJMwbNtLcIQKvenlp2MC8igYhLtXc0eV8ppZ ijJTOfE+TXBJG/cMbyYWLYH8zyUfF66oAZrTHehTjTqQDa3ThyrHDFPjFu43BcrZ UTwiznxOHFMJSWbATI5p3CusG2QZWnr7TEtdKyhyfQtxnsLqjWa6F7fI+1EaHCYm 0+mSSaLgF0UrzKlW5/bhXlJQKZpC00Wcbf2pYh1SdC7y/7+0sXxbNOhQLNQ8QvgJ nNn6FwiWLD2h/HZGgWT9FrBA+fVUQ5k= -----END CERTIFICATE-----Generated at Thu Oct 1 23:16:31 2026 by rpki-client