$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa File: 28c108a8-055a-3386-8983-b364c0e31f14.roa (raw, json) Hash identifier: njhNqrPQhxTsLYM+NoFbEbwMreWvhQtgxZw15bKUiHc= Subject key identifier: 5F:02:CB:DD:FC:3C:2B:F3:97:69:18:38:A4:E8:45:88:F7:B2:D2:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49734F4A0012A1A29CF6FF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4f:4a:00:12:a1:a2:9c:f6:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9ec9b63-b80d-4d80-9a30-b19edf911566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:18:6e:a2:b6:f6:16:cf:33:55:ab:de:e8: b1:02:02:cd:39:0a:86:f1:04:22:b4:c4:1b:7c:a9: 7e:74:c0:14:64:d4:c2:ec:5a:cc:49:5a:00:0a:5c: 2a:59:9d:79:56:b2:95:46:2b:e8:c1:11:1f:33:2e: c0:8a:ef:cf:8f:e6:43:f9:b6:79:71:b2:d2:39:38: 62:db:af:af:15:d3:64:b4:45:30:a6:f0:d7:82:5f: e6:8f:5a:2a:69:60:8f:b6:7d:db:86:9c:16:6c:d5: 5a:c7:67:5f:55:8a:52:52:27:81:20:d2:a0:93:4c: 08:75:80:8a:b6:ef:32:aa:68:1c:7b:bc:0d:92:00: 34:93:cc:3e:92:21:3c:5a:f1:df:92:f8:ff:c9:53: 88:d4:12:11:4f:97:bd:4e:36:16:81:88:fb:27:50: 5f:06:34:a2:37:f1:36:86:1c:c4:61:9d:f8:eb:27: 7c:34:73:6a:4d:2d:a3:f4:58:76:b4:94:55:ec:55: 0d:36:55:bb:03:c3:3c:92:56:f8:63:ac:45:7e:66: 6d:7b:f6:b0:25:e4:81:b8:02:72:86:db:31:8b:db: b0:12:97:6d:e1:cc:c0:71:8c:e2:21:fd:c3:cd:23: 79:bd:68:1d:8b:10:f2:35:81:07:8b:5e:27:59:d5: 60:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:CB:DD:FC:3C:2B:F3:97:69:18:38:A4:E8:45:88:F7:B2:D2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:21:ac:b2:c9:19:8c:cf:e1:30:e5:a4:86:03:dc:96:51:06: 55:cd:05:e3:af:c4:05:6e:cb:d7:fd:21:ed:4b:e7:be:37:80: ba:18:75:a7:1b:7d:cb:6e:6b:e1:d1:77:04:2a:ac:e9:9a:d5: d1:cc:a4:73:9a:2e:16:68:1b:35:92:48:a7:6c:9a:c4:c6:ad: b4:34:8b:b0:c7:87:bc:67:9a:b4:01:b6:52:e2:8d:fc:ef:cc: a7:c7:06:e3:40:88:5e:1b:f6:77:97:6e:8d:e2:68:41:aa:e0: c8:e1:9b:32:cb:da:42:c9:95:04:4d:3c:9e:0e:38:a2:56:10: 94:3c:95:f9:d7:e6:55:7c:5a:fa:52:b2:21:2b:8c:aa:28:24: 33:d1:02:34:18:93:95:3e:ac:db:0d:09:7c:07:2a:dc:a7:1a: cc:10:56:c9:eb:10:4c:c0:f0:d6:43:32:97:6c:40:60:6f:74: 6b:4c:a7:d8:55:d2:ef:ee:fc:71:e9:d5:4a:9d:24:8e:d5:0f: c6:85:ef:12:c9:6a:36:f0:92:d4:11:84:65:20:f3:69:9b:a2: 29:e2:8a:8e:08:9e:bf:74:aa:e3:04:ff:20:8a:61:2a:e3:7a: ff:7f:3f:36:51:06:db:3d:11:82:87:d2:5b:43:9a:dd:4c:c2: a5:2b:c6:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc09KABKhopz2/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzllYzliNjMtYjgwZC00ZDgwLTlhMzAtYjE5ZWRmOTExNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiroYbqK29hbPM1Wr3uixAgLNOQqG8QQitMQb fKl+dMAUZNTC7FrMSVoAClwqWZ15VrKVRivowREfMy7Aiu/Pj+ZD+bZ5cbLSOThi 26+vFdNktEUwpvDXgl/mj1oqaWCPtn3bhpwWbNVax2dfVYpSUieBINKgk0wIdYCK tu8yqmgce7wNkgA0k8w+kiE8WvHfkvj/yVOI1BIRT5e9TjYWgYj7J1BfBjSiN/E2 hhzEYZ346yd8NHNqTS2j9Fh2tJRV7FUNNlW7A8M8klb4Y6xFfmZte/awJeSBuAJy htsxi9uwEpdt4czAcYziIf3DzSN5vWgdixDyNYEHi14nWdVgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8Cy938PCvzl2kYOKToRYj3stLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhjMTA4YTgtMDU1YS0z Mzg2LTg5ODMtYjM2NGMwZTMxZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYhrLLJGYzP4TDlpIYD3JZRBlXNBeOvxAVuy9f9Ie1L5743gLoYdacb fctua+HRdwQqrOma1dHMpHOaLhZoGzWSSKdsmsTGrbQ0i7DHh7xnmrQBtlLijfzv zKfHBuNAiF4b9neXbo3iaEGq4MjhmzLL2kLJlQRNPJ4OOKJWEJQ8lfnX5lV8WvpS siErjKooJDPRAjQYk5U+rNsNCXwHKtynGswQVsnrEEzA8NZDMpdsQGBvdGtMp9hV 0u/u/HHp1UqdJI7VD8aF7xLJajbwktQRhGUg82mboiniio4Inr90quME/yCKYSrj ev9/PzZRBts9EYKH0ltDmt1MwqUrxhg= -----END CERTIFICATE-----Generated at Sat Oct 3 13:26:04 2026 by rpki-client