$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d5d363c-91ef-3ebf-a9d1-8e5e24b437cf.roa File: 1d5d363c-91ef-3ebf-a9d1-8e5e24b437cf.roa (raw, json) Hash identifier: UpCtijltfXKvqoeJa9dsHJeJNqCkRFfG2vWiGsSUZzM= Subject key identifier: 16:B1:81:08:D3:F4:7A:07:CC:4E:43:E7:9A:E5:12:3A:C1:6C:32:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584FD7F1397508BB1B13A2C28460 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d5d363c-91ef-3ebf-a9d1-8e5e24b437cf.roa Signing time: Sun 15 Nov 2026 02:00:12 +0000 ROA not before: Sun 15 Nov 2026 02:00:12 +0000 ROA not after: Sat 13 Feb 2027 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f1:39:75:08:bb:1b:13:a2:c2:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 15 02:00:12 2026 GMT Not After : Feb 13 02:00:12 2027 GMT Subject: CN=39980fed-17ed-4f19-8844-5f505b204ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:f5:5e:b9:a6:39:f7:a7:bb:d0:30:3a:18: e3:8f:d4:40:a7:44:f9:cf:ff:ce:ec:c0:e6:ef:25: 87:a2:f3:84:12:cc:b4:78:54:b8:dc:94:d4:63:a2: 0f:e1:4b:a2:e0:cb:fe:6d:d0:17:b3:1b:e9:f4:2a: 49:97:2f:26:28:86:d9:ac:93:15:f0:39:60:b5:97: 16:ea:16:e8:b9:ce:bd:d3:68:58:66:5d:ef:83:35: 09:06:2f:e6:9a:7f:38:6f:cd:3f:ca:22:25:38:61: 90:33:cc:6c:c6:c6:e8:80:56:84:a7:1b:0a:42:dd: 1b:f9:9d:25:48:4d:0b:35:c4:b5:8f:dd:c6:86:9f: f5:a9:e1:2e:4f:55:ed:3b:3e:24:d5:01:48:f1:ea: 47:44:a1:f6:a9:7c:ed:a8:dc:82:bc:a2:7e:46:46: d5:05:ad:b5:2a:c7:97:84:52:8b:06:41:51:86:af: 07:bf:fb:eb:51:b8:12:86:ea:0a:3a:dc:67:88:d9: 44:8d:5f:24:96:61:85:0b:aa:8a:ce:55:95:85:8d: b5:7c:c4:cf:ff:67:5f:73:08:d2:04:18:8e:87:dc: b7:5c:c6:c3:5b:60:1b:a7:b7:bd:e1:c9:88:0f:87: 44:c6:c9:90:a3:1f:ff:39:eb:58:01:e2:bc:dc:91: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:81:08:D3:F4:7A:07:CC:4E:43:E7:9A:E5:12:3A:C1:6C:32:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d5d363c-91ef-3ebf-a9d1-8e5e24b437cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2f:b0:f5:e4:6a:70:03:b7:3a:5c:ba:80:b0:3d:de:6e:96: 60:3c:41:71:10:6b:20:74:a9:cf:3b:41:11:50:c0:66:f2:e1: 27:f0:d9:a6:6d:bb:61:01:24:ac:24:f0:1c:cf:c7:fd:f8:27: db:c6:e2:a9:89:27:86:6f:d5:8c:ef:1d:71:49:f0:6f:ab:78: 3f:43:2e:87:92:52:5e:f1:51:be:12:f6:f5:f1:2b:f3:8b:97: 88:2c:78:1e:a3:73:90:fa:f1:30:2f:b5:fe:15:43:c1:20:8c: ed:16:15:83:09:6a:7d:2f:3c:47:52:6f:26:04:98:fd:48:90: c4:22:3d:74:19:4e:e0:af:77:14:ee:a8:25:4d:25:14:18:e0: 58:14:a1:f3:e3:d5:bc:c9:82:50:51:86:d4:3a:cb:22:4e:09: f5:19:b9:f9:35:bb:ee:2e:e8:3f:fa:4e:c3:c0:e0:7e:67:00: dd:11:88:27:7e:a3:dd:ff:2b:69:4c:ca:3a:92:cc:e8:8b:b7: 95:b5:77:f6:84:06:f9:d0:c2:da:50:a1:88:39:11:50:93:e7: c2:4e:eb:e5:bf:c8:01:81:52:60:d0:81:ef:a1:f4:59:e9:21: c9:89:a8:d8:d0:7c:27:a9:25:ff:23:7b:d8:41:54:2b:93:8e: 50:a3:cb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/X8Tl1CLsbE6LChGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTExNTAyMDAxMloXDTI3MDIxMzAyMDAxMlowLzEtMCsGA1UEAxMk Mzk5ODBmZWQtMTdlZC00ZjE5LTg4NDQtNWY1MDViMjA0ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHX1XrmmOfenu9AwOhjjj9RAp0T5z//O7MDm 7yWHovOEEsy0eFS43JTUY6IP4Uui4Mv+bdAXsxvp9CpJly8mKIbZrJMV8DlgtZcW 6hbouc6902hYZl3vgzUJBi/mmn84b80/yiIlOGGQM8xsxsbogFaEpxsKQt0b+Z0l SE0LNcS1j93Ghp/1qeEuT1XtOz4k1QFI8epHRKH2qXztqNyCvKJ+RkbVBa21KseX hFKLBkFRhq8Hv/vrUbgShuoKOtxniNlEjV8klmGFC6qKzlWVhY21fMTP/2dfcwjS BBiOh9y3XMbDW2Abp7e94cmID4dExsmQox//OetYAeK83JE8HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaxgQjT9HoHzE5D55rlEjrBbDKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWQ1ZDM2M2MtOTFlZi0z ZWJmLWE5ZDEtOGU1ZTI0YjQzN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkvsPXkanADtzpcuoCwPd5ulmA8QXEQayB0qc87QRFQwGby4Sfw2aZt u2EBJKwk8BzPx/34J9vG4qmJJ4Zv1YzvHXFJ8G+reD9DLoeSUl7xUb4S9vXxK/OL l4gseB6jc5D68TAvtf4VQ8EgjO0WFYMJan0vPEdSbyYEmP1IkMQiPXQZTuCvdxTu qCVNJRQY4FgUofPj1bzJglBRhtQ6yyJOCfUZufk1u+4u6D/6TsPA4H5nAN0RiCd+ o93/K2lMyjqSzOiLt5W1d/aEBvnQwtpQoYg5EVCT58JO6+W/yAGBUmDQge+h9Fnp IcmJqNjQfCepJf8je9hBVCuTjlCjy7Q= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:37 2026 by rpki-client