$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa File: 295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa (raw, json) Hash identifier: 8WAE2+rooTl4efHmBqP6H39zUuo8xfzvzkC0jkAF+r4= Subject key identifier: 7C:46:33:82:C7:04:38:CE:50:83:BC:13:B3:AE:F2:BA:E2:7E:CD:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974E416101392DE96F54580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e4:16:10:13:92:de:96:f5:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c47e45a4-7a7d-4e97-97fd-ff9a9374a6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:7e:ee:6c:ea:b0:cd:1c:f0:5c:5b:74:50: f9:43:75:f7:2f:b5:c0:09:85:0a:29:06:f9:a4:eb: 2b:c7:ed:eb:36:4a:84:31:c6:02:62:fb:50:3d:a1: 79:38:3d:99:a0:56:85:3e:81:4c:85:75:1b:21:19: 90:8d:11:f9:69:4f:13:78:8e:3a:dc:53:e3:e9:fe: 7a:2f:9e:40:07:0f:63:d4:d4:c5:f4:e9:53:ef:83: 49:33:dc:d0:48:ca:b5:b8:bd:00:56:9e:61:ee:9b: a4:29:22:a6:6b:e3:ea:6d:ac:51:09:76:ec:c0:e4: 8a:fc:9a:80:ed:fe:c1:8b:9f:39:f1:89:55:eb:d0: 22:e3:6e:01:5c:77:fb:9f:45:94:c3:1c:7e:8c:42: f9:d1:6a:0a:8c:57:7b:ae:0f:0a:e2:0f:b1:63:a1: 61:37:10:c9:7f:5a:27:14:79:6d:bb:ac:29:fd:2b: dd:f0:d8:63:84:42:81:f4:9a:f3:85:7a:cc:9b:f3: 0d:98:70:f3:0f:59:4b:d7:5c:c0:be:04:3f:e6:11: 96:59:83:64:d8:49:18:de:39:72:35:ab:97:4e:c5: 89:27:6a:96:1b:ee:f2:d8:06:be:9e:b3:ac:1c:4f: aa:27:f8:14:66:0f:b8:1d:be:24:cf:d1:0d:e8:a8: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:33:82:C7:04:38:CE:50:83:BC:13:B3:AE:F2:BA:E2:7E:CD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5b:bf:4e:35:e0:ff:59:13:bb:27:4e:ac:5d:cf:57:7a:a0: 04:3d:92:fb:f1:a8:8d:a8:5a:57:69:f1:fa:27:f1:6f:06:24: 6e:77:d1:bd:a5:02:f8:75:4d:48:c1:01:e9:aa:91:5c:17:08: 09:e4:29:97:cb:58:2f:c4:57:d1:fe:d4:df:12:6f:6e:18:f8: 69:5e:b7:2d:82:78:f1:75:23:56:f0:c0:6a:dd:4c:55:fd:6f: d6:a5:b9:f3:da:81:1b:d2:8b:f7:65:22:2c:43:40:6b:d3:e4: 8c:46:84:1e:e8:d9:5c:58:b2:15:f7:bf:21:96:84:d4:db:11: 54:19:3e:ff:e2:63:48:5f:65:95:6e:de:3e:65:b7:f4:25:22: 71:e4:c1:12:be:cd:99:de:d4:6e:f0:34:69:cc:ba:67:5b:fc: d3:cc:62:45:b2:7f:ef:08:e0:a2:5c:5c:13:02:a9:95:a9:21: f8:9a:6b:13:c3:63:0c:fb:4b:70:37:34:8d:21:82:16:9d:4a: 19:47:43:bf:01:89:9b:50:fe:df:83:c1:f6:d3:49:c1:f5:dc: c6:c9:94:a3:ab:6e:de:e5:c0:c8:f8:5b:1c:a0:04:cb:6b:e5: 0c:62:76:7c:61:5a:30:50:e9:45:2d:85:22:e5:a4:ff:a1:9e: 65:cd:db:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOQWEBOS3pb1RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQ3ZTQ1YTQtN2E3ZC00ZTk3LTk3ZmQtZmY5YTkzNzRhNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH9+7mzqsM0c8FxbdFD5Q3X3L7XACYUKKQb5 pOsrx+3rNkqEMcYCYvtQPaF5OD2ZoFaFPoFMhXUbIRmQjRH5aU8TeI463FPj6f56 L55ABw9j1NTF9OlT74NJM9zQSMq1uL0AVp5h7pukKSKma+PqbaxRCXbswOSK/JqA 7f7Bi5858YlV69Ai424BXHf7n0WUwxx+jEL50WoKjFd7rg8K4g+xY6FhNxDJf1on FHltu6wp/Svd8NhjhEKB9JrzhXrMm/MNmHDzD1lL11zAvgQ/5hGWWYNk2EkY3jly NauXTsWJJ2qWG+7y2Aa+nrOsHE+qJ/gUZg+4Hb4kz9EN6KiuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxGM4LHBDjOUIO8E7Ou8rrifs0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk1Y2IzYjMtMGFjZS0z NmU1LTk1NTAtNGIzMmI3YTQ2NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZbv0414P9ZE7snTqxdz1d6oAQ9kvvxqI2oWldp8fon8W8GJG530b2l Avh1TUjBAemqkVwXCAnkKZfLWC/EV9H+1N8Sb24Y+Glety2CePF1I1bwwGrdTFX9 b9alufPagRvSi/dlIixDQGvT5IxGhB7o2VxYshX3vyGWhNTbEVQZPv/iY0hfZZVu 3j5lt/QlInHkwRK+zZne1G7wNGnMumdb/NPMYkWyf+8I4KJcXBMCqZWpIfiaaxPD Ywz7S3A3NI0hghadShlHQ78BiZtQ/t+DwfbTScH13MbJlKOrbt7lwMj4WxygBMtr 5QxidnxhWjBQ6UUthSLlpP+hnmXN2zY= -----END CERTIFICATE-----Generated at Mon Sep 28 14:19:05 2026 by rpki-client